Need help to revert back some changes i made through CM for level 1 tls

somsat — Fri, 16 Sep 2022 10:42:40 GMT

Hi All,

I am new to cdh and was trying to implement Kerberos in my cluster.

As a pre-requisite for installing kerberos, i had to implement Level 1 TLS (min) on my cluster.

So i started with the steps that are provided here: https://www.cloudera.com/documentation/enterprise/5-6-x/topics/cm_sg_config_tls_encr.html#topic_2.

I had completed all the steps and restarted cloudera-scm-agents in all the hosts and cloudera-scm-server in my NN.

But my cloudera-scm-server stops automatically after few secs.

I tried to revert back the changes but other than changing 'use_tls', i am unable to change Use TLS Encryption for Agents property which i changed through CM.

Due this my cluster as well as 7180 port doesn't start.

1) Can anybody let me know where exactly this property is located so that i can change it back through the command line?

- Also, is this the right approach?

2) Can i now complete the pre-requisites and then try to start my cluster?

- I saw that i have to use CM to enable HTTps Enable HTTPS for the Cloudera Manager Admin Console and Specify Server Keystore Properties for which i need to have CM, but since i am unable to start CM, what is the resolution.

3) Is reimaging the machines, the final option.

Also, can somebody explain the concept of having self signed in certificates and what is the need of certificates for availing security in CDH.

Thanks in advance!!!

Please help.

Re: Need help to revert back some changes i made through CM for level 1 tls

somsat — Tue, 04 Oct 2016 09:51:30 GMT

I changed the value to FALSE for agent_tls (was inside the config tables) in the postgre sql database and restared the cloudera-server.

It seems by enabling the use tls autentication for agents changed the value in the database.

The issue was fixed without any re-imaging.

question Need help to revert back some changes i made through CM for level 1 tls in Archives of Support Questions (Read Only)

Need help to revert back some changes i made through CM for level 1 tls

Re: Need help to revert back some changes i made through CM for level 1 tls