Hi Jeff,
Ambari is running as root.
Am 17.04.2015 um 21:50 schrieb Jeff Sposetti:
Hi, Are you running your Ambari Server as non-root?
https://issues.apache.org/jira/browse/AMBARI-10266
You might be hitting that BUG.
On 4/17/15, 3:41 PM, "Frank Eisenhauer" <[email protected]> wrote:
Hi All,
I'm trying to enable Kerberos in Ambari 2.0.0 after upgrade from Ambari
1.7.
During "Test Kerberos Client" I'm getting the error "Failed to create
keytab file for [email protected] - Failed to export keytab
file"
The ambari-server.log states:
17 Apr 2015 21:41:29,601 INFO [Server Action Executor Worker 4215]
CreateKeytabFilesServerAction:170 - Creating keytab file for
ambari-qa_idheyfiu@BIGDATA$
17 Apr 2015 21:41:29,636 ERROR [Server Action Executor Worker 4215]
KerberosOperationHandler:433 - Failed to export keytab file
java.io.FileNotFoundException:
/var/lib/ambari-server/data/tmp/.ambari_1429299679291-0.d/HADOOP-SRV01/4e6
d850833d0d36946b1c5c5b260bec371c5247c
(Pe$
at java.io.FileOutputStream.open(Native Method)
at java.io.FileOutputStream.<init>(FileOutputStream.java:221)
at
org.apache.directory.server.kerberos.shared.keytab.Keytab.writeFile(Keytab
.java:273)
at
org.apache.directory.server.kerberos.shared.keytab.Keytab.write(Keytab.jav
a:133)
at
org.apache.ambari.server.serveraction.kerberos.KerberosOperationHandler.cr
eateKeytabFile(KerberosOperationHandler.java:429)
at
org.apache.ambari.server.serveraction.kerberos.CreateKeytabFilesServerActi
on.processIdentity(CreateKeytabFilesServerAction.java:276)
at
org.apache.ambari.server.serveraction.kerberos.KerberosServerAction.proces
sRecord(KerberosServerAction.java:494)
at
org.apache.ambari.server.serveraction.kerberos.KerberosServerAction.proces
sIdentities(KerberosServerAction.java:386)
at
org.apache.ambari.server.serveraction.kerberos.CreateKeytabFilesServerActi
on.execute(CreateKeytabFilesServerAction.java:99)
at
org.apache.ambari.server.serveraction.ServerActionExecutor$Worker.execute(
ServerActionExecutor.java:504)
at
org.apache.ambari.server.serveraction.ServerActionExecutor$Worker.run(Serv
erActionExecutor.java:441)
at java.lang.Thread.run(Thread.java:744)
17 Apr 2015 21:41:29,637 ERROR [Server Action Executor Worker 4215]
CreateKeytabFilesServerAction:290 - Failed to create keytab file for
ambari-qa_idheyfiu$
org.apache.ambari.server.serveraction.kerberos.KerberosOperationException:
Failed to export keytab file
at
org.apache.ambari.server.serveraction.kerberos.KerberosOperationHandler.cr
eateKeytabFile(KerberosOperationHandler.java:439)
at
org.apache.ambari.server.serveraction.kerberos.CreateKeytabFilesServerActi
on.processIdentity(CreateKeytabFilesServerAction.java:276)
at
org.apache.ambari.server.serveraction.kerberos.KerberosServerAction.proces
sRecord(KerberosServerAction.java:494)
at
org.apache.ambari.server.serveraction.kerberos.KerberosServerAction.proces
sIdentities(KerberosServerAction.java:386)
at
org.apache.ambari.server.serveraction.kerberos.CreateKeytabFilesServerActi
on.execute(CreateKeytabFilesServerAction.java:99)
at
org.apache.ambari.server.serveraction.ServerActionExecutor$Worker.execute(
ServerActionExecutor.java:504)
at
org.apache.ambari.server.serveraction.ServerActionExecutor$Worker.run(Serv
erActionExecutor.java:441)
at java.lang.Thread.run(Thread.java:744)
Caused by: java.io.FileNotFoundException:
/var/lib/ambari-server/data/tmp/.ambari_1429299679291-0.d/HADOOP-SRV01/4e6
d850833d0d36946b1c5c5b260bec37$
at java.io.FileOutputStream.open(Native Method)
at java.io.FileOutputStream.<init>(FileOutputStream.java:221)
at
org.apache.directory.server.kerberos.shared.keytab.Keytab.writeFile(Keytab
.java:273)
at
org.apache.directory.server.kerberos.shared.keytab.Keytab.write(Keytab.jav
a:133)
at
org.apache.ambari.server.serveraction.kerberos.KerberosOperationHandler.cr
eateKeytabFile(KerberosOperationHandler.java:429)
... 7 more
I've found a Jira Log
"https://issues.apache.org/jira/browse/AMBARI-10266"; but the mentioned
solution does not solve the issue. The permission denied exception still
occurs.
Ambari Server is running as root.
