question Re: ambari host registration failed in Archives of Support Questions (Read Only)

ambari host registration failed

bapuld1992 — Mon, 11 Jun 2018 18:18:09 GMT

I m trying to install HDP 2.6.4 using ambari ambari-2.5.0.3 in RHEL 7.5 using jdk1.8.0_101 and postgresql-9.5.8. I am able to install ambari agents and ambari server in all hosts. While registering all host in ambari ui all host registration is getting failed except ambari-server host. Also verified /etc/hosts in all servers ,hostname are correct and i am able to telnet the ambari server from all agent servers.

my openssl verion-

openssl version -v

OpenSSL 1.0.2k-fips 26 Jan 2017

I am adding agent log below please check.

INFO 2018-06-11 14:55:42,409 NetUtil.py:67 - Connecting to https://amabri_server_host:8440/ca ERROR 2018-06-11 14:55:42,487 NetUtil.py:93 - [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:579) ERROR 2018-06-11 14:55:42,487 NetUtil.py:94 - SSLError: Failed to connect. Please check openssl library versions. Refer to: https://bugzilla.redhat.com/show_bug.cgi?id=1022468 for more details. WARNING 2018-06-11 14:55:42,488 NetUtil.py:121 - Server at https://amabri_server_host:8440 is not reachable, sleeping for 10 seconds...

Re: ambari host registration failed

gcunha — Mon, 11 Jun 2018 18:24:10 GMT

Hi @Bhagabati Das,

RHEL 7.5 is not supported for HDP 2.6.4:

https://docs.hortonworks.com/HDPDocuments/HDP2/HDP-2.6.4/bk_support-matrices/content/ch01.html

However, your error seems to be related to this:

https://access.redhat.com/articles/2039753

Gonçalo

Re: ambari host registration failed

jsensharma — Mon, 11 Jun 2018 19:03:51 GMT

@Bhagabati Das

If you are using CentOS 7, RHEL7, SLES 12 (Python 2.7) then in order to solve this problem simply configure the Ambari Agent to use TLSv1.2 when communicating with the Ambari Server by editing each Ambari Agent’s "/etc/ambari-agent/conf/ambari-agent.ini" file and adding the following configuration property to the security section:

[security]
  force_https_protocol=PROTOCOL_TLSv1_2<br>

Then restart the ambari agent:

# ambari-agent restart

For CentOS 6/RHEL6, or SLES 11 (Python 2.6), Edit the java.security file in the JDK being used by the Ambari Server and make the following changes:
Locate the jdk.tls.disabledAlgorithms property and remove the 3DES_EDE_CBC reference
Save the file, and restart the Ambari Server.

More details are available on:

HCC Article: https://community.hortonworks.com/articles/188269/javapython-updates-and-ambari-agent-tls-settings.html

HCC Thread: https://community.hortonworks.com/questions/120861/ambari-agent-ssl-certificate-verify-failed-certifi.html