Member since
02-12-2016
39
Posts
12
Kudos Received
1
Solution
My Accepted Solutions
Title | Views | Posted |
---|---|---|
3727 | 07-02-2016 06:08 AM |
04-28-2016
09:28 AM
Thanks Kuldeep Kulkarni. This is working perfectly fine. But its not generating keytabs for root user. Which is resulting in user not found in KDC database when i am trying to run "hadoop fs -ls /" command. Is there a way to acheive this ?
... View more
04-28-2016
06:26 AM
@Robert Levas Thanks Robert. Regarding this Question How does Kerberos work?, could you please answer it here.
... View more
04-27-2016
05:31 AM
2 Kudos
I will elaborate the question How does Kerberos work? from this Question. I am unable to understand how it is doing its functions. In my case, we enabled kerberos using existing Active directory(Automated installation) . Some of these questions might sound stupid, Please bear with me. I will put all my understanding here, correct me if i am wrong.
It Will use Active directory as KDC.
As soon as the user login into the system, AS will generate TGT and TGS will issue a ticket with that TGT. (AS and TGS will lie in AD) It Will have to create principals and key tabs for all the service users,services, local users, AD users in this active directory.But it is only creating principals and keytabs for service users like hdfs,hive. The problem which we are facing is, it is not generating keytabs for local linux users, which is restricting them to use the services even thought they have access to those services(created policies in ranger). Questions:
How do we generate key tabs for local users and AD users(which is integrated with OS using SSSD)? should we integrate AD with ambari in order to gererate keytabs for AD users ? Is AD the KDC here ? Based on what AS will issue TGT ? is it after succesfull login and Keytab for that user ?
... View more
Labels:
04-25-2016
11:56 AM
How does Kerberos work ? Do we have to integrate it with our Existing AD ? Is this how it is able to identify users ? Can we have both AD/LDAP and Kerberos authentication seperately ? All these questions came to my mind when I was following this installation document. There is an option to use existing AD as KDC. So does this mean it is using AD authentication? I would be very grateful, if some one could help me on this. Does AD(KDC) has to be present in same machine I am enabling Kerberos ?
... View more
Labels:
- Labels:
-
Apache Ambari
-
Kerberos
03-07-2016
01:15 PM
@Neeraj Sabharwal adding /hadoop and deleting other directories after some time is resulting in missing blocks. Is there any way to overcome this? When i run hdfs fsck command.Its showing that all block are missing. The reason for being could be the removal of directories. do we need to copy the data from directories into new directory(/hadoop) will that help ??
... View more
03-07-2016
10:41 AM
1 Kudo
@Neeraj Sabharwal
I think now i got the clear picture of it. Since the mount / is partitioned with 400 GB we should use it alone to make use of that memory. But then that configuration is default configuration given by amabari. Wouldn't it affect the cluster in any way ? should i take care of anything ?
... View more
03-07-2016
10:32 AM
@Neeraj Sabharwal I have attached an image in my previous comment for slave-4 df -h command. So if i remove the other directories...wouldn't it effect the existing cluster in any way ? I am getting this error after removing other directories and replacing them with /hadoop . And yes,the cluster size has been increased.
... View more
03-07-2016
10:11 AM
@Neeraj Sabharwal Does this mean that i should re-install everything?? I am still wondering about how only slave-4 got a capacity of 435 GB when every node have have configuration and same mounts.
... View more
03-07-2016
09:46 AM
@Neeraj Sabharwal Did say anything wrong ? So the capacity is the Space allocated to hdfs right?
... View more
03-07-2016
09:43 AM
1 Kudo
dfs.datanode.data.dir have: /opt/hadoop/hdfs/data,/tmp/hadoop/hdfs/data,/usr/hadoop/hdfs/data,/usr/local/hadoop/hdfs/data All the nodes have same mounts.
... View more
- « Previous
-
- 1
- 2
- Next »