[AMBARI-22629] Disabling Kerberos after enabled during Blueprint install fails with missing data directory error

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.6.0
• Fix Version/s: 2.6.2
• Component/s: ambari-server
• Labels: blueprints kerberos
• Assignee: Eugene Chekanskiy
• Reporter: Robert Levas
• Created: 11/Dec/17 20:18
• Updated: 04/Jan/18 17:35
• Resolved: 04/Jan/18 17:09

Description

Disabling Kerberos after enabled during Blueprint install fails with missing data directory error:

The data directory has not been set.  Generated data can not be stored.

This is caused by an invalid security state set for the installed components since the appropriate state is not set while enabling Kerberos during the installation process:

ambari=> select * from hostcomponentstate;
 id | cluster_id |  component_name  |   version    | current_state | host_id | service_name | upgrade_state | security_state
----+------------+------------------+--------------+---------------+---------+--------------+---------------+----------------
  1 |          2 | KERBEROS_CLIENT  | UNKNOWN      | INSTALLED     |       1 | KERBEROS     | NONE          | UNSECURED
  2 |          2 | ZOOKEEPER_CLIENT | 2.5.0.0-1245 | INSTALLED     |       1 | ZOOKEEPER    | NONE          | UNSECURED
  3 |          2 | ZOOKEEPER_SERVER | 2.5.0.0-1245 | STARTED       |       1 | ZOOKEEPER    | NONE          | UNSECURED

The expected state for each component is SECURED, not UNSECURED. Because of this, Ambari thinks there is no work to be done, causing this issue.

Steps to reproduce:

1. Setup Ambari, ensure KDC is installed on some host and Kerberos client libs are installed on the Ambari server host with the krb5.conf setup properly
2. Install Blueprint - blueprint_single_node_zk.json
3. Create clister - cluster_template_single_node_zk.json
4. When cluster is created, Kerberos should be enabled and all services up
5. Disable Kerberos - error occurs during Unkerberize Cluster task.

Issue Links

• links to: review