Member since
03-19-2018
47
Posts
2
Kudos Received
0
Solutions
09-13-2018
07:06 AM
agree to @Tomas79 , in restarting the services for new certs to come into effect
... View more
09-13-2018
07:03 AM
i have applied an new TLS certificate and hence needs to restart cloudera manager and agents so question is , does it going to impact jobs running CDH (hadoop,impala ...etc )services ?
... View more
Labels:
- Labels:
-
Cloudera Manager
09-11-2018
11:42 AM
@Tomas79 point i'm trying to understand is , no matter what format service validates it's certificate...it should get broken in-case of an issue after 15sec interval
... View more
09-11-2018
11:21 AM
i could only see new certificate applied on hue UI, hence i'm pretty sure on the path too of other server
... View more
09-11-2018
11:18 AM
@Tomas79 it should have fallen apart after 15 secs, thats interval at which agents sends heartbeat and i have encountered issues with TLS over the past and when somethig has gone wrong , service would immediately fail and throws error in the log. this is quite weird though
... View more
09-11-2018
11:11 AM
Does it require an restart of the cloudera manager service ?
... View more
09-11-2018
11:03 AM
@Tomas79, openssl s_client connect is reading the old certificate ,whereas i have replaced ceritificates with new one under the /opt/cloudera/security/x509 and /opt/cloudera/security/jks path and i did not happen to notice any heartbeat issue , agents hearbeat are also working fine , i don't see any issues with that
... View more
09-11-2018
10:39 AM
@Tomas79 i meant i have requested for an new certificate and applied it on the server
... View more
09-11-2018
09:01 AM
i have renewed the tls certificates and applied on the cloudera manager server but the browser is still showing the older one by looking at the expiry date , tried clearing the browser cache , but still it shows older ones. appreciate for any help
... View more
Labels:
- Labels:
-
Cloudera Manager
04-25-2018
09:24 AM
Adding to the above, below is the Advice i get from cloudera manager . Please advice is to what's the best approach : Advice This is a Hive Metastore health test that checks that a client can connect and perform basic operations. The operations include: (1) creating a database, (2) creating a table within that database with several types of columns and two partition keys, (3) creating a number of partitions, and (4) dropping both the table and the database. The database is created under the /user/hue/.cloudera_manager_hive_metastore_canary/<Hive Metastore role name>/ and is named "cloudera_manager_metastore_canary_test_db". The test returns "Bad" health if any of these operations fail. The test returns "Concerning" health if an unknown failure happens. The canary publishes a metric 'canary_duration' for the time it took for the canary to complete. Here is an example of a trigger, defined for the Hive Metastore role configuration group, that changes the health to "Bad" when the duration of the canary is longer than 5 sec: "IF (SELECT canary_duration WHERE entityName=$ROLENAME AND category = ROLE and last(canary_duration) > 5s) DO health:bad" A failure of this health test may indicate that the Hive Metastore is failing basic operations. Check the logs of the Hive Metastore and the Cloudera Manager Service Monitor for more details. This test can be enabled or disabled using the Hive Metastore Canary Health Test Hive Metastore monitoring setting.
... View more