[AMBARI-8307] Perm 400 for spnego keytab, unable to start webhcat

• Type: Bug
• Status: Resolved
• Priority: Blocker
• Resolution: Fixed
• Affects Version/s: 1.7.0
• Fix Version/s: 1.7.0
• Component/s: ambari-web
• Assignee: Andrii Tkach
• Reporter: Andrii Tkach
• Created: 13/Nov/14 13:49
• Updated: 13/Nov/14 23:35
• Resolved: 13/Nov/14 15:05

Description

We have a permissions issue on the /etc/security/keytabs/spnego.service.keytab when running /var/lib/ambari-server/resources/scripts/(kerberos-setup.sh|keytabs.sh).

I have my Storm DRPC, Nimbus, and UI servers on the same host as my Hive components. The spnego.service.keytab is 400 when it should be 440:

[hcat@revo2 webhcat]$ stat /etc/security/keytabs/spnego.service.keytab 
  File: `/etc/security/keytabs/spnego.service.keytab'
  Size: 4594      Blocks: 16         IO Block: 4096   regular file
Device: fd00h/64768d	Inode: 538521      Links: 1
Access: (0400/-r--------)  Uid: (  507/   storm)   Gid: (  500/  hadoop)
Access: 2014-11-11 11:40:00.626724368 -0600
Modify: 2014-11-11 09:19:39.000000000 -0600
Change: 2014-11-11 09:21:58.773876115 -0600

After changing it manually to 440 I can start WebHCat.

Issue Links

• breaks: AMBARI-8322 Nimbus fails to start in the secure cluster.
• links to: Review board