You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@ambari.apache.org by "Andrii Tkach (JIRA)" <ji...@apache.org> on 2014/11/13 16:05:38 UTC
[jira] [Commented] (AMBARI-8307) Perm 400 for spnego keytab, unable
to start webhcat
[ https://issues.apache.org/jira/browse/AMBARI-8307?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14209867#comment-14209867 ]
Andrii Tkach commented on AMBARI-8307:
--------------------------------------
committed to trunk and branch-1.7.0
> Perm 400 for spnego keytab, unable to start webhcat
> ---------------------------------------------------
>
> Key: AMBARI-8307
> URL: https://issues.apache.org/jira/browse/AMBARI-8307
> Project: Ambari
> Issue Type: Bug
> Components: ambari-web
> Affects Versions: 1.7.0
> Reporter: Andrii Tkach
> Assignee: Andrii Tkach
> Priority: Blocker
> Fix For: 1.7.0
>
> Attachments: AMBARI-8307.patch, AMBARI-8307_branch-1.7.0.patch
>
>
> We have a permissions issue on the /etc/security/keytabs/spnego.service.keytab when running /var/lib/ambari-server/resources/scripts/(kerberos-setup.sh|keytabs.sh).
> I have my Storm DRPC, Nimbus, and UI servers on the same host as my Hive components. The spnego.service.keytab is 400 when it should be 440:
> {code}
> [hcat@revo2 webhcat]$ stat /etc/security/keytabs/spnego.service.keytab
> File: `/etc/security/keytabs/spnego.service.keytab'
> Size: 4594 Blocks: 16 IO Block: 4096 regular file
> Device: fd00h/64768d Inode: 538521 Links: 1
> Access: (0400/-r--------) Uid: ( 507/ storm) Gid: ( 500/ hadoop)
> Access: 2014-11-11 11:40:00.626724368 -0600
> Modify: 2014-11-11 09:19:39.000000000 -0600
> Change: 2014-11-11 09:21:58.773876115 -0600
> {code}
> After changing it manually to 440 I can start WebHCat.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)