Ambari Agent Registration Failure on RHEL 6.5 Due to OpenSSL

to create new topics or reply. | New User Registration

This topic contains 7 replies, has 6 voices, and was last updated by  Anwar Mian 4 weeks ago.

  • Creator
    Topic
  • #51117

    Pramod Thangali
    Moderator

    Ambari Agent Registration Failure on RHEL 6.5 Due to OpenSSL

    Symptom: If you are deploying HDP using Ambari on RHEL 6.5 you will likely see Ambari Agents fail to register with Ambari Server during the Confirm Hosts step in the Cluster Install wizard. After clicking on Failed link on the Wizard page to display the Agent logs. You will see a log entry that looks like this indicating the SSL connection between the Agent and Server failed during registration.

    INFO 2014-04-02 04:25:22,669 NetUtil.py:55 - Failed to connect to https://<ambari-server>:8440/cert/ca due to [Errno 1] _ssl.c:492: error:100AE081:elliptic curve routines:EC_GROUP_new_by_curve_name:unknown group
    
    

    Platforms:

    • RHEL / CentOS 6.5
    • Ambari 1.4 or later

    Root Cause: The OpenSSL library available and installed by default on RHEL/CentOS 6.5 has a bug. Refer to https://bugzilla.redhat.com/show_bug.cgi?id=1025598 for detailed information on the bug.

    Remedy:

    1. Check the OpenSSL library version installed on your host(s):

      rpm -qa | grep openssl
      
      openssl-1.0.1e-15.el6.x86_64
      
      
    2. If the output says openssl-1.0.1e-15.x86_64 (1.0.1 build 15) you will need to upgrade the OpenSSL library by running the following command:

      yum upgrade openssl

    3. Verify you have the newer version of OpenSSL (1.0.1 build 16):

      rpm -qa | grep openssl

      openssl-1.0.1e-16.el6.x86_64

    4. Restart Ambari Agent(s) and Click Retry Failed on the Wizard.
Viewing 7 replies - 1 through 7 (of 7 total)

You must be to reply to this topic. | Create Account

  • Author
    Replies
  • #73787

    Anwar Mian
    Participant

    I’ve solved the problem. My data node (I have only one now) had openssl-1.0.1e-15.el6.x86_64. It was not upgraded. Once I upgraded it all my nodes were registered successfully. It’s very important to upgrade openssl.

    Collapse
    #73765

    Anwar Mian
    Participant

    I have the following openssl version but it’s still complaining:

    openssl-1.0.1e-30.el6.8.x86_64

    I have CentOs 6.5 (final) and ambari-server-2.0.1-45.noarch

    Collapse
    #69991

    This solution worked perfectly for me. I am using CentOS 6.5 and Ambari 1.7. The original openssl version was openssl.x86_64 0:1.0.1e-15.el6 and the new one is openssl.x86_64 0:1.0.1e-30.el6.8. As this is a cluster with some hosts, to apply the change on to all hosts I used SSH like this (from the ambari server): for I in <list of host names with spaces in between>;do ssh $I “yum upgrade openssl -y”;done

    Marco Aurelio Freiberger Monteiro

    Collapse
    #68962

    S Siddalingaiah
    Participant

    Hi, i faced similar issue i also noticed my open ssl version was openssl-1.0.1e-15.el6.x86_64 after upgrading to openssl-1.0.1e-16.el6.x86_64 Ambari Registration went through successfully

    Thanks
    Ramesh S

    Collapse
    #56831

    Darius Agharokh
    Participant

    Hi, this issue is now resolved. Started the agent manually on the two nodes and ‘retry’ the install. went much further and failed again as I had specified two directories for the namenode (comma delimited), removed the second directory , the install went through.
    Regards
    Darius

    Collapse
    #56829

    Darius Agharokh
    Participant

    Hi, Not sure if this is the correct thread. I am doing an automated install with Ambari 1.6 and hdp2.0. On “Cluster Install Wizard” step during ‘Install, start and Test”, I get a failure on two nodes of my 5 node test cluster. The error “Hearbeat lost for cluster”. “Ambari agent process is not heartbeating on the host”. This is happening on one of my datanodes and my master namenode. I have correct ssl version,. perhaps not the correct thread, can you please direct me .
    Many thanks
    Darius

    Collapse
    #53787

    Jie Lu
    Participant

    I already install openssl-1..0.1e-16.el6_5.x86_64 on ambari-server and ambari-agent.
    But it is also print out this error info without no reason after “due to”.

    Collapse
Viewing 7 replies - 1 through 7 (of 7 total)
Hortonworks Data Platform
The Hortonworks Data Platform is a 100% open source distribution of Apache Hadoop that is truly enterprise grade having been built, tested and hardened with enterprise rigor.
Get started with Sandbox
Hortonworks Sandbox is a self-contained virtual machine with Apache Hadoop pre-configured alongside a set of hands-on, step-by-step Hadoop tutorials.
Modern Data Architecture
Tackle the challenges of big data. Hadoop integrates with existing EDW, RDBMS and MPP systems to deliver lower cost, higher capacity infrastructure.