Hi All,
I'm trying to enable Kerberos in Ambari 2.0.0 after upgrade from Ambari 1.7.
During "Test Kerberos Client" I'm getting the error "Failed to create
keytab file for [email protected] - Failed to export keytab
file"
The ambari-server.log states:
17 Apr 2015 21:41:29,601 INFO [Server Action Executor Worker 4215]
CreateKeytabFilesServerAction:170 - Creating keytab file for
ambari-qa_idheyfiu@BIGDATA$
17 Apr 2015 21:41:29,636 ERROR [Server Action Executor Worker 4215]
KerberosOperationHandler:433 - Failed to export keytab file
java.io.FileNotFoundException:
/var/lib/ambari-server/data/tmp/.ambari_1429299679291-0.d/HADOOP-SRV01/4e6d850833d0d36946b1c5c5b260bec371c5247c
(Pe$
at java.io.FileOutputStream.open(Native Method)
at java.io.FileOutputStream.<init>(FileOutputStream.java:221)
at
org.apache.directory.server.kerberos.shared.keytab.Keytab.writeFile(Keytab.java:273)
at
org.apache.directory.server.kerberos.shared.keytab.Keytab.write(Keytab.java:133)
at
org.apache.ambari.server.serveraction.kerberos.KerberosOperationHandler.createKeytabFile(KerberosOperationHandler.java:429)
at
org.apache.ambari.server.serveraction.kerberos.CreateKeytabFilesServerAction.processIdentity(CreateKeytabFilesServerAction.java:276)
at
org.apache.ambari.server.serveraction.kerberos.KerberosServerAction.processRecord(KerberosServerAction.java:494)
at
org.apache.ambari.server.serveraction.kerberos.KerberosServerAction.processIdentities(KerberosServerAction.java:386)
at
org.apache.ambari.server.serveraction.kerberos.CreateKeytabFilesServerAction.execute(CreateKeytabFilesServerAction.java:99)
at
org.apache.ambari.server.serveraction.ServerActionExecutor$Worker.execute(ServerActionExecutor.java:504)
at
org.apache.ambari.server.serveraction.ServerActionExecutor$Worker.run(ServerActionExecutor.java:441)
at java.lang.Thread.run(Thread.java:744)
17 Apr 2015 21:41:29,637 ERROR [Server Action Executor Worker 4215]
CreateKeytabFilesServerAction:290 - Failed to create keytab file for
ambari-qa_idheyfiu$
org.apache.ambari.server.serveraction.kerberos.KerberosOperationException:
Failed to export keytab file
at
org.apache.ambari.server.serveraction.kerberos.KerberosOperationHandler.createKeytabFile(KerberosOperationHandler.java:439)
at
org.apache.ambari.server.serveraction.kerberos.CreateKeytabFilesServerAction.processIdentity(CreateKeytabFilesServerAction.java:276)
at
org.apache.ambari.server.serveraction.kerberos.KerberosServerAction.processRecord(KerberosServerAction.java:494)
at
org.apache.ambari.server.serveraction.kerberos.KerberosServerAction.processIdentities(KerberosServerAction.java:386)
at
org.apache.ambari.server.serveraction.kerberos.CreateKeytabFilesServerAction.execute(CreateKeytabFilesServerAction.java:99)
at
org.apache.ambari.server.serveraction.ServerActionExecutor$Worker.execute(ServerActionExecutor.java:504)
at
org.apache.ambari.server.serveraction.ServerActionExecutor$Worker.run(ServerActionExecutor.java:441)
at java.lang.Thread.run(Thread.java:744)
Caused by: java.io.FileNotFoundException:
/var/lib/ambari-server/data/tmp/.ambari_1429299679291-0.d/HADOOP-SRV01/4e6d850833d0d36946b1c5c5b260bec37$
at java.io.FileOutputStream.open(Native Method)
at java.io.FileOutputStream.<init>(FileOutputStream.java:221)
at
org.apache.directory.server.kerberos.shared.keytab.Keytab.writeFile(Keytab.java:273)
at
org.apache.directory.server.kerberos.shared.keytab.Keytab.write(Keytab.java:133)
at
org.apache.ambari.server.serveraction.kerberos.KerberosOperationHandler.createKeytabFile(KerberosOperationHandler.java:429)
... 7 more
I've found a Jira Log
"https://issues.apache.org/jira/browse/AMBARI-10266"; but the mentioned
solution does not solve the issue. The permission denied exception still
occurs.
Ambari Server is running as root.
