You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@ambari.apache.org by "Robert Levas (JIRA)" <ji...@apache.org> on 2018/02/13 16:00:00 UTC

[jira] [Commented] (AMBARI-22977) NullPointerException in KerberosHelperImpl.addIdentities

    [ https://issues.apache.org/jira/browse/AMBARI-22977?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16362547#comment-16362547 ] 

Robert Levas commented on AMBARI-22977:
---------------------------------------

[~amagyar], [~echekanskiy]...

Not specifying user or group ownership of a keytab file in the Kerberos descriptor is allowed... however it is not recommended.  So nulls should be handled.  

If no username or group is specified, the agent-side logic will not attempt to set them or set access to them. See {{ambari-common/src/main/python/ambari_commons/kerberos/kerberos_common.py:107}}.




> NullPointerException in KerberosHelperImpl.addIdentities
> --------------------------------------------------------
>
>                 Key: AMBARI-22977
>                 URL: https://issues.apache.org/jira/browse/AMBARI-22977
>             Project: Ambari
>          Issue Type: Bug
>          Components: ambari-server
>    Affects Versions: 2.7.0
>            Reporter: Attila Magyar
>            Assignee: Attila Magyar
>            Priority: Major
>             Fix For: 2.7.0
>
>
> If a group name or group access is missing from a kerberos descriptor ambari will throw an NPE during enable kerberos
> {code:java}
> 13 Feb 2018 11:27:37,466  WARN [Server Action Executor Worker 39] ServerActionExecutor:471 - Task #39 failed to complete execution due to thrown exception: java.lang.NullPointerException:null
> java.lang.NullPointerException
> 	at org.apache.ambari.server.controller.KerberosHelperImpl.addIdentities(KerberosHelperImpl.java:1601)
> 	at org.apache.ambari.server.serveraction.kerberos.AbstractPrepareKerberosServerAction.processServiceComponents(AbstractPrepareKerberosServerAction.java:177)
> 	at org.apache.ambari.server.serveraction.kerberos.AbstractPrepareKerberosServerAction.processServiceComponentHosts(AbstractPrepareKerberosServerAction.java:87)
> 	at org.apache.ambari.server.serveraction.kerberos.PrepareKerberosIdentitiesServerAction.execute(PrepareKerberosIdentitiesServerAction.java:128)
> 	at org.apache.ambari.server.serveraction.ServerActionExecutor$Worker.execute(ServerActionExecutor.java:550)
> 	at org.apache.ambari.server.serveraction.ServerActionExecutor$Worker.run(ServerActionExecutor.java:466)
> 	at java.lang.Thread.run(Thread.java:748){code}



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)