Uploaded image for project: 'Ambari'
  1. Ambari
  2. AMBARI-21687

User can't add node via Ambari UI when being part of both "cluster user" and "cluster admin" roles

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Resolved
    • Major
    • Resolution: Fixed
    • 2.5.1
    • 2.6.0
    • ambari-sever
    • None

    Description

      User can't add node via Ambari UI when being part of both cluster user and cluster administrator roles.

      Issue1: The expected behavior of Ambari is to not allow same user/group to be part of 2 different roles and it WARNS that Cannot save permissions.. Only 1 role allowed per user or group but this can be fooled by creating two different groups and have a common user, which creates Issue2.

      Issue2: Due to above, user (part of cluster user and cluster admin) can't add node and Ambari UI goes in loop during node registration process and reloads the page again and again.

      Reproduced it with Ambari 2.5.1. Steps to reproduce:

      1. Created group foogroup and user foo1 and added it in foogroup.
      2. Tried to add foogroup to roles cluster user and administrator and it doesn't allow with above warning.
      3. Created a local user test1 in Ambari.
      4. Created 2 different group clus_admin and cluster_user and added test1 in both of them.
      5. Assigned clus_admin to cluster admin role and clus_user to cluster user role and was able to save and assign 2 different roles to same user.
      6. Tried to add a new node with test1 user and Ambari UI freaks out while registration and goes on loop.

      Attachments

        1. AMBARI-21687-2.patch
          3 kB
          Eugene Chekanskiy
        2. AMBARI-21687.patch
          3 kB
          Eugene Chekanskiy

        Issue Links

          Activity

            People

              echekanskiy Eugene Chekanskiy
              patelamogh Amogh Patel
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: