You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@ambari.apache.org by "Hudson (JIRA)" <ji...@apache.org> on 2019/08/06 06:59:00 UTC

[jira] [Commented] (AMBARI-25225) Zeppelin Restart via Ambari Changes Permissions on log folder which causes Permission issue for impersonated users

    [ https://issues.apache.org/jira/browse/AMBARI-25225?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16900698#comment-16900698 ] 

Hudson commented on AMBARI-25225:
---------------------------------

FAILURE: Integrated in Jenkins build Ambari-branch-2.6 #753 (See [https://builds.apache.org/job/Ambari-branch-2.6/753/])
AMBARI-25225 Zeppelin Restart via Ambari Changes Permissions on log (github: [https://gitbox.apache.org/repos/asf?p=ambari.git&a=commit&h=d85cf6a74664c2cd9e8e914d5ca0a8e53137021a])
* (edit) ambari-server/src/main/resources/common-services/ZEPPELIN/0.7.0/package/scripts/master.py


> Zeppelin Restart via Ambari Changes Permissions on log folder which causes Permission issue for impersonated users
> ------------------------------------------------------------------------------------------------------------------
>
>                 Key: AMBARI-25225
>                 URL: https://issues.apache.org/jira/browse/AMBARI-25225
>             Project: Ambari
>          Issue Type: Bug
>          Components: ambari-server
>    Affects Versions: 2.6.2
>            Reporter: Akhil S Naik
>            Assignee: Akhil S Naik
>            Priority: Major
>              Labels: pull-request-available
>          Time Spent: 1.5h
>  Remaining Estimate: 0h
>
> Problem Statement : I am Using User impersonation for some of interpreters in zeppelin , now that the interpreters write their own logs to the zeppelin log directory. This becomes impossible if the users do not have permissions to write to the zeppelin log directory. This is because while starting zeppelin the Ambari changes the permission of zeppelin log directory to 0755 which makes only Zeppelin user having having write permission in log directory.
> expectation with user impersonation is, all the impersonating users will belong to hadoop group (which is same as zeppelin, zeppelin also belong to hadoop) . So Zeppelin Startup script should give 0775 Permission to /var/log/zeppelin folder
> https://github.com/apache/ambari/blob/release-2.6.2/ambari-server/src/main/resources/common-services/ZEPPELIN/0.7.0/package/scripts/master.py#L104



--
This message was sent by Atlassian JIRA
(v7.6.14#76016)