@AlexPQ,   Based on the referenced Jira, kerberos auth is now configurable.   In CDH 5.11.0 and higher, you can enable kerberos auth in hue.ini:   [spark] security_enabled=true     ... View more

@VuSand3259,     You can use this endpoint:   https://cloudera.github.io/cm_api/apidocs/v19/path__users_-userName-.html   using the PUT method via REST API allows you to update the user object defined here:   https://cloudera.github.io/cm_api/apidocs/v19/ns0_apiUser.html   For example, the following would make an existing user "mytestuser" a full administrator in CM 5.15 (you would need to use the api version that is right for your CM version):   curl -u cm_user:cm_pass -H "Content-Type: application/json" -X PUT -d '{"roles" : [ "ROLE_ADMIN"]}' http://cm_host:7180/api/v19/users/mytestuser ... View more

@Anudas,   Thank you for asking. At this time we do not support it and recommend against using Galera.   This is mainly due to the way Galera implements optimimstic locking.  At the least, we have noted problems where the following error occurs "Deadlock found when trying to get lock; try restarting transaction".   We are also concerned that a simple retry could introduce the possibility of out-of-order events.   Bottom line is that we would need to code and test extensively to certify Galera.  That may happen in the future, but, for now, I'd say avoid it as we know there are locking problems.   Regards,   Ben ... View more

@BenK,   Cloudera Manager's steps for starting servers are based on internal dependencies, so there isn't a configuration in Cloudera Manager that could be used to change it.  I suspect that the StreamSets fix may have been around dependencies, in the CSD, but that's just a guess.   The only alternative I can see at this time is to bring the services up one at a time. You could do that with the API and wrap it in the script:   https://cloudera.github.io/cm_api/apidocs/v14/path__clusters_-clusterName-_services_-serviceName-_commands_start.html   You can see all REST API stuff here: https://cloudera.github.io/cm_api/apidocs/v14/   For instance, you could write a shell script that executes a serice of "curl" commands that start the services. There is a complexity in that you need to wait till the service is really running before started, but that can be accomplished by using:   https://cloudera.github.io/cm_api/apidocs/v14/path__clusters_-clusterName-_services_-serviceName-.html   and parsing out the status.  If a service is "STARTED" start the next one...   "serviceState" : "STARTED",   It might be something to play with if you are stuck in this state long term.  The API is in Java and Python and you can find examples of usage here too: https://cloudera.github.io/cm_api/ ... View more

@Genthandsome,   Hi,   I see you are posting on a lot of different old threads.  In the future, please create a new thread and explain the issue you are seeing like you did here.  Thank you.   If you google "server IP address could not be found" you will find information that helps point you in the right direction about what that means.  You are getting that in Chrome, I presume, so I also guess that you are attempting to connect to the Job History Server UI from a browser that is on a different host than nstance-1.c.12345678.internal   That means your local host (where your browser is installed) cannot resolve the hostname "nstance-1.c.12345678.internal".  You will need to ensure your client host has hosts file or DNS configured to allow it to resolve the host to IP address.     ... View more

@Genthandsome,   Actually, that stackoverflow may be off target since it talks about public addresses.  Your browser needs to resolve a hostname into an IP so that your computer can connect to Hue.  If that resolution (or mapping) fails then the client (browser in this case) cannot connect to the host specified in the browser's URL. ... View more

@Genthandsome,   I'm talking about DNS. https://en.wikipedia.org/wiki/Domain_Name_System   For instance, if using a DNS server for name resolution:   $ nslookup www.google.com   Server:        x.x.x.x Address:    x.x.x.x#53 Non-authoritative answer: Name:    www.google.com Address: 172.217.0.36   My point in this case is that someone got an error saying that the browser could not resolve the IP. For example, see: https://stackoverflow.com/questions/36668374/how-do-i-solve-the-server-dns-address-could-not-be-found-error-on-windows-10   The browser problem showed an issue with the browser and how it tries to communicate with the server host; it had nothing to do with Hue. ... View more

@balusu,   The script works without manipulation but it requires LDAPS, so either you have to figure outall these nuances of how to get it to work without LDAPS or you could look at alternatives:   (1)   Create all the principal objects yourself and implement a keytab retrieval script as described here:   https://www.cloudera.com/documentation/enterprise/5-14-x/topics/sg_keytab_retrieval_script.html   (2)   Install and configure an MIK Kerberos KDC until you can get LDAPS support in AD.  Changing from MIT KDC to AD KDC is not too hard, but does require some downtime.     ... View more