question Re: ambari server problem 3 in Support Questions

ambari server problem 3

Manoj690 — Wed, 21 Aug 2019 10:45:08 GMT

Caused by: java.sql.SQLException: Connections using insecure transport are prohibited while --require_secure_transport=ON. at com.mysql.jdbc.SQLError.createSQLException(SQLError.java:965) at com.mysql.jdbc.MysqlIO.checkErrorPacket(MysqlIO.java:3973)

Re: ambari server problem 3

jsensharma — Wed, 21 Aug 2019 08:57:06 GMT

@Manoj690

As we see the mentioned message "require_secure_transport=ON" in your exception

which indicates that you might have configured your MySQL to allow secure connections. You can find that setting inside the "/etc/my.cnf"

Option-1). Hence ether you will need to disable that setting from mysql config and restart MySQL. If it is ON means it is enabled.

# grep 'require_secure_transport' /etc/my.cnf require_secure_transport = OFF # systemctl restart mysql.service

Option-2). OR you will need to Get the MySQL service certificate and then make sure that you import the MySQL certificate inside the AmbariServer truststore OR insie the JDK cacert in which your AmbariServer is running.

Example: Importing MySQL CA Certificate in AmbariServer's JDK Truststore :

# /usr/jdk64/jdk1.8.0_112/bin/keytool -import -file /tmp/mysql_cert.pem -alias mysql_ambari -keystore /usr/jdk64/jdk1.8.0_112/jre/lib/security/cacerts

The restart AmbariServer.

# ambari-server restart

Re: ambari server problem 3

Manoj690 — Wed, 21 Aug 2019 09:04:22 GMT

if i run this command its asking keyword password: (what was the password)

/usr/jdk64/jdk1.8.0_112/bin/keytool -import -file /tmp/mysql_cert.pem -alias mysql_ambari -keystore /usr/jdk64/jdk1.8.0_112/jre/lib/security/cacerts
Enter keystore password:

Re: ambari server problem 3

jsensharma — Wed, 21 Aug 2019 09:05:31 GMT

Password is "changeit" which is default cacert password.

Re: ambari server problem 3

Manoj690 — Wed, 21 Aug 2019 09:06:45 GMT

Thanks a lot

finally ambari server started