[AMBARI-25225] Zeppelin Restart via Ambari Changes Permissions on log folder which causes Permission issue for impersonated users

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.6.2
• Component/s: ambari-server
• Labels: pull-request-available
• Assignee: Akhil Naik
• Reporter: Akhil Naik
• Created: 02/Apr/19 10:09
• Updated: 06/Aug/19 06:58
• Resolved: 06/Aug/19 05:59

Description

Problem Statement : I am Using User impersonation for some of interpreters in zeppelin , now that the interpreters write their own logs to the zeppelin log directory. This becomes impossible if the users do not have permissions to write to the zeppelin log directory. This is because while starting zeppelin the Ambari changes the permission of zeppelin log directory to 0755 which makes only Zeppelin user having having write permission in log directory.

expectation with user impersonation is, all the impersonating users will belong to hadoop group (which is same as zeppelin, zeppelin also belong to hadoop) . So Zeppelin Startup script should give 0775 Permission to /var/log/zeppelin folder

https://github.com/apache/ambari/blob/release-2.6.2/ambari-server/src/main/resources/common-services/ZEPPELIN/0.7.0/package/scripts/master.py#L104

Issue Links

• links to: GitHub Pull Request #2905