Member since
10-13-2015
26
Posts
15
Kudos Received
1
Solution
My Accepted Solutions
Title | Views | Posted |
---|---|---|
2271 | 10-23-2015 10:05 PM |
11-06-2015
06:08 PM
1 Kudo
I see the plugin but then I see this https://issues.apache.org/jira/browse/RANGER-246 and for Storm, it gives me an alert that only works with secure cluster. advice?
... View more
Labels:
- Labels:
-
Apache Kafka
-
Apache Ranger
-
Apache Storm
11-06-2015
05:46 PM
1 Kudo
Currently Have Hbase protected by Ranger. I am not able to connect to Hbase via Phoenix from an external java client since its picking up my machine userid and that is not an authorized user. Is there a way to pass in the user in phoenix connection url?
... View more
Labels:
- Labels:
-
Apache HBase
-
Apache Phoenix
-
Apache Ranger
11-05-2015
09:46 PM
thanks @rmani@hortonworks.com
... View more
11-05-2015
08:30 PM
1 Kudo
It seem that invoking the test from the KNox repository in Ranger failes due to miss path to the cert. Caused by: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
... View more
Labels:
- Labels:
-
Apache Knox
-
Apache Ranger
11-04-2015
12:10 AM
If necessary you can import the CA cert to ${JAVA_HOME}/jre/lib/security/cacerts. If using a self-signed cert you can use the keytool to import it into ${JAVA_HOME}/jre/lib/security/cacerts also. seem this step is necessary even for self-signed certs.
... View more
11-03-2015
11:44 PM
@Neeraj Yes, I figure that much out and now its complaining about not finding the cert which I have imported into a truststore and pointing to it.
... View more
11-03-2015
10:41 PM
Ranger usersych is throwing an exception while connecting to AD: below is the exception, any ideas? I have verified that I can bind successfully with AD. 03 Nov 2015 17:39:40 INFO UserGroupSync [UnixUserSyncThread] - Begin: initial load of user/group from source==>sink
03 Nov 2015 17:39:40 INFO LdapUserGroupBuilder [UnixUserSyncThread] - LDAPUserGroupBuilder updateSink started
03 Nov 2015 17:39:40 INFO LdapUserGroupBuilder [UnixUserSyncThread] - LdapUserGroupBuilder initialization started
03 Nov 2015 17:39:40 ERROR UserGroupSync [UnixUserSyncThread] - Failed to initialize UserGroup source/sink. Will retry after 30000 milliseconds. Error details:
javax.naming.ServiceUnavailableException: xx.xxx.xx..xx:636; socket closed
at com.sun.jndi.ldap.Connection.readReply(Connection.java:449)
at com.sun.jndi.ldap.LdapClient.ldapBind(LdapClient.java:365)
at com.sun.jndi.ldap.LdapClient.authenticate(LdapClient.java:214)
at com.sun.jndi.ldap.LdapCtx.connect(LdapCtx.java:2788)
at com.sun.jndi.ldap.LdapCtx.<init>(LdapCtx.java:319)
at com.sun.jndi.ldap.LdapCtxFactory.getUsingURL(LdapCtxFactory.java:192)
at com.sun.jndi.ldap.LdapCtxFactory.getUsingURLs(LdapCtxFactory.java:210)
at com.sun.jndi.ldap.LdapCtxFactory.getLdapCtxInstance(LdapCtxFactory.java:153)
at com.sun.jndi.ldap.LdapCtxFactory.getInitialContext(LdapCtxFactory.java:83)
at javax.naming.spi.NamingManager.getInitialContext(NamingManager.java:684)
at javax.naming.InitialContext.getDefaultInitCtx(InitialContext.java:313)
at javax.naming.InitialContext.init(InitialContext.java:244)
at javax.naming.ldap.InitialLdapContext.<init>(InitialLdapContext.java:154)
at org.apache.ranger.ldapusersync.process.LdapUserGroupBuilder.createLdapContext(LdapUserGroupBuilder.java:149)
at org.apache.ranger.ldapusersync.process.LdapUserGroupBuilder.updateSink(LdapUserGroupBuilder.java:262)
at org.apache.ranger.usergroupsync.UserGroupSync.run(UserGroupSync.java:58)
at java.lang.Thread.run(Thread.java:745)
... View more
Labels:
- Labels:
-
Apache Ranger
10-29-2015
08:21 PM
thank you. and in addition this tool is assuming you have manually created the store and you are pointing to it. it does not create one for you.
... View more
10-29-2015
05:23 PM
After running security-setup on ambari, and then choose option [3] - setup trustore, it successfull say its completed, but yet no trust store created in the path.
... View more
Labels:
- Labels:
-
Apache Ambari
10-23-2015
10:05 PM
4 Kudos
fixed the issue. I realized that I uninstalled the ambari-server where some of the python libraries symobolic links where sill pointing to the ambari-server folder. recreated the symbolic links in the site-packages to point to ambari-agent folder and that fixed it.
... View more
- « Previous
-
- 1
- 2
- Next »