[AMBARI-14460] Enable kerberos security after express upgrade has failed at Start service step because of slider client xml permission.

• Type: Bug
• Status: Resolved
• Priority: Critical
• Resolution: Fixed
• Affects Version/s: 2.2.0
• Fix Version/s: 2.2.1
• Component/s: ambari-upgrade
• Assignee: Dmytro Sen
• Reporter: Dmytro Sen
• Created: 22/Dec/15 10:04
• Updated: 22/Dec/15 15:41
• Resolved: 22/Dec/15 12:55

Description

Upgrade Path 2.3.2.0 -> 2.3.4.0

Upgrade is successful.

Issue appearing while enabling security after upgrade is over in start services step.

Service check for slider is also failed when executed on the cluster with permission related issue.
Here is error log

resource_management.core.exceptions.Fail: Execution of '/usr/bin/kinit -kt /etc/security/keytabs/smokeuser.headless.keytab [e-mail]; /usr/hdp/current/slider-client/bin/slider list' returned 56. ######## Hortonworks #############
This is MOTD message, added for testing in qe infra
2015-12-18 07:16:17,826 [main] FATAL conf.Configuration - error parsing conf slider-client.xml
java.io.FileNotFoundException: /etc/slider/2.3.4.0-3485/0/slider-client.xml (Permission denied)
	at java.io.FileInputStream.open0(Native Method)
	at java.io.FileInputStream.open(FileInputStream.java:195)
	at java.io.FileInputStream.<init>(FileInputStream.java:138)
	at java.io.FileInputStream.<init>(FileInputStream.java:93)
	at sun.net.www.protocol.file.FileURLConnection.connect(FileURLConnection.java:90)
	at sun.net.www.protocol.file.FileURLConnection.getInputStream(FileURLConnection.java:188)
	at java.net.URL.openStream(URL.java:1038)
	at org.apache.hadoop.conf.Configuration.parse(Configuration.java:2468)
	at org.apache.hadoop.conf.Configuration.loadResource(Configuration.java:2539)
	at org.apache.hadoop.conf.Configuration.loadResources(Configuration.java:2502)

When I checked the permission of the file on upgrade cluster. It does not have read permission for file slider-client.xml for "others". causing service check for slider fail.

root@os-d7-dkezlu-ambari-eu-7-5:~# ls -l /etc/slider/2.3.4.0-3485/0/
total 12
-rw-r--r-- 1 root root 2375 Dec 18 02:05 log4j.properties
-rw-r----- 1 root root   41 Dec 18 02:05 slider-client.xml
-rwxr-xr-x 1 root root  509 Dec 18 02:34 slider-env.sh
root@os-d7-dkezlu-ambari-eu-7-5:~#

Before upgrade permission was more open

root@os-d7-dkezlu-ambari-eu-7-5:~# ls -l /etc/slider/2.3.2.0-2950/0/
total 20
-rw-r--r-- 1 root root 2375 Dec 18 00:38 log4j.properties
-rw-r--r-- 1 root root 3025 Sep 30 21:11 log4j-server.properties
-rw-r--r-- 1 root root   41 Dec 18 00:38 slider-client.xml
-rwxr-xr-x 1 root root  509 Dec 18 03:06 slider-env.sh
-rw-r--r-- 1 root root 2286 Sep 30 21:11 slider-server.xml
root@os-d7-dkezlu-ambari-eu-7-5:~#

Issue Links

• links to: Review Board