Support Questions
Find answers, ask questions, and share your expertise
Announcements
Alert: Welcome to the Unified Cloudera Community. Former HCC members be sure to read and learn how to activate your account here.

host registration fail with ambari server (ssl certificate problem)

Highlighted

host registration fail with ambari server (ssl certificate problem)

New Contributor

Hello,

I am trying to register a new host for my HDP cluster but I egt a fail of the registartion with the Amabai server .

Below is the log file related to the registration fail , I undertand that I have a SSL certificate problem

May you please confirm that only this issue is mentioned in this log file and suggest any idea to cope with this problem

==========================
Creating target directory...
==========================

Command start time 2017-11-24 15:26:16

Connection to node2.hadoop.com closed.
SSH command execution finished
host=node2.hadoop.com, exitcode=0
Command end time 2017-11-24 15:26:17

==========================
Copying ambari sudo script...
==========================

Command start time 2017-11-24 15:26:17

scp /var/lib/ambari-server/ambari-sudo.sh
host=node2.hadoop.com, exitcode=0
Command end time 2017-11-24 15:26:17

==========================
Copying common functions script...
==========================

Command start time 2017-11-24 15:26:17

scp /usr/lib/python2.6/site-packages/ambari_commons
host=node2.hadoop.com, exitcode=0
Command end time 2017-11-24 15:26:17

==========================
Copying OS type check script...
==========================

Command start time 2017-11-24 15:26:17

scp /usr/lib/python2.6/site-packages/ambari_server/os_check_type.py
host=node2.hadoop.com, exitcode=0
Command end time 2017-11-24 15:26:17

==========================
Running OS type check...
==========================

Command start time 2017-11-24 15:26:17
Cluster primary/cluster OS family is redhat7 and local/current OS family is redhat7

Connection to node2.hadoop.com closed.
SSH command execution finished
host=node2.hadoop.com, exitcode=0
Command end time 2017-11-24 15:26:18

==========================
Checking 'sudo' package on remote host...
==========================

Command start time 2017-11-24 15:26:18

Connection to node2.hadoop.com closed.
SSH command execution finished
host=node2.hadoop.com, exitcode=0
Command end time 2017-11-24 15:26:18

==========================
Copying repo file to 'tmp' folder...
==========================

Command start time 2017-11-24 15:26:18

scp /etc/yum.repos.d/ambari.repo
host=node2.hadoop.com, exitcode=0
Command end time 2017-11-24 15:26:18

==========================
Moving file to repo dir...
==========================

Command start time 2017-11-24 15:26:18

Connection to node2.hadoop.com closed.
SSH command execution finished
host=node2.hadoop.com, exitcode=0
Command end time 2017-11-24 15:26:19

==========================
Changing permissions for ambari.repo...
==========================

Command start time 2017-11-24 15:26:19

Connection to node2.hadoop.com closed.
SSH command execution finished
host=node2.hadoop.com, exitcode=0
Command end time 2017-11-24 15:26:19

==========================
Copying setup script file...
==========================

Command start time 2017-11-24 15:26:19

scp /usr/lib/python2.6/site-packages/ambari_server/setupAgent.py
host=node2.hadoop.com, exitcode=0
Command end time 2017-11-24 15:26:19

==========================
Running setup agent script...
==========================

Command start time 2017-11-24 15:26:19
('WARNING 2017-11-24 15:20:50,334 NetUtil.py:116 - Server at https://master:8440 is not reachable, sleeping for 10 seconds...
INFO 2017-11-24 15:20:50,334 HeartbeatHandlers.py:115 - Stop event received
INFO 2017-11-24 15:20:50,335 NetUtil.py:122 - Stop event received
INFO 2017-11-24 15:20:50,335 ExitHelper.py:53 - Performing cleanup before exiting...
INFO 2017-11-24 15:20:50,335 ExitHelper.py:67 - Cleanup finished, exiting with code:0
INFO 2017-11-24 15:20:51,256 main.py:223 - Agent died gracefully, exiting.
INFO 2017-11-24 15:20:51,257 ExitHelper.py:53 - Performing cleanup before exiting...
INFO 2017-11-24 15:26:22,904 main.py:90 - loglevel=logging.INFO
INFO 2017-11-24 15:26:22,905 main.py:90 - loglevel=logging.INFO
INFO 2017-11-24 15:26:22,905 main.py:90 - loglevel=logging.INFO
INFO 2017-11-24 15:26:22,909 DataCleaner.py:39 - Data cleanup thread started
INFO 2017-11-24 15:26:22,914 DataCleaner.py:120 - Data cleanup started
INFO 2017-11-24 15:26:22,916 DataCleaner.py:122 - Data cleanup finished
INFO 2017-11-24 15:26:22,964 PingPortListener.py:50 - Ping port listener started on port: 8670
INFO 2017-11-24 15:26:22,969 main.py:349 - Connecting to Ambari server at https://master.hadoop.com:8440 (51.15.134.161)
INFO 2017-11-24 15:26:22,969 NetUtil.py:62 - Connecting to https://master.hadoop.com:8440/ca
ERROR 2017-11-24 15:26:23,141 NetUtil.py:88 - [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:579)
ERROR 2017-11-24 15:26:23,142 NetUtil.py:89 - SSLError: Failed to connect. Please check openssl library versions. 
Refer to: https://bugzilla.redhat.com/show_bug.cgi?id=1022468 for more details.
WARNING 2017-11-24 15:26:23,145 NetUtil.py:116 - Server at https://master.hadoop.com:8440 is not reachable, sleeping for 10 seconds...
', None)
('WARNING 2017-11-24 15:20:50,334 NetUtil.py:116 - Server at https://master:8440 is not reachable, sleeping for 10 seconds...
INFO 2017-11-24 15:20:50,334 HeartbeatHandlers.py:115 - Stop event received
INFO 2017-11-24 15:20:50,335 NetUtil.py:122 - Stop event received
INFO 2017-11-24 15:20:50,335 ExitHelper.py:53 - Performing cleanup before exiting...
INFO 2017-11-24 15:20:50,335 ExitHelper.py:67 - Cleanup finished, exiting with code:0
INFO 2017-11-24 15:20:51,256 main.py:223 - Agent died gracefully, exiting.
INFO 2017-11-24 15:20:51,257 ExitHelper.py:53 - Performing cleanup before exiting...
INFO 2017-11-24 15:26:22,904 main.py:90 - loglevel=logging.INFO
INFO 2017-11-24 15:26:22,905 main.py:90 - loglevel=logging.INFO
INFO 2017-11-24 15:26:22,905 main.py:90 - loglevel=logging.INFO
INFO 2017-11-24 15:26:22,909 DataCleaner.py:39 - Data cleanup thread started
INFO 2017-11-24 15:26:22,914 DataCleaner.py:120 - Data cleanup started
INFO 2017-11-24 15:26:22,916 DataCleaner.py:122 - Data cleanup finished
INFO 2017-11-24 15:26:22,964 PingPortListener.py:50 - Ping port listener started on port: 8670
INFO 2017-11-24 15:26:22,969 main.py:349 - Connecting to Ambari server at https://master.hadoop.com:8440 (51.15.134.161)
INFO 2017-11-24 15:26:22,969 NetUtil.py:62 - Connecting to https://master.hadoop.com:8440/ca
ERROR 2017-11-24 15:26:23,141 NetUtil.py:88 - [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:579)
ERROR 2017-11-24 15:26:23,142 NetUtil.py:89 - SSLError: Failed to connect. Please check openssl library versions. 
Refer to: https://bugzilla.redhat.com/show_bug.cgi?id=1022468 for more details.
WARNING 2017-11-24 15:26:23,145 NetUtil.py:116 - Server at https://master.hadoop.com:8440 is not reachable, sleeping for 10 seconds...
', None)

Connection to node2.hadoop.com closed.
SSH command execution finished
host=node2.hadoop.com, exitcode=0
Command end time 2017-11-24 15:26:25

Registering with the server...
Registration with the server failed.

Thaks a lot in advance for your help

Regards

1 REPLY 1

Re: host registration fail with ambari server (ssl certificate problem)

Super Mentor

@Haifa Ben Aouicha

The Error is :

ERROR 2017-11-24 15:26:23,141 NetUtil.py:88 - [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:579)

Please update /etc/python/cert-verification.cfg to have verify=disable (Or please create this file)

sed -i 's/verify=platform_default/verify=disable/' /etc/python/cert-verification.cfg


If this file does not exist like in RHEL6 then create this file add the new directory in /etc/python and created the cert-verification.cfg file, which had the verify=disable parameter.

Else refer to the following link to know about "Controlling certificate verification": https://access.redhat.com/articles/2039753#controlling-certificate-verification-7

HCC Thread: https://community.hortonworks.com/questions/120861/ambari-agent-ssl-certificate-verify-failed-certif...

This issue you should not see in latest version of ambari (like 6.0)

Don't have an account?
Coming from Hortonworks? Activate your account here