About avijeetd

avijeetd · ‎09-23-2016

Hi All, The when I access the atlas UI http://<ambari-host>:21000/#!/search?user.name=ambari-server getting error HTTP ERROR 401 Problem accessing /. Reason: Authentication required Any helps, thanks. Avijeet

avijeetd · ‎09-21-2016

Hi All, I have set up Amabri views on kerberised ambari-server and hadoop cluster, the hive-view work fine for user ambari-server However for any other users in local store (such as hr1, mktg1) etc. The hive views don't work properly. How does ambari views work? Does it kinit for the user who has logged in? Looks like it is taking the user who has done kinit on ambari server. How do we have multiple users kinit in same node? If we integrate Amabri with AD - will this problem be solved? Thanks, Avijeet

avijeetd · ‎09-21-2016

thanks @Gerd Koenig

avijeetd · ‎09-20-2016

thanks @mthiele However I noticed while doing a HIVE command - the permissions of hive service principal is taking precedence over the authenticated user load data inpath '/tmp/sample_07.csv' into table sample_07;

avijeetd · ‎09-19-2016

Hi All, to connect beeline, the following steps work 1. kinit as user hr1 2. beeline connect URL !connect jdbc:hive2://localhost:10000/default;principal=hive/securityLab02@XXX.local;auth=kerberos Then it asks for user name, password - for which just press enter Once we are in, which user is it 1) is it hr1 2) is it hive user on behalf of hr1 3) it is hive user whose permissions will work? can someone please explain the token delegation that happens here. Also is it the right way to connect using beeline. thanks, Avijeet

avijeetd · ‎09-19-2016

Thanks @Robert Levas @Vipin Rathor Can we use the Ambari Views / File views etc. If Hadoop cluster is kerberized but Amabri is not? As HDP doesn't have HUE, I am having an issue to set up a UI based access to tables etc.

avijeetd · ‎09-19-2016

Hi All, I set up a kerberized cluster using AD, everything went fine. Next I wanted to set up Kerberos for ambari using steps below http://docs.hortonworks.com/HDPDocuments/Ambari-2.1.0.0/bk_Ambari_Security_Guide/content/_optional_set_up_kerberos_for_ambari_server.html#header The problem is I can't kadmin in my linux boxes [root@securityLab01 ~]# kadmin Authenticating as principal ambari-qa-securityLab/admin@XXXXXXIT.LOCAL with password. kadmin: Client not found in Kerberos database while initializing kadmin interface Which user can I use to use kadmin. Thanks, Avijeet

avijeetd · ‎08-19-2016

@Vipin Rathor Hi Vipin, I am having the same issue, the ranger logs show "returning null list" I am able to login into Ranger as keyadmin / password (as created in AD), I can kinit as keyadmin I am not seeing the user in Ranger user tab, however can see the user in usersync log 2016-08-19 03:38:10,633 [timed-executor-pool-0] DEBUG apache.ranger.services.kms.client.KMSClient (KMSClient.java:312) - Getting KmsClient for datasource: hubhdpdevcluster01_kms 2016-08-19 03:38:10,633 [timed-executor-pool-0] DEBUG apache.ranger.services.kms.client.KMSClient (KMSClient.java:313) - configMap: {password=*****, provider=kms://http@hadooplinux.xxx.com:9292/kms, username=keyadmin@HADOOPDOM.COM} 2016-08-19 03:38:10,633 [timed-executor-pool-0] DEBUG apache.ranger.services.kms.client.KMSClient (KMSClient.java:73) - Kms Client is build with url [kms://http@hadooplinux.xxx.com:9292/kms] user: [keyadmin@HADOOPDOM.COM] 2016-08-19 03:38:10,633 [timed-executor-pool-0] DEBUG apache.ranger.services.kms.client.KMSClient (KMSClient.java:144) - Getting Kms Key list for keyNameMatching : 2016-08-19 03:38:10,994 [timed-executor-pool-0] DEBUG apache.ranger.services.kms.client.KMSClient (KMSClient.java:181) - getKeyList():calling http://hadooplinux.xxx.com:9292/kms/v1/keys/names?doAs=keyadmin 2016-08-19 03:38:10,994 [timed-executor-pool-0] DEBUG apache.ranger.services.kms.client.KMSClient (KMSClient.java:185) - getKeyList():response.getStatus()= 401 2016-08-19 03:38:10,994 [timed-executor-pool-0] INFO apache.ranger.services.kms.client.KMSClient (KMSClient.java:214) - getKeyList():response.getStatus()= 401 for URL http://hadooplinux.xxx.com:9292/kms/v1/keys/names?doAs=keyadmin so returning null list 2016-08-19 03:38:10,995 [timed-executor-pool-0] ERROR apache.ranger.services.kms.client.KMSResourceMgr (KMSResourceMgr.java:43) - <== KMSResourceMgr.validateConfig Error: org.apache.ranger.plugin.client.HadoopException: Is there some other settings for AD-KDC in Ranger KMS? Ranger KMS was setup and the cluster was kerbersized later. Does it have to be setup after kerberzing? Thanks, Avijeet

avijeetd · ‎08-18-2016

@yjiang Hi, I am having this issue, can you please describe where you changed the username. I have put it in the Ranger-kms / Config / Advanced-kms-properties as keyadmin@REALM.COM But it is not working, and same error persists. Thanks for your help. Avijeet

avijeetd · ‎08-09-2016

Hi, I was trying to setup ranger-hdfs-audit plugin and I can see it's successfully audting to hdfs and DB. However the Audit UI doesn't show any data with message 'No Access Audit found!' In Ranger xa_portal.log I see this error 2016-08-09 06:22:40,790 [http-bio-6080-exec-3] FATAL org.apache.ranger.solr.SolrMgr (SolrMgr.java:121) - Solr ZKHosts and URL for Audit are empty. Please set property ranger.audit.solr.zookeepers or ranger.audit.solr.urls 2016-08-09 06:22:40,791 [http-bio-6080-exec-3] WARN org.apache.ranger.solr.SolrAccessAuditsService (SolrAccessAuditsService.java:127) - Solr client is null, so not running the query. 2016-08-09 06:22:40,792 [http-bio-6080-exec-3] INFO org.apache.ranger.common.RESTErrorUtil (RESTErrorUtil.java:64) - Request failed. SessionId=816, loginId=admin, logMessage=Error connecting to search engine I have not selected Solr anywhere, Is it possible to not use Solr? Thanks, Avijeet

Online	Offline
Last Visited	‎01-18-2021 12:06 AM

Member Since	‎06-09-2016 06:30 AM
Last Visited	‎01-18-2021 12:06 AM
Posts	185
Kudos received	22

Cloudera Community

Re: storm supervisor error

Re: Storm-hdfs - java.lang.RuntimeException: Error...

Re: zeppelin architecture

Re: Falcon server - cannot create cluster

Re: Hive Streamaing

Atlas in a kerberized hdp cluster 2.4

Ambari Views - kerberized hadoop cluster

Re: beeline in kerberized cluster

Re: beeline in kerberized cluster

beeline in kerberized cluster

Re: Ambari Kerberos - Existing AD

Ambari Kerberos - Existing AD

Re: "Test Connection" for ranger kms repository fa...

Re: Cannot Create Key in Ranger KMS

HDP2.4 Ranger HDFS Audit / Solr