Support Questions

Find answers, ask questions, and share your expertise

Access denied for user 'ambari'@localhost (using password: YES)

avatar
Expert Contributor

I'm traying to install Ambari for my cluster HDP, while when I configured MYSQL to be the database for My Serveur Ambari and than Started Ambari Service i got this erreur:

ERROR - Unexpected error, database check failed com.google.inject.CreationException: Guice creation errors: 1) Error injecting constructor, java.lang.RuntimeException: java.sql.SQLException: Access denied for user 'ambari'@'10.166.2.206' (using password: YES) at org.apache.ambari.server.orm.DBAccessorImpl.<init>(DBAccessorImpl.java:83) at org.apache.ambari.server.orm.DBAccessorImpl.class(DBAccessorImpl.java:71) while locating org.apache.ambari.server.orm.DBAccessorImpl while locating org.apache.ambari.server.orm.DBAccessor for field at org.apache.ambari.server.orm.dao.DaoUtils.dbAccessor(DaoUtils.java:36)

Can someone explaine what wrong with My Ambari server Please

1 ACCEPTED SOLUTION

avatar
Expert Contributor

I think that i found the solution:

when i started the ambari installation, I stupidly change the default password which is bigdata to an other

So when the server goes to start it retrieve the password which is inside /etc/ambari-server/conf/password.dat in order to connect to Mysql which is obviously not the same.

I forced the change of the password in the path: /etc/ambari-server/conf/password.dat and then it works fine

thanks @Jay Kumar SenSharma

View solution in original post

15 REPLIES 15

avatar
Master Mentor

@yassine sihi

As we see the IP Address in your error which usually is the Hostname.

Access denied for user 'ambari'@'10.166.2.206' (using password: YES) 


Hence please check if your AmbariServer is running on FQDN (hostname -f) or On IP Address.

# hostname -f
# cat /etc/hosts



Regrading the Database permission issue please make sure that your run the following commands on your MySQL DB

GRANT ALL PRIVILEGES ON *.* TO 'ambari'@'%';
GRANT ALL PRIVILEGES ON *.* TO 'ambari'@'localhost';
GRANT ALL PRIVILEGES ON *.* TO 'ambari'@'YOUR_AMBARI_HOSTNMAE';
GRANT ALL PRIVILEGES ON *.* TO 'ambari'@'10.166.2.206';
FLUSH PRIVILEGES;

.

Then restart Ambari Server.

For more details please refer to: https://docs.hortonworks.com/HDPDocuments/Ambari-2.5.2.0/bk_ambari-administration/content/using_amba...

.

Reference Thread: https://community.hortonworks.com/questions/144043/error-1045-28000-access-denied-for-user-ambari.ht...

.

avatar
Expert Contributor
My AmbariServer is running on FQDN:
      # hostname -f
      slzusd1mys04.sres.stech


when i execute those commands on my MySQL DB i get :

      ERROR 1045 (28000): Access denied for user 'ambari'@'localhost' (using password: NO)  

avatar
Expert Contributor

My AmbariServer is running on FQDN:

# hostname -f
slxxxxxsxxx.sxxx.sxxx

when i execute those commands on my MySQL DB i get :

ERROR 1045 (28000): Access denied for user 'ambari'@'localhost' (using password: NO)  

avatar
Master Mentor

@yassine sihi

Please login to the MySQL Database (not necessarily on "ambari" DB) but you can login to "mysql" DB instead as following:

Login as "root" user.

# mysql -u root -p
Enter password: <ENTER_YOUR_DB_ROOT_PASSWORD>

mysql> select User,Password,Host from mysql.user;

.

Then check if the "ambari" user is present in the output of the above command with 'localhost' permission?

If you are able to login to your MySQL DB with the "root" user then you should be able to run the following queries:

    ambari> use mysql;
    GRANT ALL PRIVILEGES ON *.* TO 'ambari'@'%';
    GRANT ALL PRIVILEGES ON *.* TO 'ambari'@'localhost';
    CREATE USER 'ambari'@'standaloneambari.example.com' IDENTIFIED BY 'bigdata';  <---- Replace the host name 
    GRANT ALL PRIVILEGES ON *.* TO 'ambari'@'standaloneambari.example.com';  <---- Replace the host name 
    FLUSH PRIVILEGES;

.

avatar
Master Mentor

@yassine sihi

Just in case if this is a fresh MySQL setup and you do not know your MySQL "root" user password the please try the following link to update the root user password.:

https://community.hortonworks.com/questions/141454/what-is-the-mysql-root-password-from-hive-install...

avatar
Expert Contributor

@Jay Kumar SenSharma

I could access to Mysql by root and ran those commands, i got the following result:

when i try to creat Ambari user i get this erreur:

ERROR 1396 (HY000): Operation CREATE USER failed for 'ambari'@'slxxxxxxxx.xxxx.xxx'

thanks for your reply!!

avatar
Expert Contributor

when i type without password i get access to MySQL (this is weird bacause i wrote a password at setup of Ambari):

# mysql -u ambari

This is what i get:

+----------------- | User | Password | host | +----------------------

| root | *76BE106726BEDB650DBACA0B576C7 | localhost

| root | | slxxxxxxxxxxxx.xxxx.sxxx |

| root | | 127.0.0.1 |

| root | | ::1 |

| Adm_replic | *53598BE3DB17445045 | localhost |

| CO_MUS00SPV_SELE | *F1B83C64FA87D87108077B666A5 | % |

| root | *76BE10672EF6D33A0B576C7 | % |

| CO_ZUS10MYS_SYS | *8FFFE041802516F235DDE3A4506E | localhost |

....................................

..........................

| ambari | *C33A05FE652CA69F0DE7FA785D3916 | % |

| hive | *5269CDF94758ACD11C110A254DAE | % |

| hive | *99A15A0B5385DF649D48344E0 | slxxxxxxxxxxxx.xxxx.sxxx |

| oozie | *C3BE1E212509519234736969 | % |

| ambari | | localhost |

| ambari | | slxxxxxxxxxxxx.xxxx.sxxx |

+------------------+-------------------------------------------+-------------------------+

i think that ambari has been without password!!!

avatar
Master Mentor

@yassine sihi

You can confirm your Ambari Server Database password inside the following file: (By default the password is not Encrypted, Until you explicitly choose to encrypt the passwords)

[root@sandbox ~]# grep 'server.jdbc.user.passwd' /etc/ambari-server/conf/ambari.properties
server.jdbc.user.passwd=/etc/ambari-server/conf/password.dat

[root@sandbox ~]# cat /etc/ambari-server/conf/password.dat
bigdata

.

avatar
Expert Contributor

@Jay Kumar SenSharma

Yes i can see the password that i have typed beford, it's literally different than 'bigdata', so why i still can login without password??