[
https://issues.apache.org/jira/browse/AMBARI-9261?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Robert Levas reopened AMBARI-9261:
----------------------------------
Causing exception in new cluster
{code}
2:50:40,454 ERROR [qtp745736540-27] AmbariManagementControllerImpl:1227 - The
'cluster-env' configuration is not available
22:50:40,457 ERROR [qtp745736540-27] AbstractResourceProvider:338 - Caught
AmbariException when modifying a resource
org.apache.ambari.server.AmbariException: The 'cluster-env' configuration is
not available
at
org.apache.ambari.server.controller.AmbariManagementControllerImpl.updateCluster(AmbariManagementControllerImpl.java:1228)
at
org.apache.ambari.server.controller.AmbariManagementControllerImpl.updateClusters(AmbariManagementControllerImpl.java:1155)
at
org.apache.ambari.server.controller.internal.ClusterResourceProvider$2.invoke(ClusterResourceProvider.java:242)
at
org.apache.ambari.server.controller.internal.ClusterResourceProvider$2.invoke(ClusterResourceProvider.java:239)
at
org.apache.ambari.server.controller.internal.AbstractResourceProvider.modifyResources(AbstractResourceProvider.java:331)
at
org.apache.ambari.server.controller.internal.ClusterResourceProvider.updateResources(ClusterResourceProvider.java:239)
at
org.apache.ambari.server.controller.internal.ClusterControllerImpl.updateResources(ClusterControllerImpl.java:317)
at
org.apache.ambari.server.api.services.persistence.PersistenceManagerImpl.update(PersistenceManagerImpl.java:100)
at
org.apache.ambari.server.api.handlers.UpdateHandler.persist(UpdateHandler.java:42)
at
org.apache.ambari.server.api.handlers.BaseManagementHandler.handleRequest(BaseManagementHandler.java:72)
{code}
> Ensure enable/disable Kerberos logic should invoke only when state of
> security flag is changed
> ----------------------------------------------------------------------------------------------
>
> Key: AMBARI-9261
> URL: https://issues.apache.org/jira/browse/AMBARI-9261
> Project: Ambari
> Issue Type: Bug
> Components: ambari-server
> Affects Versions: 2.0.0
> Reporter: Robert Levas
> Assignee: Robert Levas
> Priority: Blocker
> Labels: kerberos, security
> Fix For: 2.0.0
>
> Attachments: AMBARI-9261_01.patch
>
>
> The logic to enable or disable Kerberos is typically invoked when the Cluster
> resource is updated. This occurs for several reasons, not all of them
> indicate the state of Kerberos should be altered.
> By processing all updated to the Cluster resource, the enable/disable
> Kerberos may get invoked when not necessary causing _noise_ on the task list
> and potentially generating an error condition if the KDC administrator
> credentials are not available. Certain states of the system will trigger the
> enable/disable Kerberos logic to perform tasks requiring the KDC
> administrator credentials. If not explicitly handing the security state
> change, this behavior is not desired.
> To solve the issue, test the request on the update Cluster resource to see if
> the security state property (cluster-env/security_enabled) has been altered,
> if so invoke enable/disable Kerberos logic; else do not invoke enable/disable
> Kerberos logic.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
