Support Questions
Find answers, ask questions, and share your expertise
Announcements
Alert: Welcome to the Unified Cloudera Community. Former HCC members be sure to read and learn how to activate your account here.

Permissions problem in Capacity Scheduler view in Ambari 2.4.2.0

Solved Go to solution

Permissions problem in Capacity Scheduler view in Ambari 2.4.2.0

Expert Contributor

After upgrading to from Ambari 2.1.2.1 to Ambari 2.4.2.0 i can no longer edit Capacity Scheduler queues. I receive:

Warning! You do not have permission to edit the Capacity Scheduler configuration. Contact your Cluster administrator.

10302-snap-2016-12-14-at-191708.png

However, my user is Amabri Administrator user:

10303-snap-2016-12-14-at-191529.png

Even the Audit log confirms this:

10304-snap-2016-12-14-at-192258.png

If i login with the default local Admin user - it works and i can change queues configuration. The only thing that has changed is the Ambari version due to the upgrade. No changes were made to my user which is and always have been an Administrator user.

Any ideas ?

1 ACCEPTED SOLUTION

Accepted Solutions
Highlighted

Re: Permissions problem in Capacity Scheduler view in Ambari 2.4.2.0

Expert Contributor

Apparently it's caused due to this known bug: https://issues.apache.org/jira/browse/AMBARI-18520

I've received a fix from HW after opening a case :)

Adi

7 REPLIES 7

Re: Permissions problem in Capacity Scheduler view in Ambari 2.4.2.0

Super Guru

Is LDAP working? Do you need to restart anything?

Re: Permissions problem in Capacity Scheduler view in Ambari 2.4.2.0

Expert Contributor

Hi @Timothy Spann

Thank you for replying

LDAP is working - i'm able to login using my LDAP user & password and so do other users from LDAP. Also - after the upgrade, as part of the post-upgrade i have ran the ambari ldap setup again (as required in the upgrade manual) and restarted Ambari + All of the services of the cluster + the Ambari host itself - several times.

Re: Permissions problem in Capacity Scheduler view in Ambari 2.4.2.0

New Contributor

I'm pretty sure the Capacity Scheduler permissions query against the Ambari API is incorrect. The change that introduced this is here:

https://github.com/apache/ambari/commit/82ccf224f0142b0b63c13e6ac0d58d45f55dd5ab

The related JIRA: https://issues.apache.org/jira/browse/AMBARI-16866

The correct url:

http://AMBARI/api/v1/users/USERNAME/privileges?PrivilegeInfo/permission_name=AMBARI.ADMINISTRATOR|(P...

This returns the list of privileges.

The incorrect url:

http://AMBARI/api/v1/users/USERNAME?privileges/PrivilegeInfo/permission_name=AMBARI.ADMINISTRATOR|(p...

This returns a blank page.

Highlighted

Re: Permissions problem in Capacity Scheduler view in Ambari 2.4.2.0

Expert Contributor

Apparently it's caused due to this known bug: https://issues.apache.org/jira/browse/AMBARI-18520

I've received a fix from HW after opening a case :)

Adi

Re: Permissions problem in Capacity Scheduler view in Ambari 2.4.2.0

Expert Contributor

I am having the same issues after upgrading from Ambari 2.4.0.1 to Ambari 2.5.0.3: The CapSched View is effectively unusable, as no Admin can access it anymore.

Re: Permissions problem in Capacity Scheduler view in Ambari 2.4.2.0

Expert Contributor

@Roland Simonis Do you use LDAP for Ambari authentication ? If so, go to /etc/ambari-server/conf

edit ambari.properties Add: authentication.ldap.username.forceLowercase=true Ssave Restart Ambari Check CapSched again.

Re: Permissions problem in Capacity Scheduler view in Ambari 2.4.2.0

Expert Contributor

@Adi Jabkowsky This did the trick! Thank you. Now it works.

Don't have an account?
Coming from Hortonworks? Activate your account here