[
https://issues.apache.org/jira/browse/AMBARI-21012?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16011798#comment-16011798
]
Saisai Shao commented on AMBARI-21012:
--------------------------------------
[~sumitmohanty], please help to review, thanks!
> Livy service check fails with wire encryption setup
> ---------------------------------------------------
>
> Key: AMBARI-21012
> URL: https://issues.apache.org/jira/browse/AMBARI-21012
> Project: Ambari
> Issue Type: Bug
> Affects Versions: 2.5.1
> Reporter: Yesha Vora
>
> Livy service check fails after enabling Wire encryption. This issue exist
> for Livy_server and Livy2_server both.
> STR:
> 1) Set up below properties in livy.conf to enable WE.
> {code}
> livy.ssl.trustStore <Truststore File>
> livy.ssl.trustStorePassword <Trustore passwd>
> livy.key-password <keypassword>
> livy.keystore <keystore file>
> livy.keystore.password <keystore passwd>{code}
> 2) Run Spark Service check.
> Spark service check with fail to validate Livy. It is using http port to
> connect to livy. When Wire encryption is enabled, it should use https
> protocol to connect to livy.
> {code:title=stderr}
> Traceback (most recent call last):
> File
> "/var/lib/ambari-agent/cache/common-services/SPARK2/2.0.0/package/scripts/service_check.py",
> line 62, in <module>
> SparkServiceCheck().execute()
> File
> "/usr/lib/python2.6/site-packages/resource_management/libraries/script/script.py",
> line 322, in execute
> method(env)
> File
> "/var/lib/ambari-agent/cache/common-services/SPARK2/2.0.0/package/scripts/service_check.py",
> line 59, in service_check
> raise Fail(format("Connection to all Livy servers failed"))
> resource_management.core.exceptions.Fail: Connection to all Livy servers
> failed{code}
> {code:title=stdout}
> 2017-05-12 21:21:08,531 - Using hadoop conf dir:
> /usr/hdp/current/hadoop-client/conf
> 2017-05-12 21:21:08,551 - Execute['kinit -kt
> /etc/security/keytabs/xxx.headless.keytab xxx@XXX; '] {'user': 'spark'}
> 2017-05-12 21:21:08,683 - Execute['kinit -kt
> /etc/security/keytabs/smokeuser.headless.keytab xxx@XXX; '] {'user': 'livy'}
> 2017-05-12 21:21:08,809 - Execute['curl -s -o /dev/null -w'%{http_code}'
> --negotiate -u: -k https://xxxx:18481 | grep 200'] {'logoutput': True,
> 'tries': 5, 'try_sleep': 3}
> 200
> 2017-05-12 21:21:09,010 - Execute['curl -s -o /dev/null -w'%{http_code}'
> --negotiate -u: -k http://xxxx:8999/sessions | grep 200'] {'logoutput': True,
> 'tries': 3, 'user': 'livy', 'try_sleep': 1}
> 2017-05-12 21:21:09,149 - Retrying after 1 seconds. Reason: Execution of
> 'curl -s -o /dev/null -w'%{http_code}' --negotiate -u: -k
> http://xxx:8999/sessions | grep 200' returned 1.
> 2017-05-12 21:21:10,286 - Retrying after 1 seconds. Reason: Execution of
> 'curl -s -o /dev/null -w'%{http_code}' --negotiate -u: -k
> http://xxxx:8999/sessions | grep 200' returned 1.
> Command failed after 1 tries{code}
--
This message was sent by Atlassian JIRA
(v6.3.15#6346)
