[ 
https://issues.apache.org/jira/browse/AMBARI-20445?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Nicola Marangoni updated AMBARI-20445:
--------------------------------------
    Description: 
In Ubuntu 16.04.2 it is not possible to register the agent when 2-way ssl is 
enabled.

Scenario:
- Server running under user *ambari-server*
- Agent running under user ambari-agent
The same scenarion in CentOS 7 works correctly!

Symptoms:
- During registration, folder /var/lib/ambari-agent/keys remains empty and 
registration fails
- After manually copying ca.crt to the folder, <agent-fqdn>.key and 
<agent-fqdn>.csr are created but not <agent-fqdn>.crt, registration fails again
- After manually creating <agent-fqdn>.crt registration is successfull.

It seems that transfer of the .crt files from server to agent doesn't work in 
Ubuntu 16.04. Same scenario works well in CentOS 7.

  was:
In Ubuntu 16.04.2 it is not possible to register the agent when 2-way ssl is 
enabled.

Scenario:
- Server running under user ambari-server
- Agent running under user ambari-agent
The same scenarion in CentOS 7 works correctly!

Symptoms:
- During registration, folder /var/lib/ambari-agent/keys remains empty and 
registration fails
- After manually copying ca.crt to the folder, <agent-fqdn>.key and 
<agent-fqdn>.csr are created but not <agent-fqdn>.crt, registration fails again
- After manually creating <agent-fqdn>.crt registration is successfull.

It seems that transfer of the .crt files from server to agent doesn't work in 
Ubuntu 16.04. Same scenario works well in CentOS 7.


> two-way ssl on Ubuntu 16.04 not working
> ---------------------------------------
>
>                 Key: AMBARI-20445
>                 URL: https://issues.apache.org/jira/browse/AMBARI-20445
>             Project: Ambari
>          Issue Type: Bug
>          Components: ambari-agent, ambari-server
>    Affects Versions: trnk
>         Environment: Ubuntu 16.04.2
>            Reporter: Nicola Marangoni
>              Labels: 2-way-ssl, ssl
>
> In Ubuntu 16.04.2 it is not possible to register the agent when 2-way ssl is 
> enabled.
> Scenario:
> - Server running under user *ambari-server*
> - Agent running under user ambari-agent
> The same scenarion in CentOS 7 works correctly!
> Symptoms:
> - During registration, folder /var/lib/ambari-agent/keys remains empty and 
> registration fails
> - After manually copying ca.crt to the folder, <agent-fqdn>.key and 
> <agent-fqdn>.csr are created but not <agent-fqdn>.crt, registration fails 
> again
> - After manually creating <agent-fqdn>.crt registration is successfull.
> It seems that transfer of the .crt files from server to agent doesn't work in 
> Ubuntu 16.04. Same scenario works well in CentOS 7.



--
This message was sent by Atlassian JIRA
(v6.3.15#6346)

Reply via email to