Details
-
Bug
-
Status: Open
-
Major
-
Resolution: Unresolved
-
2.7.3
-
None
-
None
Description
At deploy time (Cluster Wizard or Blueprint) if "tez-site":"tez.am.view-acls" is set the ambari-agent(s) will attempt to create the provided users/groups in the OS.
Ambari should only be creating its service users. Never users in things like ACL/grants/permissions.
Code responsible for this is:
https://github.com/apache/ambari/blob/d680af8057a40ab38ab2866799eb9150283c6a4c/ambari-server/src/main/resources/stack-hooks/before-ANY/scripts/shared_initialization.py#L79-L80