Cloudera Community
aliyesami
user rank
Super Collaborator
My Accepted Solutions
Show All

Re: SOLR server connection refused

by Super Collaborator in Support Questions
‎12-05-2016 09:58 PM
‎12-05-2016 09:58 PM
ok I copied the solrconfig.xml and schema.xml files into the /root/solr-6.3.0/server/lib folder but now I am getting this error : ... View more

Re: SOLR server connection refused

by Super Collaborator in Support Questions
‎12-05-2016 08:48 PM
‎12-05-2016 08:48 PM
I am not fi nding anywhere in these links where the following screen is explained , please help ... View more

Re: SOLR server connection refused

by Super Collaborator in Support Questions
‎12-02-2016 04:32 PM
‎12-02-2016 04:32 PM
I am on HDP2.5 , I am not sure if its secure SOLR or not , how can I find out ? I couldn't find any document from Hortonworks about how to setup SOLR for Ranger , can you point me to one? ... View more

Re: SOLR server connection refused

by Super Collaborator in Support Questions
‎12-02-2016 03:47 AM
‎12-02-2016 03:47 AM
I noticed there are no cores available in SOLR admin , so do I have to create a core before I can connect with the above url ? if yes can you please guide me on how to do that ? ... View more

SOLR server connection refused

by Super Collaborator in Support Questions
‎12-02-2016 03:05 AM
‎12-02-2016 03:05 AM
my SOLR server is up and running but when ranger tries to connect to it I get error : iam not sure if the ranger audit url I am using is correct since its unreachable "http://hadoop1:8983/solr/ranger_audits" ? if I try to go to this url I get the error HTTP ERROR 404 Problem accessing /solr/ranger_audits. Reason: Not Found 2016-12-01 22:25:03,511 [http-bio-6080-exec-5] ERROR org.apache.ranger.solr.SolrUtil (SolrUtil.java:78) - Error from Solr server. org.apache.solr.client.solrj.impl.HttpSolrClient$RemoteSolrException: Error from server at http://hadoop1:8983/solr/ranger_audits: Expected mime type application/octet-stream but got text/html. <html> <head> <meta http-equiv="Content-Type" content="text/html;charset=utf-8"/> <title>Error 404 Not Found</title> </head> <body><h2>HTTP ERROR 404</h2> <p>Problem accessing /solr/ranger_audits/select. Reason: <pre> Not Found</pre></p> </body> </html> the SOLR console is reachable ... View more

Re: Kerberos HDFS security issue

by Super Collaborator in Support Questions
‎12-02-2016 02:50 AM
‎12-02-2016 02:50 AM
can anyone answer this please ? ... View more

RANGER trying to use SOLR

by Super Collaborator in Support Questions
‎12-01-2016 10:57 PM
‎12-01-2016 10:57 PM
I am getting an error when accessing the AUDIT tab "unable to connect to audit store" . When I looked at the xa_portal.log file I see the following errors ,which tells me its trying to use SOLR which I have disabled , please see the screenshot and log below : 2016-12-01 17:47:08,845 [http-bio-6080-exec-2] FATAL org.apache.ranger.solr.SolrMgr (SolrMgr.java:128) - Solr ZKHosts and URL for Audit are empty. Please set property ranger.audit.solr.zookeepers or ranger.audit.solr.urls 2016-12-01 17:47:08,845 [http-bio-6080-exec-2] WARN org.apache.ranger.solr.SolrAccessAuditsService (SolrAccessAuditsService.java:129) - Solr client is null, so not running the query. 2016-12-01 17:47:08,845 [http-bio-6080-exec-2] INFO org.apache.ranger.common.RESTErrorUtil (RESTErrorUtil.java:65) - Request failed. SessionId=297, loginId=admin, logMessage=Error connecting to search engine javax as you see the audit to SOLR is turned off ... View more

Re: Kerberos HDFS security issue

by Super Collaborator in Support Questions
‎12-01-2016 06:51 PM
‎12-01-2016 06:51 PM
on profile it doesn't say its a public profile ? please see the picture below of the policy ... View more

Re: Kerberos HDFS security issue

by Super Collaborator in Support Questions
‎12-01-2016 06:50 PM
‎12-01-2016 06:50 PM
but there is ranger policy in place please see the picture below ... View more

Kerberos HDFS security issue

by Super Collaborator in Support Questions
‎12-01-2016 06:18 PM
‎12-01-2016 06:18 PM
I have ranger plugin enabled for HDFS and the policy is in place and I am not in the list of users that have access to the policy (see picture) but I can still access all the HDFS directories ? -bash-4.1$ klist Ticket cache: FILE:/tmp/krb5cc_600 Default principal: sami@MY.COM Valid starting Expires Service principal 11/30/16 23:22:44 12/01/16 23:22:44 krbtgt/MY.COM@MY.COM renew until 11/30/16 23:22:44 -bash-4.1$ -bash-4.1$ -bash-4.1$ hdfs dfs -ls /user/flume/ Found 4 items drwx------ - flume hdfs 0 2016-11-28 19:00 /user/flume/.Trash drwxr-xr-x - flume hdfs 0 2016-10-12 16:50 /user/flume/.hiveJars drwxrwxr-x - flume hdfs 0 2016-11-23 10:03 /user/flume/tweets drwxr-xr-x - flume hdfs 0 2016-11-03 10:54 /user/flume/tweets2 -bash-4.1$ <a href="/storage/attachments/10019-capture.jpg">capture.jpg</a> if I destroy the ticket then I don't get access . -bash-4.1$ kdestroy -bash-4.1$ -bash-4.1$ -bash-4.1$ klist klist: No credentials cache found (ticket cache FILE:/tmp/krb5cc_600) -bash-4.1$ -bash-4.1$ hdfs dfs -ls /user/flume/ 16/12/01 13:19:08 WARN ipc.Client: Exception encountered while connecting to the server : javax.security.sasl.SaslException: GSS initiate failed [Caused by GSSException: No valid credentials provided (Mechanism level: Failed to find any Kerberos tgt)] ... View more
Contact Me
Online
Offline
Last Visited
‎11-03-2016 03:37 PM
Community Statistics
Member Since ‎04-22-2016 08:38 AM
Last Visited ‎11-03-2016 03:37 PM
Posts 931
Kudos received 46