Support Questions

Find answers, ask questions, and share your expertise
Announcements
Celebrating as our community reaches 100,000 members! Thank you!

ambari host registration failed

avatar
New Contributor

I m trying to install HDP 2.6.4 using ambari ambari-2.5.0.3 in RHEL 7.5 using jdk1.8.0_101 and postgresql-9.5.8. I am able to install ambari agents and ambari server in all hosts. While registering all host in ambari ui all host registration is getting failed except ambari-server host. Also verified /etc/hosts in all servers ,hostname are correct and i am able to telnet the ambari server from all agent servers.

my openssl verion-

openssl version -v

OpenSSL 1.0.2k-fips 26 Jan 2017

I am adding agent log below please check.

INFO 2018-06-11 14:55:42,409 NetUtil.py:67 - Connecting to https://amabri_server_host:8440/ca ERROR 2018-06-11 14:55:42,487 NetUtil.py:93 - [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:579) ERROR 2018-06-11 14:55:42,487 NetUtil.py:94 - SSLError: Failed to connect. Please check openssl library versions. Refer to: https://bugzilla.redhat.com/show_bug.cgi?id=1022468 for more details. WARNING 2018-06-11 14:55:42,488 NetUtil.py:121 - Server at https://amabri_server_host:8440 is not reachable, sleeping for 10 seconds...

1 ACCEPTED SOLUTION

avatar
Rising Star
2 REPLIES 2

avatar
Rising Star

Hi @Bhagabati Das,

RHEL 7.5 is not supported for HDP 2.6.4:

https://docs.hortonworks.com/HDPDocuments/HDP2/HDP-2.6.4/bk_support-matrices/content/ch01.html

However, your error seems to be related to this:

https://access.redhat.com/articles/2039753

Gonçalo

avatar
Master Mentor

@Bhagabati Das

If you are using CentOS 7, RHEL7, SLES 12 (Python 2.7) then in order to solve this problem simply configure the Ambari Agent to use TLSv1.2 when communicating with the Ambari Server by editing each Ambari Agent’s "/etc/ambari-agent/conf/ambari-agent.ini" file and adding the following configuration property to the security section:

[security]
  force_https_protocol=PROTOCOL_TLSv1_2<br>

Then restart the ambari agent:

# ambari-agent restart


For CentOS 6/RHEL6, or SLES 11 (Python 2.6), Edit the java.security file in the JDK being used by the Ambari Server and make the following changes:
Locate the jdk.tls.disabledAlgorithms property and remove the 3DES_EDE_CBC reference
Save the file, and restart the Ambari Server.

More details are available on:

HCC Article: https://community.hortonworks.com/articles/188269/javapython-updates-and-ambari-agent-tls-settings.h...

HCC Thread: https://community.hortonworks.com/questions/120861/ambari-agent-ssl-certificate-verify-failed-certif...