Kerberos installation on HDP 2.5 sandbox - Issues

[#1]

Hi, i'm trying to enable Kerberos on HDP 2.5 sandbox, and running into issues.

https://docs.hortonworks.com/HDPDocuments/Ambari-2.2.1.1/bk_Ambari_Security_Guide/content/_optional_...

When i run the command -

> yum install krb5-server krb5-libs krb5-workstation

I get the following error ->

[root@sandbox ambari]# yum -y install krb5-server krb5-libs krb5-workstation Loaded plugins: fastestmirror, ovl, priorities Setting up Install Process Loading mirror speeds from cached hostfile Error: Cannot retrieve metalink for repository: epel. Please verify its path and try again

Any ideas on this ?

Appreciate your help on this.

[#2]

Hi @Karan Alang,

can you please restart your VM from VirtualBox?

[#3 · Accepted solution]

Hi @Mushtaq Rizvi,

Thanks for the response .. i was able to fix this .. the issue was that the SandBox does not have access to servers used to download the installable, so i put entries into /etc/hosts to enable entry.

Any idea how to give the SandBox access to all external urls ?

[#4]

@Karan Alang , Sandbox has open internet, you can access all external urls using wget, curl or ping.

[#5]

@Mushtaq Rizvi - pls. see my questions in the following links, and let me know if you have any answers on this -

https://community.hortonworks.com/questions/65928/setting-up-kafka-securty-using-apache-ranger.html#...

https://community.hortonworks.com/questions/60349/enabling-kerberos-in-hdp-25-kerberos-clientpy-does...

[#6]

Hi @Karan Alang - this could be an issue with the DNS server setup. You might want to check your /etc/resolv.conf file and point it to an external DNS server, such as 8.8.8.8, and try again.

[#7]

@eddie johnson,

i changed the entry in

/etc/resolv.conf file to ->

192.168.1.1, and it is able to access the external websites now !

Thanks for your help on this.

[#8]

@eddie johnson,

This is what i see in the /etc/resolv.conf

[root@sandbox ~]# cat /etc/resolv.conf

nameserver 8.8.8.8

[root@sandbox ~]# ping yahoo.com ping: unknown host yahoo.com

[root@sandbox ~]# ping www.yahoo.com ping: unknown host www.yahoo.com

[root@sandbox ~]# ping http://www.yahoo.com

ping: unknown host http://www.yahoo.com

So, seems like i'm not able to access the external websites from HDP Sandbox,

what so i need to change here ?