@TR7_BRYLE
The error is actually due to timeout (and not because of port access)
SSLError('The read operation timed out',)
Above error indicates that communication further like reading a response is timing out. So we will have to first check why the "https" request is being timed out.
We can try using the following kind of simple Python script to simulate what agent actually tries. Ambari agent is a python utility which tries to connect to ambari server a d tries to register itself and sends heartbeat messages to ambari server.
So we can test the following script from the agent host to see if it is able to connect or if that is also getting timed out. We are using 'httplib' to test the access and Https communication.
# cat /tmp/SSL/ssl_test.py
import httplib
import ssl
if __name__ == "__main__":
ca_connection = httplib.HTTPSConnection('kerlatest1.example.com:8440', timeout=5, context=ssl._create_unverified_context())
ca_connection.request("GET", '/connection_info')
response = ca_connection.getresponse()
print response.status
data = response.read()
print str(data)
Run it like following:
# export PYTHONPATH=/usr/lib/ambari-agent/lib:/usr/lib/ambari-agent/lib/ambari_agent:$PYTHONPATH
# python /tmp/SSL/ssl_test.py
If above works fine and it returns 200 and returns result like following:
# python /tmp/SSL/ssl_test.py
200
{"security.server.two_way_ssl":"false"}
If you notice any HTTPS communitation or certificat related error then you might want to refer to the following article and according to your Ambari version please check if you have following defined in your ambari-agent.ini file "[security]" section?
[security]
force_https_protocol=PROTOCOL_TLSv1_2
- If you still face any issue then can you please share the "ambari-agent.log" freshly after restarting it ?
Reference Article:
Java/Python Updates and Ambari Agent TLS Settings
https://community.cloudera.com/t5/Community-Articles/Java-Python-Updates-and-Ambari-Agent-TLS-Settin...
.
.
