[
https://issues.apache.org/jira/browse/AMBARI-24085?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
ASF GitHub Bot updated AMBARI-24085:
------------------------------------
Labels: pull-request-available (was: )
> setup-sso in Ambari fails when SSL is enabled
> ---------------------------------------------
>
> Key: AMBARI-24085
> URL: https://issues.apache.org/jira/browse/AMBARI-24085
> Project: Ambari
> Issue Type: Bug
> Components: ambari-server
> Affects Versions: 2.7.0
> Reporter: SuryaKranthi Koneru
> Assignee: Robert Levas
> Priority: Critical
> Labels: pull-request-available
> Fix For: 2.7.0
>
>
> When SSL is enabled and the python version is 2.7.14, accessing the Ambari
> server via the {{ambari-server}} CLI fails with CERTIFICATE_VERIFY_FAILED.
>
> {noformat:title=Example}
> -bash-4.2# ambari-server setup-sso -v
> Using python /usr/bin/python
> Setting up SSO authentication properties...
> INFO: Loading properties from /etc/ambari-server/conf/ambari.properties
> INFO: Setup SSO.
> INFO: about to run command: ps -p 33705
> INFO:
> process_pid=107113
> INFO: Loading properties from /etc/ambari-server/conf/ambari.properties
> Enter Ambari Admin login: admin
> Enter Ambari Admin password:
> INFO: Fetching SSO configuration from DB
> INFO: Fetching information from Ambari's REST API
> Traceback (most recent call last):
> File "/usr/sbin/ambari-server.py", line 1056, in <module>
> mainBody()
> File "/usr/sbin/ambari-server.py", line 1026, in mainBody
> main(options, args, parser)
> File "/usr/sbin/ambari-server.py", line 976, in main
> action_obj.execute()
> File "/usr/sbin/ambari-server.py", line 90, in execute
> self.need_restart = self.fn(*self.args, **self.kwargs)
> File "/usr/lib/ambari-server/lib/ambari_server/setupSso.py", line 266, in
> setup_sso
> properties = get_sso_properties(ambari_properties, admin_login,
> admin_password)
> File "/usr/lib/ambari-server/lib/ambari_server/setupSso.py", line 221, in
> get_sso_properties
> response_code, json_data = get_json_via_rest_api(properties, admin_login,
> admin_password, SSO_CONFIG_API_ENTRYPOINT)
> File "/usr/lib/ambari-server/lib/ambari_server/serverUtils.py", line 206, in
> get_json_via_rest_api
> with closing(urllib2.urlopen(request)) as response:
> File "/usr/lib64/python2.7/urllib2.py", line 154, in urlopen
> return opener.open(url, data, timeout)
> File "/usr/lib64/python2.7/urllib2.py", line 429, in open
> response = self._open(req, data)
> File "/usr/lib64/python2.7/urllib2.py", line 447, in _open
> '_open', req)
> File "/usr/lib64/python2.7/urllib2.py", line 407, in _call_chain
> result = func(*args)
> File "/usr/lib64/python2.7/urllib2.py", line 1243, in https_open
> context=self._context)
> File "/usr/lib64/python2.7/urllib2.py", line 1200, in do_open
> raise URLError(err)
> urllib2.URLError: <urlopen error [SSL: CERTIFICATE_VERIFY_FAILED] certificate
> verify failed (_ssl.c:661)>
> {noformat}
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
