Member since
07-30-2013
509
Posts
113
Kudos Received
123
Solutions
My Accepted Solutions
Title | Views | Posted |
---|---|---|
2974 | 07-09-2018 11:54 AM | |
2482 | 05-03-2017 11:03 AM | |
6004 | 03-28-2017 02:27 PM | |
2309 | 03-27-2017 03:17 PM | |
2028 | 03-13-2017 04:30 PM |
12-02-2015
11:47 AM
Hi, Similar to what's discussed here: http://cloudera.github.io/cm_api/docs/python-client/#configuring-services-and-roles You can use the update_all_hosts_config method on the ClouderaManager object to set this config (in endpoints/cms.py). Thanks, Darren
... View more
11-30-2015
01:50 PM
Hi Vikas, In general, we recommend storing data on instance storage drives for EC2 since EBS volumes are slow and charge you per access. Instance storage is ephemeral, which means that whether the dir is named "/swap" or something else, it'll disappear if you restart the machine. You should back up your data to a safe location before powering down your EC2 machine, as discussed here: http://www.cloudera.com/content/www/en-us/documentation/other/reference-architecture/PDF/cloudera_ref_arch_aws.pdf The difference between dfs.data.dir and dfs.datanode.data.dir is that the first is a very old name used in CDH3 and perhaps earlier, while the second the preferred current config name as of CDH4. They are both logically the same thing. Thanks, Darren
... View more
11-24-2015
08:40 AM
1 Kudo
Hi, Unfortunately, there's a known bug in hadoop where any capital letters in host names makes Kerberos not work. The only thing you can do is change your host names to be all lowercase. Thanks, Darren
... View more
11-20-2015
01:39 PM
Hi Shailesh, We don't permit the Key Trustee stuff in trial anymore for 5.5 since we didn't want people to see an option for which they can't install the bits. Key Trustee Server bits aren't publicly available. You seem to be in a special situation where you actually do have a license to use Key Trustee Server, but your CM doesn't have an enterprise license installed. Please work with your account team to get this license for CM, which should be included with any Cloudera subscription. Thanks, Darren
... View more
11-20-2015
11:56 AM
Looks like Key Trustee KMS is installed correctly. How about your license?
... View more
11-20-2015
11:38 AM
Forgot to mention, you also need a license to use any of the Key Trustee stuff. What license do you have? Java Keystore KMS does not require any license.
... View more
11-20-2015
11:34 AM
That's unexpected then. I see it on our 5.5 clusters in the Add Service Wizard options for a full admin user. Can you check this endpoint and see if you have a Key Trustee KMS CSD installed: <host>:7180/cmf/csd/list You should see an entry in the JSON under "availableCsds" saying: "csdName": "KEYTRUSTEE-5.5.0" The only other entry with "KEYTRUSTEE" in the name should be "KEYTRUSTEE_SERVER-5.5.0". If you've got an extra copy of the CSD lying around, you should remove it (it's probably in /opt/cloudera/csds on the CM server host) and restart CM. To be extra safe, you may want to back up anything in /var/lib/ that has "keytrustee" or "kms" in it, just to ensure you don't lose your Key Trustee KMS encryption keys, which would cause you to lose all of your encrypted data. Thanks, Darren
... View more
11-20-2015
11:17 AM
Hi Shailesh, Are you logged in as a user with role "Cluster Administrator"? In CM5.5, we restrict access to all HDFS encryption configuration features including adding KMS (either kind) to the newly created "Key Administrator" role. Full admins will also have access (since they can access everything). Cluster admins will not. This change was made to meet security requirements / best practices around "separation of duties". There's also a new wizard to enable HDFS Encryption, which I highly suggest using. Please find documentation here: http://www.cloudera.com/content/www/en-us/documentation/enterprise/latest/topics/sg_hdfs_encryption_wizard.html Thanks, Darren
... View more
11-05-2015
10:59 AM
Hi, This would go in the CSD. Please see: https://github.com/cloudera/cm_ext/wiki/Service-Descriptor-Language-Reference#-roleswithexternallinks and https://github.com/cloudera/cm_ext/wiki/Service-Descriptor-Language-Reference#externallink and https://github.com/cloudera/cm_ext/wiki/Service-Descriptor-Language-Reference#additionalexternallinks Thanks, Darren
... View more
10-21-2015
10:33 AM
Hi, It won't work on CDH5.4.0. See the advice I gave above. Thanks, Darren
... View more