Created on 10-03-2014 03:06 AM - edited 09-16-2022 02:09 AM
Hi all,
Created 10-09-2014 10:54 AM
You would work your way back through the security guide discussion on enabling kerberos:
Note that if HBASE, or NN HA or JT HA was configured after enabling security, the cleanup can be difficult, the Znode paths within zookeeper might require manual removal of the ACL statements.
Todd
Created 10-03-2014 01:32 PM
Created 10-03-2014 01:33 PM
Created 10-09-2014 01:46 AM
Hi,
I didn't find the button on CDH 5.1.2 but i removed the Kerberos Ticket Renewer and redeployed client.
I missed this for Solr
SOLR -> Solr Secure Authentication -> Simple
Thanks
Created 10-09-2014 10:54 AM
You would work your way back through the security guide discussion on enabling kerberos:
Note that if HBASE, or NN HA or JT HA was configured after enabling security, the cleanup can be difficult, the Znode paths within zookeeper might require manual removal of the ACL statements.
Todd
Created 10-10-2014 01:58 AM
Thanks,
I followed the instructions in reverse order, present on the link.
When I disabled Kerberos, I had the two Namenodes (HA) both in stand-by state and I removed manually entries in Zookeeper.
Now it works!!!
Thanks
Alessio
Created 10-20-2014 02:23 AM
Hi,
I have another question about this.
when you said :
Note that if HBASE, or NN HA or JT HA was configured after enabling security, the cleanup can be difficult, the Znode paths within zookeeper might require manual removal of the ACL statements.
The same problem can be present for Yarn (HA).
I tried to find the 'yarn.resourcemanager.zk-auth' in the yarn-site.xml (/var/run/cloudera-scm-agent/process) in order to auth with Zookeper and remove the ACL statement but is not present this parameter.
I searched it into all folders XXX-yarn-RESOURCEMANAGER (also in the most recent) but I cannot find it
How can i solve this? At the moment I have Yarn not in HA and when I try to enable the HA, both ResourceManagers stay in Stand-by
Thanks
Alessio
Created 02-23-2015 08:04 AM
Solved !!!
Thanks
Alessio
Created 03-18-2015 07:47 AM
How so? i have the same problem! Both my Yarn HA services went into standby.
Created 03-18-2015 08:48 AM
Created 04-15-2015 02:46 PM
Hello Alessio,
I am facing the same problem could you please outline the steps you did for Yarn and Zookeeper.
Thanks
Deepak
Created 02-16-2016 02:41 PM
The link provided is now broken. Is there an update to it?
Created on 02-16-2016 02:44 PM - edited 02-16-2016 02:45 PM
Created on 02-17-2016 04:12 AM - edited 02-17-2016 04:18 AM
Try this one:
Created on 09-16-2015 09:08 AM - edited 09-16-2015 09:12 AM
Have the same problem, but after clean and reinstall cluster (using parcels). Error appears when oozie java action wrties to HDFS (runs from HUE). Earlier on this cluster was Kerberos, and I cleand all (I hope) directories from previous installation.
Here is a detailed message:
Failing Oozie Launcher, Main class [org.apache.oozie.action.hadoop.JavaMain], main() threw exception, java.io.IOException: Failed on local exception: java.io.IOException: Server asks us to fall back to SIMPLE auth, but this client is configured to only allow secure connections.; Host Details : local host is: "hadoop-05.xxx.xx/172.19.x.xxx"; destination host is: "hadoop-02.xxx.xx":8020; org.apache.oozie.action.hadoop.JavaMainException: java.io.IOException: Failed on local exception: java.io.IOException: Server asks us to fall back to SIMPLE auth, but this client is configured to only allow secure connections.; Host Details : local host is: "hadoop-05.xxx.xx/172.19.x.xxx"; destination host is: "hadoop-02.xxx.xx":8020;
Created 02-11-2016 01:55 PM