[
https://issues.apache.org/jira/browse/AMBARI-12082?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Robert Levas updated AMBARI-12082:
----------------------------------
Attachment: AMBARI-12082_01.patch
> Ambari agent temp directory has wrong permissions on ambari-server host
> -----------------------------------------------------------------------
>
> Key: AMBARI-12082
> URL: https://issues.apache.org/jira/browse/AMBARI-12082
> Project: Ambari
> Issue Type: Bug
> Components: ambari-agent
> Affects Versions: 2.1.0
> Reporter: Robert Levas
> Assignee: Robert Levas
> Priority: Critical
> Fix For: 2.1.0
>
> Attachments: AMBARI-12082_01.patch
>
>
> The Ambari agent temp directory (typically /var/lib/ambari-agent/data/tmp)
> has the incorrect permissions on the Ambari server host. This is causing web
> alert errors on SUSE 11.3 for tests that do not run as root when Kerberos is
> enabled. The issues appears to be masked on other platforms.
> The permissions should be 777 but appear to be 655.
> {noformat:title=Ambari server host}
> $ ls -ld /var/lib/ambari-agent/data/tmp
> drwxr-xr-x. 6 root root 4096 Jun 22 23:08 /var/lib/ambari-agent/data/tmp
> {noformat}
> {noformat:title=Ambari agent host}
> # ls -ld /var/lib/ambari-agent/data/tmp
> drwxrwxrwx. 7 root root 4096 Jun 22 23:08 /var/lib/ambari-agent/data/tmp
> {noformat}
> An example of the related errror found in the alert message on a SUSE 11.3
> cluster
> {noformat}
> Connection failed to http://HOST:50070 (Execution of '/usr/bin/kinit -l 5m -c
> /var/lib/ambari-agent/data/tmp/web_alert_cc_66ba10499e9d406dec0c7f30fda53f8f
> -kt /etc/security/keytabs/spnego.service.keytab HTTP/h...@example.com >
> /dev/null' returned 1. kinit(v5): Credentials cache permissions incorrect
> when initializing cache
> /var/lib/ambari-agent/data/tmp/web_alert_cc_66ba10499e9d406dec0c7f30fda53f8f)
> {noformat}
> Errors are seen for HDFS and Yarn after Kerberos is enabled on the cluster.
> *Steps to reproduce:*
> # Install ambari-sever and ambari-agent packages - {{yum -y install
> ambari-agent ambari-server}}
> ** {noformat}
> # ls -ld /var/lib/ambari-agent/data/tmp/
> drwxrwxrwx. 2 root root 4096 Jun 22 22:33 /var/lib/ambari-agent/data/tmp/
> {noformat}
> # Setup Ambari server - {{ambari-server setup -s}}
> ** {noformat}
> # ls -ld /var/lib/ambari-agent/data/tmp/
> drwxrwxrwx. 2 root root 4096 Jun 22 22:33 /var/lib/ambari-agent/data/tmp/
> {noformat}
> # Start Ambari server - {{ambari-server start}}
> ** {noformat}
> # ls -ld /var/lib/ambari-agent/data/tmp/
> drwxrwxrwx. 2 root root 4096 Jun 22 22:33 /var/lib/ambari-agent/data/tmp/
> {noformat}
> # Create cluster
> ** After 'Confirm Hosts' page completes:
> ** {noformat}
> # ls -ld /var/lib/ambari-agent/data/tmp/
> drwxr-xr-x. 3 root root 4096 Jun 22 23:47 /var/lib/ambari-agent/data/tmp/
> {noformat}
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
