Hello,   There is no lockout feature in Cloudera Manager. If you are using SAML or LDAP, you can leverage their lockout features. There is an internal Cloudera Jira requesting the feature.  I'll update it with your interest.   Thanks,   Ben ... View more

Hello David,   Sorry we didn't answer your question right away.   It seems that something undesirable happened to our documentation in 5.9.0, so the statement we had is no longer available.  The stance is the same as in 5.8.0, though:   Multihoming CDH or Cloudera Manager is not supported outside specifically certified Cloudera partner appliances. Cloudera finds that current Hadoop architectures combined with modern network infrastructures and security practices remove the need for multihoming. Multihoming, however, is beneficial internally in appliance form factors to take advantage of high-bandwidth InfiniBand interconnects. Although some subareas of the product may work with unsupported custom multihoming configurations, there are known issues with multihoming. In addition, unknown issues may arise because multihoming is not covered by our test matrix outside the Cloudera-certified partner appliances.   We will work to correct the documentation so this information is published.   Thank you very much for bringing this to our attention.   Ben ... View more

I do not believe there is any purging of the Cloudera Manager audits.  I checked and did not see any code that performed a purge or deletion.  Let us know if you see anything that suggests otherwise.   Thanks,   Ben ... View more

Hi... this is old, but just came across it.   hiveserver2_enable_impersonation is set at the HiveServer2 role level, so you would need to use the full path to your HiveServer2 role.  for instance:   curl -X PUT -H "Content-Type:application/json" -u admin:admin -k "https://localhost:7183/api/v12/clusters/cluster/services/hive/roles/hive-HIVESERVER2-609b6bea2fc852513192152e64d3ec19/config" -d '{ "items" : [ { "name" : "hiveserver2_enable_impersonation", "value" : "false" } ] }'   Since the attribute does not exist at the service level (where you attempted to set it), the attribute is not found.   I hope that might help you or others.   Cheers,   Ben ... View more

I think you can use the wait() method too as demonstrated here:   https://cloudera.github.io/cm_api/docs/python-client/#service-lifecycle-and-commands ... View more