Support Questions
Find answers, ask questions, and share your expertise
Announcements
Alert: Welcome to the Unified Cloudera Community. Former HCC members be sure to read and learn how to activate your account here.

Fail to refer to policies on Ranger Admin HA and kerberized environment

Highlighted

Fail to refer to policies on Ranger Admin HA and kerberized environment

New Contributor

Fail to refer to policies on Ranger Admin HA and kerberized environment.

First, I validated Ranger Admin HA.

Second, I validated enabling kerberize.

"Start and Test Service", in the setting wizard, failed and forcibly clicked "Complete"

In this result, ResourceManager and policies are invalid.

Please refer to the attachments.

Regards,

7 REPLIES 7

Re: Fail to refer to policies on Ranger Admin HA and kerberized environment

Can you clarify your issue? I don't see any ranger related logs in the attachment.

Re: Fail to refer to policies on Ranger Admin HA and kerberized environment

New Contributor

@vperiasamy

Sorry, my english is broken.

Under Ranger Admin HA environmet, I try to enable kerberize.

Enabling kerberize fail by "Start and Test Service" in the wizard.

The log is attached to the previous question.

Re: Fail to refer to policies on Ranger Admin HA and kerberized environment

New Contributor

I think that error is related to ResourceManager of Yarn and policies are invalid.

Re: Fail to refer to policies on Ranger Admin HA and kerberized environment

I see "stderr: Python script has been killed due to timeout after waiting 300 secs" in all the logs attached. So you need to check your kerberos config and investigate why Ambari is taking so much time to complete the kerberization step.

Re: Fail to refer to policies on Ranger Admin HA and kerberized environment

New Contributor

@vperiasamy

Thank you for reply. I resolved the problem.

Ranger setting caused that error. "kerberos" seem to query by host name. But It is set to be IP in the Ranger setting, "External address".

I have changed IP to hostname in the Ranger setting. In the RangerHA environmet,"kerberized cluster" get to the loadbalancer(RangerHA).

Re: Fail to refer to policies on Ranger Admin HA and kerberized environment

New Contributor

hi ,i also have this probelm , I install loadbalancer in a node without ranger admin ,but the loadbalancer URL did not work,where i change ip to host ,and it did not work too ,the error is can not find the service

Re: Fail to refer to policies on Ranger Admin HA and kerberized environment

Glad you resolved the issue. Please note that hostnames should be used for kerberos, ip address will not work.