Uploaded image for project: 'Ambari'
  1. Ambari
  2. AMBARI-12853

Manual registration of non root ambari agent with two way ssl authentication failed

    Details

    • Type: Task
    • Status: Resolved
    • Priority: Critical
    • Resolution: Fixed
    • Affects Version/s: 2.1.1
    • Fix Version/s: 2.1.2
    • Component/s: ambari-agent
    • Labels:
      None

      Description

      nstall ambari-server
      Generate necessary certificates and setup ambari two way ssl authentication.
      Install ambari-agent on hosts.
      Configure ambari-agent to run under non root user.
      Try manual host registration.
      IOError: Request to
      https://192.168.64.101:8441/agent/v1/register/c6402.ambari.apache.org failed due to [Errno 13] Permission denied: '/var/lib/ambari-agent/keys/ca.crt'

      /var/lib/ambari-agent/keys is created when package is installed and has root owner, so when ambari-agent is running under non-root it is not able to write to that dir.
      Should I chown that dir when configuring non root agents? Or agent itself should manage that dir?

        Issue Links

          Activity

          Hide
          dsen Dmytro Sen added a comment -

          Committed to trunk and branch-2.1

          Show
          dsen Dmytro Sen added a comment - Committed to trunk and branch-2.1
          Hide
          hudson Hudson added a comment -

          FAILURE: Integrated in Ambari-branch-2.1 #407 (See https://builds.apache.org/job/Ambari-branch-2.1/407/)
          AMBARI-12853 Manual registration of non root ambari agent with two way ssl authentication failed (dsen) (dsen: http://git-wip-us.apache.org/repos/asf?p=ambari.git&a=commit&h=43bea329425d1ee936871986c2185d9ffd57c085)

          • ambari-agent/conf/unix/ambari-agent
          Show
          hudson Hudson added a comment - FAILURE: Integrated in Ambari-branch-2.1 #407 (See https://builds.apache.org/job/Ambari-branch-2.1/407/ ) AMBARI-12853 Manual registration of non root ambari agent with two way ssl authentication failed (dsen) (dsen: http://git-wip-us.apache.org/repos/asf?p=ambari.git&a=commit&h=43bea329425d1ee936871986c2185d9ffd57c085 ) ambari-agent/conf/unix/ambari-agent
          Hide
          hudson Hudson added a comment -

          SUCCESS: Integrated in Ambari-trunk-Commit #3307 (See https://builds.apache.org/job/Ambari-trunk-Commit/3307/)
          AMBARI-12853 Manual registration of non root ambari agent with two way ssl authentication failed (dsen) (dsen: http://git-wip-us.apache.org/repos/asf?p=ambari.git&a=commit&h=a696f9ffda285f5711a77a40605f478731f1c1f3)

          • ambari-agent/conf/unix/ambari-agent
          Show
          hudson Hudson added a comment - SUCCESS: Integrated in Ambari-trunk-Commit #3307 (See https://builds.apache.org/job/Ambari-trunk-Commit/3307/ ) AMBARI-12853 Manual registration of non root ambari agent with two way ssl authentication failed (dsen) (dsen: http://git-wip-us.apache.org/repos/asf?p=ambari.git&a=commit&h=a696f9ffda285f5711a77a40605f478731f1c1f3 ) ambari-agent/conf/unix/ambari-agent

            People

            • Assignee:
              dsen Dmytro Sen
              Reporter:
              dsen Dmytro Sen
            • Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved:

                Development