Support Questions
Find answers, ask questions, and share your expertise
Announcements
Alert: Welcome to the Unified Cloudera Community. Former HCC members be sure to read and learn how to activate your account here.

Delete Range Audit Solr Collection got Zookeeper Auth Error.

Highlighted

Delete Range Audit Solr Collection got Zookeeper Auth Error.

New Contributor

We have one local ambari HDP clusters 2.6.0.0 which has been enabled kerberos and also Ranger, Kafka also is installed as the component.

We used this local Ambari Infra SolrCloud as Range Audit.

At the beginning, the Ranger Audit log is shown correctly, but after a while, we got error like the below:

"Error running solr query, please check solr configs. Could not find a healthy node to handle the request."


Now per the suggestion from Google, I got to know the collection "ranger_audits" need to be deleted and restart the Ranger.

Since we have enabled the kerberos in this Ambari Cluster, now follow the link below to try to delete the collection:

https://community.hortonworks.com/articles/96618/how-to-clean-up-recreate-collections-on-ambari-inf....


but after the Kinit is successfully and run the below CURL to try to delete collection:

>>curl -i -v --negotiate -u : "http://<My_Host_FQDN>:8886/solr/admin/collections?action=DELETE&name=ranger_audits"

I got the below exceptions:

<response>

<lst name="responseHeader"><int name="status">500</int><int name="QTime">0</int></lst><lst name="error"><str name="msg">KeeperErrorCode = AuthFailed for /overseer/collection-queue-work/qnr-</str><str name="trace">org.apache.zookeeper.KeeperException$AuthFailedException: KeeperErrorCode = AuthFailed for /overseer/collection-queue-work/qnr-

at org.apache.zookeeper.KeeperException.create(KeeperException.java:123)

at org.apache.zookeeper.KeeperException.create(KeeperException.java:51)

at org.apache.zookeeper.ZooKeeper.create(ZooKeeper.java:783)

at org.apache.solr.common.cloud.SolrZkClient$9.execute(SolrZkClient.java:380)

at org.apache.solr.common.cloud.SolrZkClient$9.execute(SolrZkClient.java:377)

at org.apache.solr.common.cloud.ZkCmdExecutor.retryOperation(ZkCmdExecutor.java:60)

at org.apache.solr.common.cloud.SolrZkClient.create(SolrZkClient.java:377)

at org.apache.solr.cloud.OverseerTaskQueue.createData(OverseerTaskQueue.java:168)

at org.apache.solr.cloud.OverseerTaskQueue.offer(OverseerTaskQueue.java:189)

at org.apache.solr.handler.admin.CollectionsHandler.handleResponse(CollectionsHandler.java:255)

at org.apache.solr.handler.admin.CollectionsHandler.handleRequestBody(CollectionsHandler.java:195)

at org.apache.solr.handler.RequestHandlerBase.handleRequest(RequestHandlerBase.java:155)

at org.apache.solr.servlet.HttpSolrCall.handleAdminRequest(HttpSolrCall.java:660)

at org.apache.solr.servlet.HttpSolrCall.call(HttpSolrCall.java:441)

at org.apache.solr.servlet.SolrDispatchFilter.doFilter(SolrDispatchFilter.java:257)

at org.apache.solr.servlet.SolrDispatchFilter.doFilter(SolrDispatchFilter.java:208)

at org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1652)

at org.eclipse.jetty.servlet.ServletHandler.doHandle(ServletHandler.java:585)

at org.eclipse.jetty.server.handler.ScopedHandler.handle(ScopedHandler.java:143)

at org.eclipse.jetty.security.SecurityHandler.handle(SecurityHandler.java:577)

at org.eclipse.jetty.server.session.SessionHandler.doHandle(SessionHandler.java:223)

at org.eclipse.jetty.server.handler.ContextHandler.doHandle(ContextHandler.java:1127)

at org.eclipse.jetty.servlet.ServletHandler.doScope(ServletHandler.java:515)

at org.eclipse.jetty.server.session.SessionHandler.doScope(SessionHandler.java:185)

at org.eclipse.jetty.server.handler.ContextHandler.doScope(ContextHandler.java:1061)

at org.eclipse.jetty.server.handler.ScopedHandler.handle(ScopedHandler.java:141)

at org.eclipse.jetty.server.handler.ContextHandlerCollection.handle(ContextHandlerCollection.java:215)

at org.eclipse.jetty.server.handler.HandlerCollection.handle(HandlerCollection.java:110)

at org.eclipse.jetty.server.handler.HandlerWrapper.handle(HandlerWrapper.java:97)

at org.eclipse.jetty.server.Server.handle(Server.java:499)

at org.eclipse.jetty.server.HttpChannel.handle(HttpChannel.java:310)

at org.eclipse.jetty.server.HttpConnection.onFillable(HttpConnection.java:257)

at org.eclipse.jetty.io.AbstractConnection$2.run(AbstractConnection.java:540)

at org.eclipse.jetty.util.thread.QueuedThreadPool.runJob(QueuedThreadPool.java:635)

at org.eclipse.jetty.util.thread.QueuedThreadPool$3.run(QueuedThreadPool.java:555)

at java.lang.Thread.run(Thread.java:745)

</str><int name="code">500</int></lst>

</response>


Seems the Zookeeper authorization is failed?

Here is the what I got:

[zk: <ZK_HOST>:2181(CONNECTED) 5] getAcl /infra-solr/overseer

'sasl,'infra-solr

: cdrwa

'world,'anyone

: r


But I am thinking seems we can NOT got authorization with /etc/security/keytabs/ambari-infra-solr.service.keytab & Zookeeper keytab at the same time?

Then How can I got authorization to delete this collection?

Thanks.