Uploaded image for project: 'Ambari'
  1. Ambari
  2. AMBARI-10507

Local root user's group being assigned to hadoop

    Details

      Description

      When installing Ranger through Ambari, you have the option to specify DB user names. If you leave the Ranger DB root user configuration db_root_user as the default (which is 'root'), Ambari will erroneously attempt to create a local user named root, and assign it to the group 'hadoop'. This results in local root users being reassigned to the group 'hadoop'. In addition, both the db_user param and audit_db_name param are erroneously being used to create local users (granted, with less severe consequences).

      1. AMBARI-10507.patch
        1 kB
        Adam Westerman

        Activity

        Hide
        u39kun Yusaku Sako added a comment -

        Committed to branch-2.0.maint.

        Show
        u39kun Yusaku Sako added a comment - Committed to branch-2.0.maint.
        Hide
        hudson Hudson added a comment -

        FAILURE: Integrated in Ambari-trunk-Commit #2327 (See https://builds.apache.org/job/Ambari-trunk-Commit/2327/)
        AMBARI-10507. Local root user's group being assigned to hadoop. (Adam Westerman via yusaku) (yusaku: http://git-wip-us.apache.org/repos/asf?p=ambari.git&a=commit&h=b58969228db8a34fb1c3c8a249b8691bf83bce21)

        • ambari-server/src/main/resources/common-services/RANGER/0.4.0/configuration/admin-properties.xml
        Show
        hudson Hudson added a comment - FAILURE: Integrated in Ambari-trunk-Commit #2327 (See https://builds.apache.org/job/Ambari-trunk-Commit/2327/ ) AMBARI-10507 . Local root user's group being assigned to hadoop. (Adam Westerman via yusaku) (yusaku: http://git-wip-us.apache.org/repos/asf?p=ambari.git&a=commit&h=b58969228db8a34fb1c3c8a249b8691bf83bce21 ) ambari-server/src/main/resources/common-services/RANGER/0.4.0/configuration/admin-properties.xml
        Hide
        u39kun Yusaku Sako added a comment -

        Committed to trunk.

        Show
        u39kun Yusaku Sako added a comment - Committed to trunk.
        Hide
        u39kun Yusaku Sako added a comment -

        +1 for the patch.

        Show
        u39kun Yusaku Sako added a comment - +1 for the patch.
        Hide
        AdamWesterman Adam Westerman added a comment -

        Also thanks to Kevin Risden for locating the issue in the source and verifying the fix.

        Show
        AdamWesterman Adam Westerman added a comment - Also thanks to Kevin Risden for locating the issue in the source and verifying the fix.
        Hide
        AdamWesterman Adam Westerman added a comment -

        The patch removes the "USER" property-type tag from the db account configurations, preventing Ambari from treating them as service users and creating local accounts.

        Show
        AdamWesterman Adam Westerman added a comment - The patch removes the "USER" property-type tag from the db account configurations, preventing Ambari from treating them as service users and creating local accounts.

          People

          • Assignee:
            AdamWesterman Adam Westerman
            Reporter:
            AdamWesterman Adam Westerman
          • Votes:
            0 Vote for this issue
            Watchers:
            4 Start watching this issue

            Dates

            • Created:
              Updated:
              Resolved:

              Time Tracking

              Estimated:
              Original Estimate - 1h
              1h
              Remaining:
              Remaining Estimate - 1h
              1h
              Logged:
              Time Spent - Not Specified
              Not Specified

                Development