[AMBARI-12853] Manual registration of non root ambari agent with two way ssl authentication failed

• Type: Task
• Status: Resolved
• Priority: Critical
• Resolution: Fixed
• Affects Version/s: 2.1.1
• Fix Version/s: 2.1.2
• Component/s: ambari-agent
• Assignee: Dmytro Sen
• Reporter: Dmytro Sen
• Created: 21/Aug/15 14:04
• Updated: 21/Aug/15 18:26
• Resolved: 21/Aug/15 14:46

Description

nstall ambari-server
Generate necessary certificates and setup ambari two way ssl authentication.
Install ambari-agent on hosts.
Configure ambari-agent to run under non root user.
Try manual host registration.
IOError: Request to
https://192.168.64.101:8441/agent/v1/register/c6402.ambari.apache.org failed due to [Errno 13] Permission denied: '/var/lib/ambari-agent/keys/ca.crt'

/var/lib/ambari-agent/keys is created when package is installed and has root owner, so when ambari-agent is running under non-root it is not able to write to that dir.
Should I chown that dir when configuring non root agents? Or agent itself should manage that dir?

Issue Links

• links to: Review Board