[AMBARI-25388] Ambari Hive service checks when SSL is enabled with Truststore.

• Type: Bug
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Affects Version/s: 2.7.3
• Component/s: ambari-sever

Environment

Ambari 2.7.3

• Assignee: Unassigned
• Reporter: Sindhu Subhas
• Created: 03/Oct/19 18:11
• Updated: 03/Oct/19 18:11

Description

Problem:

When Hive services are enabled with SSL along with Truststore, the Ambari service check scripts still look for Keystores and fail:

2019-06-03 04:40:24,252 [CRITICAL] [HARD] [HIVE] [hive_server_process] (HiveServer2 Process) Connection failed on host xxxx.com:10001 (Traceback (most recent call last):
  File "/var/lib/ambari-agent/cache/stacks/HDP/3.0/services/HIVE/package/alerts/alert_hive_thrift_port.py", line 204, in execute
    ldap_password=ldap_password)
  File "/usr/lib/ambari-agent/lib/resource_management/libraries/functions/hive_check.py", line 84, in check_thrift_port_sasl
    timeout_kill_strategy=TerminateStrategy.KILL_PROCESS_TREE,
  File "/usr/lib/ambari-agent/lib/resource_management/core/base.py", line 166, in __init__
    self.env.run()
  File "/usr/lib/ambari-agent/lib/resource_management/core/environment.py", line 160, in run
    self.run_action(resource, action)
  File "/usr/lib/ambari-agent/lib/resource_management/core/environment.py", line 124, in run_action
    provider_action()
  File "/usr/lib/ambari-agent/lib/resource_management/core/providers/system.py", line 263, in action_run
    returns=self.resource.returns)
  File "/usr/lib/ambari-agent/lib/resource_management/core/shell.py", line 72, in inner
    result = function(command, **kwargs)
  File "/usr/lib/ambari-agent/lib/resource_management/core/shell.py", line 102, in checked_call
    tries=tries, try_sleep=try_sleep, timeout_kill_strategy=timeout_kill_strategy, returns=returns)
  File "/usr/lib/ambari-agent/lib/resource_management/core/shell.py", line 150, in _call_wrapper
    result = _call(command, **kwargs_copy)
  File "/usr/lib/ambari-agent/lib/resource_management/core/shell.py", line 314, in _call
    raise ExecutionFailed(err_msg, code, out, err)
ExecutionFailed: Execution of 'beeline -u 'jdbc:hive2://xxxx.com:10001/;transportMode=http;httpPath=cliservice;ssl=true;sslTrustStore=/etc/security/serverKeys/serverCerts.jks;trustStorePassword=[PROTECTED]' -n 'xxx' -p '[PROTECTED]' -e ';' 2>&1 | awk '{print}' | grep -i -e 'Connected to:' -e 'Transaction isolation:'' returned 1.