Details
Description
Ambari agent script should not kinit with Oozie service credentials on behalf of the Oozie service.
This is occurring in
oozie_service.py (around line 26)
kinit_if_needed = format("{kinit_path_local} -kt {oozie_keytab} {oozie_principal};") if params.security_enabled else ""
oozie_service.py (around line 40)
cmd2 = format("{kinit_if_needed} {put_shared_lib_to_hdfs_cmd} ; hadoop --config {hadoop_conf_dir} dfs -chmod -R 755 {oozie_hdfs_user_dir}/share")
oozie_service.py (around line 60)
Execute( cmd2,
user = params.oozie_user,
not_if = format("{kinit_if_needed} hadoop --config {hadoop_conf_dir} dfs -ls /user/oozie/share | awk 'BEGIN {{count=0;}} /share/ {{count++}} END {{if (count > 0) {{exit 0}} else {{exit 1}}}}'"),
path = params.execute_path
)