Member since
03-20-2017
21
Posts
0
Kudos Received
0
Solutions
03-28-2017
03:12 AM
Thanks @Jay SenSharma @Robert Levas ,i find the reason when click Regenerate Keytab, a web page pop, Principle and password needed . but some time it pop up,some time nothing。i will find why .
... View more
03-28-2017
12:37 AM
yes, it happened every time when click 'Regenreate Keytab'. the Ambari version is 2.4.2.0-136
... View more
03-27-2017
10:03 AM
1. ambari is running as ambari i think the reason is "STDERR: kadmin: Cannot read password while initializing kadmin interface" but when i run kadmin at another host(not kdc server) , i can connect the kdc server like this(input kadmin password) . they are all same with kdc's. maybe the ambari-server read password from error config ??
... View more
03-27-2017
08:59 AM
from ambari-web "Admin->Kerberos->", when i click "Regenerate Keytabs" an error occured One error is "/var/log/kadmin.log: don't have permission Another is "kadmin:Can't read password while initalizing kadmin interface"
... View more
Labels:
- Labels:
-
Apache Ambari
-
Kerberos
03-24-2017
03:39 AM
thanks Jay very much! i works ;what's the reason of this error
... View more
03-24-2017
03:26 AM
so many rows in tables, last version in 'clusterconfigmapping ' table mysql>select * from clusterconfig WHERE type_name in ('kerberos-env', 'krb5-conf');
| 1059 | version1490153129291 | 41 | krb5-conf | 2 | 5 | {"domains":"","manage_krb5_conf":"false","conf_dir":"/etc","content":" ***** | 1490153128147 |
*******
82 rows in set (0.02 sec)
mysql> select * from clusterconfigmapping WHERE type_name in ('kerberos-env', 'krb5-conf'); +--------------+------------------+------------+----------+----------------------+-----------+
| type_name | create_timestamp | cluster_id | selected | version_tag | user_name | +--------------+------------------+------------+----------+----------------------+-----------+ | krb5-conf | 1490153128175 | 2 | 0 | version1490153129291 | admin | +--------------+------------------+------------+----------+----------------------+-----------+
mysql> select ccm.type_name, ccm.version_tag, ccm.selected, cc.version_tag from clusterconfigmapping ccm left join clusterconfig cc on ccm.version_tag = cc.version_tag where ccm.selected = 1 and cc.version_tag is NULL; Empty set (0.00 sec)
should i change table 'clusterconfigmapping' ,the column 'selected=1' like this update clusterconfigmapping set select=1 where version_tag='version1490153129291'and type_name='krb5-conf'
... View more
03-24-2017
01:42 AM
when i install kerberos with ambari-server ,an error logs ERROR [ambari-client-thread-35] KerberosHelperImpl:1938 - The 'krb5-conf' configuration is not available
ERROR [ambari-client-thread-35] AbstractResourceProvider:343 - Caught AmbariException when modifying a resource
i open source code of KerberosHelperImpl in ambari-server . here is the code Config configKrb5Conf = cluster.getDesiredConfigByType("krb5-conf");
if (configKrb5Conf == null) {
String message = "The 'krb5-conf' configuration is not available";
LOG.error(message);
throw new AmbariException(message);
}
then i check krb-conf in ambair server host, two files first /etc/krb5.conf second /var/lib/ambari-server/resources/scripts/krb5.conf which file ambari-server used , why the error occured
... View more
Labels:
- Labels:
-
Apache Ambari
-
Kerberos
03-21-2017
09:52 AM
yes i checked "/etc/krb5.conf", again ,nothing wrong ,from error text ,it means "*.keytabs" file used old "EXAMPLE.COM", I don't know how to update or rebuild the keytabs?
... View more
03-21-2017
09:35 AM
when i delete file /etc/security/keytabs/kerberos.service_check.032117.keytab
another error occured like this: stderr: /var/lib/ambari-agent/data/errors-2362.txt Traceback (most recent call last):
File "/var/lib/ambari-agent/cache/common-services/KERBEROS/1.10.3-10/package/scripts/service_check.py", line 81, in <module>
KerberosServiceCheck().execute()
File "/usr/lib/python2.6/site-packages/resource_management/libraries/script/script.py", line 280, in execute
method(env)
File "/var/lib/ambari-agent/cache/common-services/KERBEROS/1.10.3-10/package/scripts/service_check.py", line 72, in service_check
raise Fail(err_msg)
resource_management.core.exceptions.Fail: Failed to execute kinit test due to principal or keytab not found or available stdout: /var/lib/ambari-agent/data/output-2362.txt Command failed after 1 tries
... View more
03-21-2017
09:31 AM
Kerberos didn't sucess, there no "Regenerate Keytabs". i don't know how to regenrate hte keytabs?
... View more