This is an automated email from the ASF dual-hosted git repository.
swagle pushed a commit to branch branch-2.7
in repository https://gitbox.apache.org/repos/asf/ambari.git
The following commit(s) were added to refs/heads/branch-2.7 by this push:
new d0360c8 AMBARI-24874 : Storm Service Check fail with 'The TGT found
is not renewable' (#2638)
d0360c8 is described below
commit d0360c81448f562cd104e4e79910779809c95be6
Author: Rajkumar Singh <[email protected]>
AuthorDate: Mon Nov 26 14:37:26 2018 -0800
AMBARI-24874 : Storm Service Check fail with 'The TGT found is not
renewable' (#2638)
---
.../STORM/0.9.1/package/scripts/service_check.py | 11 +++++++++++
1 file changed, 11 insertions(+)
diff --git
a/ambari-server/src/main/resources/common-services/STORM/0.9.1/package/scripts/service_check.py
b/ambari-server/src/main/resources/common-services/STORM/0.9.1/package/scripts/service_check.py
index 80ea0f5..52f73ed 100644
---
a/ambari-server/src/main/resources/common-services/STORM/0.9.1/package/scripts/service_check.py
+++
b/ambari-server/src/main/resources/common-services/STORM/0.9.1/package/scripts/service_check.py
@@ -49,6 +49,12 @@ class ServiceCheckDefault(ServiceCheck):
import params
env.set_params(params)
+ if params.security_enabled:
+ kinit_cmd = format(
+ "{kinit_path_local} -kt {storm_keytab_path}
{storm_jaas_principal}; ")
+ else:
+ kinit_cmd = ""
+
unique = get_unique_id_and_date()
File("/tmp/wordCount.jar",
@@ -64,6 +70,11 @@ class ServiceCheckDefault(ServiceCheck):
elif params.nimbus_host is not None:
cmd = format("storm jar /tmp/wordCount.jar
storm.starter.WordCountTopology WordCount{unique} -c nimbus.host={nimbus_host}")
+ # use client jaas for service check
+ if params.security_enabled:
+ storm_client_jaas_file = format("{conf_dir}/client_jaas.conf")
+ cmd = format("{kinit_cmd}{cmd} -c
java.security.auth.login.config={storm_client_jaas_file}")
+
Execute(cmd,
logoutput=True,
path=params.storm_bin_dir,