Support Questions

Find answers, ask questions, and share your expertise
Announcements
Celebrating as our community reaches 100,000 members! Thank you!

Impala Services not starting

avatar
Explorer

Hello Team,

Our impala services are not starting : its failing with below log file:

Although we have put all configuration file in Impala configuration.

4:18:23.781 PM INFO cc:370

Webserver: set_ssl_option: cannot open /opt/cloudera/security/x509/key/host.pem: error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad decrypt

4:18:23.782 PM INFO cc:124

Webserver: Could not start on address 0.0.0.0:8007
@ 0xb5e579
@ 0x11e5fec
@ 0x110e053
@ 0xac6b1c
@ 0x7ffa35134554
@ 0xb237e8

4:18:23.782 PM FATAL cc:59

Webserver: Could not start on address 0.0.0.0:8007

 

 

2 ACCEPTED SOLUTIONS

avatar
Explorer

Hello , In our working machine , it is set under root :

Working :-

[root@elara-master-u2-n02 ~]# getfacl /opt/cloudera/security/x509/key/host.pem
getfacl: Removing leading '/' from absolute path names
# file: opt/cloudera/security/x509/key/host.pem
# owner: root
# group: root
user::rw-
group::r--
other::r--

[root@elara-master-u2-n02 ~]#

Not working :-

[root@elara2-master-u4-n02 83-hdfs-NAMENODE]# getfacl /opt/cloudera/security/x509/key/host.pem
getfacl: Removing leading '/' from absolute path names
# file: opt/cloudera/security/x509/key/host.pem
# owner: root
# group: root
user::rw-
group::r--
other::r--

[root@elara2-master-u4-n02 83-hdfs-NAMENODE]#

View solution in original post

avatar
Explorer

The issue is resolved . The issue was related to password for Host.pem file

View solution in original post

6 REPLIES 6

avatar
Super Guru

@Swagat ,

 

Please check that the file /opt/cloudera/security/x509/key/host.pem exists and has read permissions for the impala user.

 

If the file exists, you can grant permission to the impala user by running the following command as root:

setfacl -m user:impala:r-- /opt/cloudera/security/x509/key/host.pem

 

Cheers,

André

--
Was your question answered? Please take some time to click on "Accept as Solution" below this post.
If you find a reply useful, say thanks by clicking on the thumbs up button.

--
Was your question answered? Please take some time to click on "Accept as Solution" below this post.
If you find a reply useful, say thanks by clicking on the thumbs up button.

avatar
Explorer

Hello , In our working machine , it is set under root :

Working :-

[root@elara-master-u2-n02 ~]# getfacl /opt/cloudera/security/x509/key/host.pem
getfacl: Removing leading '/' from absolute path names
# file: opt/cloudera/security/x509/key/host.pem
# owner: root
# group: root
user::rw-
group::r--
other::r--

[root@elara-master-u2-n02 ~]#

Not working :-

[root@elara2-master-u4-n02 83-hdfs-NAMENODE]# getfacl /opt/cloudera/security/x509/key/host.pem
getfacl: Removing leading '/' from absolute path names
# file: opt/cloudera/security/x509/key/host.pem
# owner: root
# group: root
user::rw-
group::r--
other::r--

[root@elara2-master-u4-n02 83-hdfs-NAMENODE]#

avatar
Super Guru

@Swagat ,

 

What's the content of your host.pem?

 

André

--
Was your question answered? Please take some time to click on "Accept as Solution" below this post.
If you find a reply useful, say thanks by clicking on the thumbs up button.

avatar
Explorer

Its used for SSL certificate.

avatar
Super Guru

Yep, I know. Would you be able to share the content of that file? You can send it to me in pvt if you prefer.

 

André

 

--
Was your question answered? Please take some time to click on "Accept as Solution" below this post.
If you find a reply useful, say thanks by clicking on the thumbs up button.

avatar
Explorer

The issue is resolved . The issue was related to password for Host.pem file