[ 
https://issues.apache.org/jira/browse/AMBARI-22629?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Robert Levas reassigned AMBARI-22629:
-------------------------------------

    Assignee: Eugene Chekanskiy  (was: Robert Levas)

> Disabling Kerberos after enabled during Blueprint install fails with missing 
> data directory error
> -------------------------------------------------------------------------------------------------
>
>                 Key: AMBARI-22629
>                 URL: https://issues.apache.org/jira/browse/AMBARI-22629
>             Project: Ambari
>          Issue Type: Bug
>          Components: ambari-server
>    Affects Versions: 2.6.0
>            Reporter: Robert Levas
>            Assignee: Eugene Chekanskiy
>              Labels: blueprints, kerberos
>             Fix For: 2.6.2
>
>         Attachments: blueprint_single_node_zk.json, 
> cluster_template_single_node_zk.json, screenshot-error-dialog.png
>
>
> Disabling Kerberos after enabled during Blueprint install fails with missing 
> data directory error:
> {noformat}
> The data directory has not been set.  Generated data can not be stored.
> {noformat}
> !screenshot-error-dialog.png!
> This is caused by an invalid security state set for the installed components 
> since the appropriate state is not set while enabling Kerberos during the 
> installation process:
> {noformat}
> ambari=> select * from hostcomponentstate;
>  id | cluster_id |  component_name  |   version    | current_state | host_id 
> | service_name | upgrade_state | security_state
> ----+------------+------------------+--------------+---------------+---------+--------------+---------------+----------------
>   1 |          2 | KERBEROS_CLIENT  | UNKNOWN      | INSTALLED     |       1 
> | KERBEROS     | NONE          | UNSECURED
>   2 |          2 | ZOOKEEPER_CLIENT | 2.5.0.0-1245 | INSTALLED     |       1 
> | ZOOKEEPER    | NONE          | UNSECURED
>   3 |          2 | ZOOKEEPER_SERVER | 2.5.0.0-1245 | STARTED       |       1 
> | ZOOKEEPER    | NONE          | UNSECURED
> {noformat}
> The expected state for each component is {{SECURED}}, not {{UNSECURED}}. 
> Because of this, Ambari _thinks_ there is no work to be done, causing this 
> issue. 
> *Steps to reproduce*:
> # Setup Ambari, ensure KDC is installed on some host and Kerberos client libs 
> are installed on the Ambari server host with the krb5.conf setup properly
> # Install Blueprint - [^blueprint_single_node_zk.json]
> # Create clister - [^cluster_template_single_node_zk.json]
> # When cluster is created, Kerberos should be enabled and all services up
> # Disable Kerberos - error occurs during Unkerberize Cluster task.



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)

Reply via email to