Hi, Are you running your Ambari Server as non-root? https://issues.apache.org/jira/browse/AMBARI-10266
You might be hitting that BUG. On 4/17/15, 3:41 PM, "Frank Eisenhauer" <[email protected]> wrote: >Hi All, >I'm trying to enable Kerberos in Ambari 2.0.0 after upgrade from Ambari >1.7. > >During "Test Kerberos Client" I'm getting the error "Failed to create >keytab file for [email protected] - Failed to export keytab >file" > >The ambari-server.log states: >17 Apr 2015 21:41:29,601 INFO [Server Action Executor Worker 4215] >CreateKeytabFilesServerAction:170 - Creating keytab file for >ambari-qa_idheyfiu@BIGDATA$ >17 Apr 2015 21:41:29,636 ERROR [Server Action Executor Worker 4215] >KerberosOperationHandler:433 - Failed to export keytab file >java.io.FileNotFoundException: >/var/lib/ambari-server/data/tmp/.ambari_1429299679291-0.d/HADOOP-SRV01/4e6 >d850833d0d36946b1c5c5b260bec371c5247c >(Pe$ > at java.io.FileOutputStream.open(Native Method) > at java.io.FileOutputStream.<init>(FileOutputStream.java:221) > at >org.apache.directory.server.kerberos.shared.keytab.Keytab.writeFile(Keytab >.java:273) > at >org.apache.directory.server.kerberos.shared.keytab.Keytab.write(Keytab.jav >a:133) > at >org.apache.ambari.server.serveraction.kerberos.KerberosOperationHandler.cr >eateKeytabFile(KerberosOperationHandler.java:429) > at >org.apache.ambari.server.serveraction.kerberos.CreateKeytabFilesServerActi >on.processIdentity(CreateKeytabFilesServerAction.java:276) > at >org.apache.ambari.server.serveraction.kerberos.KerberosServerAction.proces >sRecord(KerberosServerAction.java:494) > at >org.apache.ambari.server.serveraction.kerberos.KerberosServerAction.proces >sIdentities(KerberosServerAction.java:386) > at >org.apache.ambari.server.serveraction.kerberos.CreateKeytabFilesServerActi >on.execute(CreateKeytabFilesServerAction.java:99) > at >org.apache.ambari.server.serveraction.ServerActionExecutor$Worker.execute( >ServerActionExecutor.java:504) > at >org.apache.ambari.server.serveraction.ServerActionExecutor$Worker.run(Serv >erActionExecutor.java:441) > at java.lang.Thread.run(Thread.java:744) >17 Apr 2015 21:41:29,637 ERROR [Server Action Executor Worker 4215] >CreateKeytabFilesServerAction:290 - Failed to create keytab file for >ambari-qa_idheyfiu$ >org.apache.ambari.server.serveraction.kerberos.KerberosOperationException: > >Failed to export keytab file > at >org.apache.ambari.server.serveraction.kerberos.KerberosOperationHandler.cr >eateKeytabFile(KerberosOperationHandler.java:439) > at >org.apache.ambari.server.serveraction.kerberos.CreateKeytabFilesServerActi >on.processIdentity(CreateKeytabFilesServerAction.java:276) > at >org.apache.ambari.server.serveraction.kerberos.KerberosServerAction.proces >sRecord(KerberosServerAction.java:494) > at >org.apache.ambari.server.serveraction.kerberos.KerberosServerAction.proces >sIdentities(KerberosServerAction.java:386) > at >org.apache.ambari.server.serveraction.kerberos.CreateKeytabFilesServerActi >on.execute(CreateKeytabFilesServerAction.java:99) > at >org.apache.ambari.server.serveraction.ServerActionExecutor$Worker.execute( >ServerActionExecutor.java:504) > at >org.apache.ambari.server.serveraction.ServerActionExecutor$Worker.run(Serv >erActionExecutor.java:441) > at java.lang.Thread.run(Thread.java:744) >Caused by: java.io.FileNotFoundException: >/var/lib/ambari-server/data/tmp/.ambari_1429299679291-0.d/HADOOP-SRV01/4e6 >d850833d0d36946b1c5c5b260bec37$ > at java.io.FileOutputStream.open(Native Method) > at java.io.FileOutputStream.<init>(FileOutputStream.java:221) > at >org.apache.directory.server.kerberos.shared.keytab.Keytab.writeFile(Keytab >.java:273) > at >org.apache.directory.server.kerberos.shared.keytab.Keytab.write(Keytab.jav >a:133) > at >org.apache.ambari.server.serveraction.kerberos.KerberosOperationHandler.cr >eateKeytabFile(KerberosOperationHandler.java:429) > ... 7 more > >I've found a Jira Log >"https://issues.apache.org/jira/browse/AMBARI-10266" but the mentioned >solution does not solve the issue. The permission denied exception still >occurs. >Ambari Server is running as root. >
