[
https://issues.apache.org/jira/browse/AMBARI-8307?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Andrii Tkach updated AMBARI-8307:
---------------------------------
Attachment: AMBARI-8307_branch-1.7.0.patch
AMBARI-8307.patch
> Perm 400 for spnego keytab, unable to start webhcat
> ---------------------------------------------------
>
> Key: AMBARI-8307
> URL: https://issues.apache.org/jira/browse/AMBARI-8307
> Project: Ambari
> Issue Type: Bug
> Components: ambari-web
> Affects Versions: 1.7.0
> Reporter: Andrii Tkach
> Assignee: Andrii Tkach
> Priority: Blocker
> Fix For: 1.7.0
>
> Attachments: AMBARI-8307.patch, AMBARI-8307_branch-1.7.0.patch
>
>
> We have a permissions issue on the
> /etc/security/keytabs/spnego.service.keytab when running
> /var/lib/ambari-server/resources/scripts/(kerberos-setup.sh|keytabs.sh).
> I have my Storm DRPC, Nimbus, and UI servers on the same host as my Hive
> components. The spnego.service.keytab is 400 when it should be 440:
> {code}
> [hcat@revo2 webhcat]$ stat /etc/security/keytabs/spnego.service.keytab
> File: `/etc/security/keytabs/spnego.service.keytab'
> Size: 4594 Blocks: 16 IO Block: 4096 regular file
> Device: fd00h/64768d Inode: 538521 Links: 1
> Access: (0400/-r--------) Uid: ( 507/ storm) Gid: ( 500/ hadoop)
> Access: 2014-11-11 11:40:00.626724368 -0600
> Modify: 2014-11-11 09:19:39.000000000 -0600
> Change: 2014-11-11 09:21:58.773876115 -0600
> {code}
> After changing it manually to 440 I can start WebHCat.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
