You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@ambari.apache.org by "Hadoop QA (JIRA)" <ji...@apache.org> on 2015/09/24 16:53:04 UTC
[jira] [Commented] (AMBARI-13222) kdc_type lost when updating
kerberos-env via Kerberos service configuration page
[ https://issues.apache.org/jira/browse/AMBARI-13222?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14906447#comment-14906447 ]
Hadoop QA commented on AMBARI-13222:
------------------------------------
{color:red}-1 overall{color}. Here are the results of testing the latest attachment
http://issues.apache.org/jira/secure/attachment/12762139/AMBARI-13222_trunk_01.patch
against trunk revision .
{color:green}+1 @author{color}. The patch does not contain any @author tags.
{color:red}-1 tests included{color}. The patch doesn't appear to include any new or modified tests.
Please justify why no new tests are needed for this patch.
Also please list what manual steps were performed to verify this patch.
{color:green}+1 javac{color}. The applied patch does not increase the total number of javac compiler warnings.
{color:green}+1 release audit{color}. The applied patch does not increase the total number of release audit warnings.
{color:green}+1 core tests{color}. The patch passed unit tests in .
Test results: https://builds.apache.org/job/Ambari-trunk-test-patch/3847//testReport/
Console output: https://builds.apache.org/job/Ambari-trunk-test-patch/3847//console
This message is automatically generated.
> kdc_type lost when updating kerberos-env via Kerberos service configuration page
> --------------------------------------------------------------------------------
>
> Key: AMBARI-13222
> URL: https://issues.apache.org/jira/browse/AMBARI-13222
> Project: Ambari
> Issue Type: Bug
> Components: ambari-web
> Affects Versions: 2.1.1
> Reporter: Robert Levas
> Assignee: Robert Levas
> Priority: Critical
> Labels: regression
> Fix For: 2.1.2
>
> Attachments: AMBARI-13222_branch-2.1.2_01.patch, AMBARI-13222_branch-2.1_01.patch, AMBARI-13222_trunk_01.patch
>
>
> After editing the kerberos-env configuration using Ambari's Kerberos service configuration page and saving the new configuration, the {{kdc_type}} property is lost and not saved with the new configuration.
> *By loosing this value, any future Kerberos-related operations will fail with errors since the mandatory kerberos-env/kdc_type property will be missing.*
> {code:title=kerberos-env before update}
> {
> "kdc_type": "mit-kdc",
> "password_min_uppercase_letters": "1",
> "password_min_whitespace": "0",
> "password_min_punctuation": "1",
> "password_min_digits": "1",
> "encryption_types": "aes des3-cbc-sha1 rc4 des-cbc-md5",
> "kdc_create_attributes": "",
> "admin_server_host": "host1",
> "password_min_lowercase_letters": "1",
> "container_dn": "",
> "password_length": "20",
> "case_insensitive_username_rules": "false",
> "manage_identities": "true",
> "service_check_principal_name": "${cluster_name}-${short_date}",
> "kdc_host": "host1",
> "ad_create_attributes_template": "\n{\n \"objectClass\": [\"top\", \"person\", \"organizationalPerson\", \"user\"],\n \"cn\": \"$principal_name\",\n #if( $is_service )\n \"servicePrincipalName\": \"$principal_name\",\n #end\n \"userPrincipalName\": \"$normalized_principal\",\n \"unicodePwd\": \"$password\",\n \"accountExpires\": \"0\",\n \"userAccountControl\": \"66048\"\n}",
> "install_packages": "true",
> "realm": "EXAMPLE.COM",
> "ldap_url": "",
> "executable_search_paths": "/usr/bin, /usr/kerberos/bin, /usr/sbin, /usr/lib/mit/bin, /usr/lib/mit/sbin"
> }
> {code}
> {code:title=kerberos-env after update}
> {
> "password_min_uppercase_letters": "1",
> "password_min_whitespace": "0",
> "password_min_punctuation": "1",
> "password_min_digits": "1",
> "encryption_types": "aes des3-cbc-sha1 rc4 des-cbc-md5",
> "kdc_create_attributes": "",
> "admin_server_host": "hist1:88",
> "password_min_lowercase_letters": "1",
> "container_dn": "",
> "password_length": "20",
> "case_insensitive_username_rules": "false",
> "manage_identities": "true",
> "service_check_principal_name": "${cluster_name}-${short_date}",
> "kdc_host": "host1:88",
> "ad_create_attributes_template": "\n{\n \"objectClass\": [\"top\", \"person\", \"organizationalPerson\", \"user\"],\n \"cn\": \"$principal_name\",\n #if( $is_service )\n \"servicePrincipalName\": \"$principal_name\",\n #end\n \"userPrincipalName\": \"$normalized_principal\",\n \"unicodePwd\": \"$password\",\n \"accountExpires\": \"0\",\n \"userAccountControl\": \"66048\"\n}",
> "install_packages": "true",
> "realm": "EXAMPLE.COM",
> "ldap_url": "",
> "executable_search_paths": "/usr/bin, /usr/kerberos/bin, /usr/sbin, /usr/lib/mit/bin, /usr/lib/mit/sbin"
> }
> {code}
> {code:title=Javascript Error}
> Uncaught TypeError: Cannot read property 'get' of undefined
> App.MainServiceInfoConfigsController.Em.Controller.extend.prepareConfigObjects @ app.js:22525
> App.MainServiceInfoConfigsController.Em.Controller.extend.parseConfigData @ app.js:22490
> App.ConfigsLoader.Em.Mixin.create.loadCurrentVersionsSuccess @ app.js:61506
> Em.Object.extend.send.opt.success @ app.js:154010
> f.Callbacks.o @ vendor.js:125
> f.Callbacks.p.fireWith @ vendor.js:125
> w @ vendor.js:127
> f.support.ajax.f.ajaxTransport.c.send.d @ vendor.js:127
> app.js:55160 App.componentConfigMapper execution time: 1.048ms
> {code}
> *Steps to reproduce*
> # Create cluster (Zookeeper-only is fine)
> # Enable Kerberos (any KDC, MIT KDC is fine)
> # Browse to Kerberos service configuration page
> # Change a value (maybe add or remove the port for the KDC server value)
> # Save the configuration
> # After view refreshes, the waiting icon appears and does not go away
> *Workaround*
> Manually add the {{kerberos-env/kdc_type}} property back to the current kerberos-env configuration. The value must be either "mit-kdc" or "active-directory" and must be the correct one for the configuration. Once this is done, Ambari should be restarted so that any cached configuration data is refreshed.
> This can also be fixed using {{/var/lib/ambari-server/resources/scripts/configs.sh}}.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)