The unexpected benefit of this is that nobody will ever forget the LDAP password again: not will it be included in your favourite shell's history file, but anyone who can log in on that node will also be able to see those options by keeping an eye on ps. Isn't that neat? Don't do this, kids. Never write passwords on the command line. ... View more

Both ldapsearch and cron will show up in ps with passwords in their command line. That's easy to prevent with both tools: use the -y option for ldapsearch, and --netrc-file for cron. ... View more

I ran into a very similar issue with the same error message. I could only diagnose it by diving into the python scripts of the resource_management module, and let it dump more information to stdout. In our case, it was not due to stale versions. Our cluster uses a non-root installation of Ambari, but somehow, the node where a service failed to start ended up having an incorrect sudoers configuration (in particular: the "Defaults: ambari !requiretty" line was missing). This caused the directory existence test to fail with the message "sudo: sorry, you must have a tty to run sudo", but the script does not distinguish between the nonzero exit status of 'test' and the nonzero exit status of 'sudo'. The solution was to properly configure sudo. After doing so, the service could start. ... View more