Kerberizing an HDP 2.x cluster with Active Directory and Ambari 2.x succeeds with JDK 1.7.
When we upgrade to JDK 1.8, it fails with the following error:
javax.naming.CommunicationException: simple bind failed:x.y.z:389 [Root exception is javax.net.ssl.SSLException: java.net.SocketException: Connection reset]
Anyone experienced this before?
Is there a specific release of JDK 1.8.x that we know works?
Where are you able to see this error ? I tested and HDP2.3 with kerberos and JDK1.8 it works for me.
Can you be specific about Ambari and HDP version you are using.
AD with SSL seems to be a problem. Please check link below -
This error appears in the ambari-server logs.
HDP Version: 2.3.2
Ambari Version: 2.1.2
Java Version: 1.8.x
I'll take a look at the links you posted
Not sure what version of HDP you are using but this is known Apache bug HADOOP-10786. This issue is fixed in HDP 2.3 or later. If you are using HDP 2.2, please downgrade to JDK version 1.7 update 79 or earlier and it should work.