Impala Services not starting

[#1]

Hello Team,

Our impala services are not starting : its failing with below log file:

Although we have put all configuration file in Impala configuration.

4:18:23.781 PM INFO cc:370

Webserver: set_ssl_option: cannot open /opt/cloudera/security/x509/key/host.pem: error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad decrypt

4:18:23.782 PM INFO cc:124

Webserver: Could not start on address 0.0.0.0:8007
@ 0xb5e579
@ 0x11e5fec
@ 0x110e053
@ 0xac6b1c
@ 0x7ffa35134554
@ 0xb237e8

4:18:23.782 PM FATAL cc:59

Webserver: Could not start on address 0.0.0.0:8007

[#2 · Accepted solution]

Hello , In our working machine , it is set under root :

Working :-

[root@elara-master-u2-n02 ~]# getfacl /opt/cloudera/security/x509/key/host.pem
getfacl: Removing leading '/' from absolute path names
# file: opt/cloudera/security/x509/key/host.pem
# owner: root
# group: root
user::rw-
group::r--
other::r--

[root@elara-master-u2-n02 ~]#

Not working :-

[root@elara2-master-u4-n02 83-hdfs-NAMENODE]# getfacl /opt/cloudera/security/x509/key/host.pem
getfacl: Removing leading '/' from absolute path names
# file: opt/cloudera/security/x509/key/host.pem
# owner: root
# group: root
user::rw-
group::r--
other::r--

[root@elara2-master-u4-n02 83-hdfs-NAMENODE]#

[#3]

@Swagat ,

Please check that the file /opt/cloudera/security/x509/key/host.pem exists and has read permissions for the impala user.

If the file exists, you can grant permission to the impala user by running the following command as root:

setfacl -m user:impala:r-- /opt/cloudera/security/x509/key/host.pem

Cheers,

André

--
Was your question answered? Please take some time to click on "Accept as Solution" below this post.
If you find a reply useful, say thanks by clicking on the thumbs up button.

[#4 · Accepted solution]

Hello , In our working machine , it is set under root :

Working :-

[root@elara-master-u2-n02 ~]# getfacl /opt/cloudera/security/x509/key/host.pem
getfacl: Removing leading '/' from absolute path names
# file: opt/cloudera/security/x509/key/host.pem
# owner: root
# group: root
user::rw-
group::r--
other::r--

[root@elara-master-u2-n02 ~]#

Not working :-

[root@elara2-master-u4-n02 83-hdfs-NAMENODE]# getfacl /opt/cloudera/security/x509/key/host.pem
getfacl: Removing leading '/' from absolute path names
# file: opt/cloudera/security/x509/key/host.pem
# owner: root
# group: root
user::rw-
group::r--
other::r--

[root@elara2-master-u4-n02 83-hdfs-NAMENODE]#

[#5]

@Swagat ,

What's the content of your host.pem?

André

[#6]

Its used for SSL certificate.

[#7]

Yep, I know. Would you be able to share the content of that file? You can send it to me in pvt if you prefer.

André

[#8 · Accepted solution]

The issue is resolved . The issue was related to password for Host.pem file