Uploaded image for project: 'Ambari'
  1. Ambari
  2. AMBARI-12808

Ambari should not reset UIDs for existing users in a cluster

    Details

    • Type: Bug
    • Status: Resolved
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: 2.1.0
    • Fix Version/s: 2.1.2
    • Component/s: stacks
    • Labels:
      None

      Description

      If a user wishes to set the UIDs for the users in an HDP cluster, due to some internal security requirements or standards, problems with rolling upgrades can occur, since the upgrade process will create files and directories with a UID of "1001" for "ambari-qa", even if the user had already set the UID for this user to a different value.
      The setup_users() method in the following stack script:
      ambari-server/src/main/resources/stacks/HDP/2.0.6/hooks/before-ANY/scripts/shared_initialization.py
      will always override the UID of a given cluster user, even if the customer has already customized this.
      The shared initialization scripts should check to see if a user has already been created with a separate UID, and provide a way to skip the process of setting the new UID. The Ambari scripts set the UID in order to comply with Hadoop and Kerberos standards, so any attempt to override this behavior should provide some config logging

        Issue Links

          Activity

          Hide
          hadoopqa Hadoop QA added a comment -

          -1 overall. Here are the results of testing the latest attachment
          http://issues.apache.org/jira/secure/attachment/12751030/AMBARI-12808.patch
          against trunk revision .

          +1 @author. The patch does not contain any @author tags.

          +1 tests included. The patch appears to include 1 new or modified test files.

          +1 javac. The applied patch does not increase the total number of javac compiler warnings.

          +1 release audit. The applied patch does not increase the total number of release audit warnings.

          -1 core tests. The patch failed these unit tests in ambari-server:

          org.apache.ambari.server.api.handlers.UpdateHandlerTest
          org.apache.ambari.server.api.resources.BaseResourceDefinitionTest
          org.apache.ambari.server.api.handlers.DeleteHandlerTest
          org.apache.ambari.server.controller.internal.JMXHostProviderTest
          org.apache.ambari.server.api.TestSuite
          org.apache.ambari.server.api.handlers.CreateHandlerTest
          org.apache.ambari.server.controller.AmbariManagementControllerTest

          Test results: https://builds.apache.org/job/Ambari-trunk-test-patch/3606//testReport/
          Console output: https://builds.apache.org/job/Ambari-trunk-test-patch/3606//console

          This message is automatically generated.

          Show
          hadoopqa Hadoop QA added a comment - -1 overall . Here are the results of testing the latest attachment http://issues.apache.org/jira/secure/attachment/12751030/AMBARI-12808.patch against trunk revision . +1 @author . The patch does not contain any @author tags. +1 tests included . The patch appears to include 1 new or modified test files. +1 javac . The applied patch does not increase the total number of javac compiler warnings. +1 release audit . The applied patch does not increase the total number of release audit warnings. -1 core tests . The patch failed these unit tests in ambari-server: org.apache.ambari.server.api.handlers.UpdateHandlerTest org.apache.ambari.server.api.resources.BaseResourceDefinitionTest org.apache.ambari.server.api.handlers.DeleteHandlerTest org.apache.ambari.server.controller.internal.JMXHostProviderTest org.apache.ambari.server.api.TestSuite org.apache.ambari.server.api.handlers.CreateHandlerTest org.apache.ambari.server.controller.AmbariManagementControllerTest Test results: https://builds.apache.org/job/Ambari-trunk-test-patch/3606//testReport/ Console output: https://builds.apache.org/job/Ambari-trunk-test-patch/3606//console This message is automatically generated.
          Hide
          dsen Dmytro Sen added a comment -

          Committed to trunk and branch-2.1

          Show
          dsen Dmytro Sen added a comment - Committed to trunk and branch-2.1
          Hide
          hudson Hudson added a comment -

          FAILURE: Integrated in Ambari-branch-2.1 #407 (See https://builds.apache.org/job/Ambari-branch-2.1/407/)
          AMBARI-12808 Ambari should not reset UIDs for existing users in a cluster (dsen) (dsen: http://git-wip-us.apache.org/repos/asf?p=ambari.git&a=commit&h=de90bce91aeddd85efdd5f9bafa45cca803c362d)

          • ambari-server/src/test/python/stacks/2.0.6/configs/default.json
          • ambari-server/src/main/java/org/apache/ambari/server/upgrade/UpgradeCatalog212.java
          • ambari-server/src/test/java/org/apache/ambari/server/upgrade/UpgradeCatalog212Test.java
          • ambari-server/src/main/resources/stacks/HDP/2.0.6/hooks/before-ANY/scripts/params.py
          • ambari-server/src/main/resources/stacks/HDP/2.0.6/hooks/before-ANY/scripts/shared_initialization.py
          • ambari-web/app/utils/config.js
          • ambari-web/app/data/HDP2/site_properties.js
          • ambari-server/src/main/resources/stacks/HDP/2.0.6/configuration/cluster-env.xml
          • ambari-server/src/main/resources/common-services/HBASE/0.96.0.2.0/configuration/hbase-env.xml
          Show
          hudson Hudson added a comment - FAILURE: Integrated in Ambari-branch-2.1 #407 (See https://builds.apache.org/job/Ambari-branch-2.1/407/ ) AMBARI-12808 Ambari should not reset UIDs for existing users in a cluster (dsen) (dsen: http://git-wip-us.apache.org/repos/asf?p=ambari.git&a=commit&h=de90bce91aeddd85efdd5f9bafa45cca803c362d ) ambari-server/src/test/python/stacks/2.0.6/configs/default.json ambari-server/src/main/java/org/apache/ambari/server/upgrade/UpgradeCatalog212.java ambari-server/src/test/java/org/apache/ambari/server/upgrade/UpgradeCatalog212Test.java ambari-server/src/main/resources/stacks/HDP/2.0.6/hooks/before-ANY/scripts/params.py ambari-server/src/main/resources/stacks/HDP/2.0.6/hooks/before-ANY/scripts/shared_initialization.py ambari-web/app/utils/config.js ambari-web/app/data/HDP2/site_properties.js ambari-server/src/main/resources/stacks/HDP/2.0.6/configuration/cluster-env.xml ambari-server/src/main/resources/common-services/HBASE/0.96.0.2.0/configuration/hbase-env.xml
          Hide
          hudson Hudson added a comment -

          SUCCESS: Integrated in Ambari-trunk-Commit #3307 (See https://builds.apache.org/job/Ambari-trunk-Commit/3307/)
          AMBARI-12808 Ambari should not reset UIDs for existing users in a cluster (dsen) (dsen: http://git-wip-us.apache.org/repos/asf?p=ambari.git&a=commit&h=485bd8af0dbbe206b130f1736110bee6827b60f1)

          • ambari-web/app/data/HDP2/site_properties.js
          • ambari-server/src/main/resources/common-services/HBASE/0.96.0.2.0/configuration/hbase-env.xml
          • ambari-web/app/utils/config.js
          • ambari-server/src/test/java/org/apache/ambari/server/upgrade/UpgradeCatalog212Test.java
          • ambari-server/src/main/resources/stacks/HDP/2.0.6/hooks/before-ANY/scripts/shared_initialization.py
          • ambari-server/src/test/python/stacks/2.0.6/configs/default.json
          • ambari-server/src/main/java/org/apache/ambari/server/upgrade/UpgradeCatalog212.java
          • ambari-server/src/main/resources/stacks/HDP/2.0.6/hooks/before-ANY/scripts/params.py
          • ambari-server/src/main/resources/stacks/HDP/2.0.6/configuration/cluster-env.xml
          Show
          hudson Hudson added a comment - SUCCESS: Integrated in Ambari-trunk-Commit #3307 (See https://builds.apache.org/job/Ambari-trunk-Commit/3307/ ) AMBARI-12808 Ambari should not reset UIDs for existing users in a cluster (dsen) (dsen: http://git-wip-us.apache.org/repos/asf?p=ambari.git&a=commit&h=485bd8af0dbbe206b130f1736110bee6827b60f1 ) ambari-web/app/data/HDP2/site_properties.js ambari-server/src/main/resources/common-services/HBASE/0.96.0.2.0/configuration/hbase-env.xml ambari-web/app/utils/config.js ambari-server/src/test/java/org/apache/ambari/server/upgrade/UpgradeCatalog212Test.java ambari-server/src/main/resources/stacks/HDP/2.0.6/hooks/before-ANY/scripts/shared_initialization.py ambari-server/src/test/python/stacks/2.0.6/configs/default.json ambari-server/src/main/java/org/apache/ambari/server/upgrade/UpgradeCatalog212.java ambari-server/src/main/resources/stacks/HDP/2.0.6/hooks/before-ANY/scripts/params.py ambari-server/src/main/resources/stacks/HDP/2.0.6/configuration/cluster-env.xml

            People

            • Assignee:
              dsen Dmytro Sen
              Reporter:
              dsen Dmytro Sen
            • Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved:

                Development