About Darren

Darren · ‎02-18-2015

Usually /etc/ and /etc/hadoop don't have group write permissions. Not sure how they got there, but removing it seems like a good idea.

Darren · ‎02-18-2015

Hi Ty, parquet, hbase, zookeeper, and solr all say 5.3.0 version in host inspector. You need to make sure they're all upgraded to 5.3.1 and there's no 5.3.0 packages left. Thanks, Darren

Darren · ‎02-05-2015

Did you install the CDH binaries on the hosts? This can be done via parcels (as described in the python tutorial: http://cloudera.github.io/cm_api/docs/python-client/#managing-parcels) or manually by sshing into the hosts and installing packages. Thanks, Darren

Darren · ‎01-29-2015

Try increasing your datanode heap size. You may need to decrease heaps of other roles to make space, or move roles around so there isn't so much contention for memory on a single host.

Darren · ‎01-15-2015

Hi Psiamal, I believe you can just remove that file, then the CM agent will re-generate it with a unique ID for you. I would stop all your agents, delete the hosts via the CM UI, delete the uuid files on the agent hosts, then start your agents. The hosts should appear correctly in the CM UI shortly. I don't think there's any other things you need to purge from the clones. Can't say I've tested this myself though. Thanks, Darren

Darren · ‎01-15-2015

Did you by chance configure all CM agent hosts with the same host id? /var/lib/cloudera-scm-agent/uuid

Darren · ‎01-12-2015

Hi Jy, Did you set Impala's dependency on Sentry? You need to set the dependency on Sentry in both the Hive service and the Impala service. Thanks, Darren

Darren · ‎01-07-2015

Hi Jy, Sentry only works on groups. You can always define a new group that just contains a single user to work around this. This is commonly (maybe always) defined for you already, so you might be able to just replace "user" with "group" and get that statement to do the logically equivalent thing. Group management is configurable and is commonly either shell-based or LDAP-based. You can find it in HDFS configuration under the name "Hadoop User Group Mapping Implementation". If it is shell-based (the default), then you need to make it so your operating system recognizes the correct group membership for your users via standard OS user administration commands. Thanks, Darren

Darren · ‎01-06-2015

Hi Jy, Unfortunately I can't see your images. It sounds like you're doing the right things, though I didn't see the step to change HDFS permissions for the hive warehouse directory. Make sure that you're using a Sentry superuser to work with roles, otherwise you'll get permission errors. See the "Admin Groups" config in Sentry for who is allowed to issue admin commands. You'll need to use beeline to interact with the roles, not the old hive CLI. Thanks, Darren

Darren · ‎01-06-2015

Hi Jy, I'm not aware of viable alternatives to Sentry. Please ignore the section called "Configuring HiveServer2 for the Sentry Service" on that page. Also ignore "Configuring the Hive Metastore for the Sentry Service". Basically you should stop after the subsection "Enabling the Sentry service for Hive". Cloudera Manager will automatically configure HS2 and Hive Metastore Server to talk to sentry once you configure the Sentry Service as a dependency of Hive. I'll get that doc page clarified. If you're using Impala, you also need to configure Impala to use Sentry (see "Enabling the Sentry Service for Impala"), but can ignore the section "Configuring Impala as a Client for the Sentry Service" since Cloudera Manager will do that for you automatically. In general, to add arbitrary configuration to a file you need to use an Advanced Configuration Snippet for the correct file and role. See here for more information: http://www.cloudera.com/content/cloudera/en/documentation/core/latest/topics/cm_mc_config_snippet.html Thanks, Darren

Online	Offline
Last Visited	‎05-21-2019 01:27 PM

Member Since	‎07-30-2013 10:59 AM
Last Visited	‎05-21-2019 01:27 PM
Posts	509
Kudos received	112

Cloudera Community

Re: Install using CM of Datanodes with different n...

Re: Cloudera API doesn't return any roles for a ho...

Re: Stopping selected roles from Service action me...

Re: CSD Role with Multiple SSLServers

Re: CSD - SSLServer Paramaters

Re: Can CDH5.3 Sentry work without Kerberos?

Re: Can the CDH5.3 virtual machine be upgraded?

Re: Autodeployment with CM Manager 5.3.1 issue

Re: Datanode shut down when running Hive

Re: Nodes (running CM Agent) not all showing up on...

Re: Nodes (running CM Agent) not all showing up on...

Re: Impala with sentry

Re: Role based authorization

Re: Role based authorization

Re: Role based authorization