You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@ambari.apache.org by sw...@apache.org on 2018/11/26 22:37:30 UTC

[ambari] branch branch-2.7 updated: AMBARI-24874 : Storm Service Check fail with 'The TGT found is not renewable' (#2638)

This is an automated email from the ASF dual-hosted git repository.

swagle pushed a commit to branch branch-2.7
in repository https://gitbox.apache.org/repos/asf/ambari.git


The following commit(s) were added to refs/heads/branch-2.7 by this push:
     new d0360c8  AMBARI-24874 : Storm Service Check fail with 'The TGT found is not renewable' (#2638)
d0360c8 is described below

commit d0360c81448f562cd104e4e79910779809c95be6
Author: Rajkumar Singh <ra...@gmail.com>
AuthorDate: Mon Nov 26 14:37:26 2018 -0800

    AMBARI-24874 : Storm Service Check fail with 'The TGT found is not renewable' (#2638)
---
 .../STORM/0.9.1/package/scripts/service_check.py              | 11 +++++++++++
 1 file changed, 11 insertions(+)

diff --git a/ambari-server/src/main/resources/common-services/STORM/0.9.1/package/scripts/service_check.py b/ambari-server/src/main/resources/common-services/STORM/0.9.1/package/scripts/service_check.py
index 80ea0f5..52f73ed 100644
--- a/ambari-server/src/main/resources/common-services/STORM/0.9.1/package/scripts/service_check.py
+++ b/ambari-server/src/main/resources/common-services/STORM/0.9.1/package/scripts/service_check.py
@@ -49,6 +49,12 @@ class ServiceCheckDefault(ServiceCheck):
     import params
     env.set_params(params)
 
+    if params.security_enabled:
+        kinit_cmd = format(
+            "{kinit_path_local} -kt {storm_keytab_path} {storm_jaas_principal}; ")
+    else:
+        kinit_cmd = ""
+
     unique = get_unique_id_and_date()
 
     File("/tmp/wordCount.jar",
@@ -64,6 +70,11 @@ class ServiceCheckDefault(ServiceCheck):
     elif params.nimbus_host is not None:
       cmd = format("storm jar /tmp/wordCount.jar storm.starter.WordCountTopology WordCount{unique} -c nimbus.host={nimbus_host}")
 
+    # use client jaas for service check
+    if params.security_enabled:
+        storm_client_jaas_file = format("{conf_dir}/client_jaas.conf")
+        cmd = format("{kinit_cmd}{cmd} -c java.security.auth.login.config={storm_client_jaas_file}")
+
     Execute(cmd,
             logoutput=True,
             path=params.storm_bin_dir,