[AMBARI-24085] setup-sso in Ambari fails when SSL is enabled

• Type: Bug
• Status: Resolved
• Priority: Critical
• Resolution: Fixed
• Affects Version/s: 2.7.0
• Fix Version/s: 2.7.0
• Component/s: ambari-server
• Labels: pull-request-available
• Assignee: Robert Levas
• Reporter: SuryaKranthi Koneru
• Created: 12/Jun/18 22:07
• Updated: 28/Jun/18 11:03
• Resolved: 21/Jun/18 15:22

Description

When SSL is enabled and the python version is 2.7.14, accessing the Ambari server via the ambari-server CLI fails with CERTIFICATE_VERIFY_FAILED.

 

Example

-bash-4.2# ambari-server setup-sso -v
Using python /usr/bin/python
Setting up SSO authentication properties...
INFO: Loading properties from /etc/ambari-server/conf/ambari.properties
INFO: Setup SSO.
INFO: about to run command: ps -p 33705
INFO:
process_pid=107113
INFO: Loading properties from /etc/ambari-server/conf/ambari.properties
Enter Ambari Admin login: admin
Enter Ambari Admin password:
INFO: Fetching SSO configuration from DB
INFO: Fetching information from Ambari's REST API
Traceback (most recent call last):
 File "/usr/sbin/ambari-server.py", line 1056, in <module>
 mainBody()
 File "/usr/sbin/ambari-server.py", line 1026, in mainBody
 main(options, args, parser)
 File "/usr/sbin/ambari-server.py", line 976, in main
 action_obj.execute()
 File "/usr/sbin/ambari-server.py", line 90, in execute
 self.need_restart = self.fn(*self.args, **self.kwargs)
 File "/usr/lib/ambari-server/lib/ambari_server/setupSso.py", line 266, in setup_sso
 properties = get_sso_properties(ambari_properties, admin_login, admin_password)
 File "/usr/lib/ambari-server/lib/ambari_server/setupSso.py", line 221, in get_sso_properties
 response_code, json_data = get_json_via_rest_api(properties, admin_login, admin_password, SSO_CONFIG_API_ENTRYPOINT)
 File "/usr/lib/ambari-server/lib/ambari_server/serverUtils.py", line 206, in get_json_via_rest_api
 with closing(urllib2.urlopen(request)) as response:
 File "/usr/lib64/python2.7/urllib2.py", line 154, in urlopen
 return opener.open(url, data, timeout)
 File "/usr/lib64/python2.7/urllib2.py", line 429, in open
 response = self._open(req, data)
 File "/usr/lib64/python2.7/urllib2.py", line 447, in _open
 '_open', req)
 File "/usr/lib64/python2.7/urllib2.py", line 407, in _call_chain
 result = func(*args)
 File "/usr/lib64/python2.7/urllib2.py", line 1243, in https_open
 context=self._context)
 File "/usr/lib64/python2.7/urllib2.py", line 1200, in do_open
 raise URLError(err)
urllib2.URLError: <urlopen error [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:661)>

Issue Links

• causes: AMBARI-24207 Python unit test failure on 2.7.6
• links to: GitHub Pull Request #1520