-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/35751/#review88883
-----------------------------------------------------------

Ship it!


Ship It!

- Tom Beerbower


On June 23, 2015, 12:09 a.m., Robert Levas wrote:
> 
> -----------------------------------------------------------
> This is an automatically generated e-mail. To reply, visit:
> https://reviews.apache.org/r/35751/
> -----------------------------------------------------------
> 
> (Updated June 23, 2015, 12:09 a.m.)
> 
> 
> Review request for Ambari, Andrew Onischuk, Tom Beerbower, and Yusaku Sako.
> 
> 
> Bugs: AMBARI-12082
>     https://issues.apache.org/jira/browse/AMBARI-12082
> 
> 
> Repository: ambari
> 
> 
> Description
> -------
> 
> The Ambari agent temp directory (typically /var/lib/ambari-agent/data/tmp) 
> has the incorrect permissions on the Ambari server host. This is causing web 
> alert errors on SUSE 11.3 for tests  that do not run as root when Kerberos is 
> enabled.  The issues appears to be masked on other platforms. 
> 
> The permissions should be 777 but appear to be 655.
> 
> _Ambari server host_
> ```
> # ls -ld /var/lib/ambari-agent/data/tmp
> drwxr-xr-x. 6 root root 4096 Jun 22 23:08 /var/lib/ambari-agent/data/tmp
> ```
> 
> _Ambari agent host_
> ```
> # ls -ld /var/lib/ambari-agent/data/tmp
> drwxrwxrwx. 7 root root 4096 Jun 22 23:08 /var/lib/ambari-agent/data/tmp
> ```
> 
> An example of the related errror found in the alert message on a SUSE 11.3 
> cluster 
> ```
> Connection failed to http://HOST:50070 (Execution of '/usr/bin/kinit -l 5m -c 
> /var/lib/ambari-agent/data/tmp/web_alert_cc_66ba10499e9d406dec0c7f30fda53f8f 
> -kt /etc/security/keytabs/spnego.service.keytab HTTP/[email protected] > 
> /dev/null' returned 1. kinit(v5): Credentials cache permissions incorrect 
> when initializing cache 
> /var/lib/ambari-agent/data/tmp/web_alert_cc_66ba10499e9d406dec0c7f30fda53f8f)
> ```
> 
> Errors are seen for HDFS and Yarn after Kerberos is enabled on the cluster. 
> 
> #Steps to reproduce:
> 1. Install ambari-sever and ambari-agent packages - `yum -y install 
> ambari-agent ambari-server`
> ```
> # ls -ld /var/lib/ambari-agent/data/tmp/
> drwxrwxrwx. 2 root root 4096 Jun 22 22:33 /var/lib/ambari-agent/data/tmp/
> ```
> 2. Setup Ambari server - `ambari-server setup -s`
> ```
> # ls -ld /var/lib/ambari-agent/data/tmp/
> drwxrwxrwx. 2 root root 4096 Jun 22 22:33 /var/lib/ambari-agent/data/tmp/
> ```
> 3.  Start Ambari server - `ambari-server start`
> ```
> # ls -ld /var/lib/ambari-agent/data/tmp/
> drwxrwxrwx. 2 root root 4096 Jun 22 22:33 /var/lib/ambari-agent/data/tmp/
> ```
> 4. Create cluster
> -- After 'Confirm Hosts' page completes:  
> ```
> # ls -ld /var/lib/ambari-agent/data/tmp/
> drwxr-xr-x. 3 root root 4096 Jun 22 23:47 /var/lib/ambari-agent/data/tmp/
> ```
> 
> 
> Diffs
> -----
> 
>   ambari-agent/pom.xml 0dedc8d 
> 
> Diff: https://reviews.apache.org/r/35751/diff/
> 
> 
> Testing
> -------
> 
> 
> Thanks,
> 
> Robert Levas
> 
>

Reply via email to