Robert Levas created AMBARI-12082:
-------------------------------------
Summary: Ambari agent temp directory has wrong permissions on
ambari-server host
Key: AMBARI-12082
URL: https://issues.apache.org/jira/browse/AMBARI-12082
Project: Ambari
Issue Type: Bug
Components: ambari-agent
Affects Versions: 2.1.0
Reporter: Robert Levas
Assignee: Robert Levas
Priority: Critical
Fix For: 2.1.0
Attachments: AMBARI-12082_01.patch
The Ambari agent temp directory (typically /var/lib/ambari-agent/data/tmp) has
the incorrect permissions on the Ambari server host. This is causing web alert
errors on SUSE 11.3 for tests that do not run as root when Kerberos is
enabled. The issues appears to be masked on other platforms.
The permissions should be 777 but appear to be 655.
{noformat:title=Ambari server host}
$ ls -ld /var/lib/ambari-agent/data/tmp
drwxr-xr-x. 6 root root 4096 Jun 22 23:08 /var/lib/ambari-agent/data/tmp
{noformat}
{noformat:title=Ambari agent host}
# ls -ld /var/lib/ambari-agent/data/tmp
drwxrwxrwx. 7 root root 4096 Jun 22 23:08 /var/lib/ambari-agent/data/tmp
{noformat}
An example of the related errror found in the alert message on a SUSE 11.3
cluster
{noformat}
Connection failed to http://HOST:50070 (Execution of '/usr/bin/kinit -l 5m -c
/var/lib/ambari-agent/data/tmp/web_alert_cc_66ba10499e9d406dec0c7f30fda53f8f
-kt /etc/security/keytabs/spnego.service.keytab HTTP/h...@example.com >
/dev/null' returned 1. kinit(v5): Credentials cache permissions incorrect when
initializing cache
/var/lib/ambari-agent/data/tmp/web_alert_cc_66ba10499e9d406dec0c7f30fda53f8f)
{noformat}
Errors are seen for HDFS and Yarn after Kerberos is enabled on the cluster.
*Steps to reproduce:*
# Install ambari-sever and ambari-agent packages - {{yum -y install
ambari-agent ambari-server}}
** {noformat}
# ls -ld /var/lib/ambari-agent/data/tmp/
drwxrwxrwx. 2 root root 4096 Jun 22 22:33 /var/lib/ambari-agent/data/tmp/
{noformat}
# Setup Ambari server - {{ambari-server setup -s}}
** {noformat}
# ls -ld /var/lib/ambari-agent/data/tmp/
drwxrwxrwx. 2 root root 4096 Jun 22 22:33 /var/lib/ambari-agent/data/tmp/
{noformat}
# Start Ambari server - {{ambari-server start}}
** {noformat}
# ls -ld /var/lib/ambari-agent/data/tmp/
drwxrwxrwx. 2 root root 4096 Jun 22 22:33 /var/lib/ambari-agent/data/tmp/
{noformat}
# Create cluster
** After 'Confirm Hosts' page completes:
** {noformat}
# ls -ld /var/lib/ambari-agent/data/tmp/
drwxr-xr-x. 3 root root 4096 Jun 22 23:47 /var/lib/ambari-agent/data/tmp/
{noformat}
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
