Hi,   1. Just to isolate the issue have you tried to list the databases outside of Hue may be from impala-shell? are you able to see the databases? do confirm and provide the error stack trace if you find any.   2. Go to Hue -> Security -> Hive Tables -> Browse -> and see if you are able to see the databases.   1. create role test_role; 2. GRANT ALL ON database <db_name> TO ROLE test_role; 3. GRANT ROLE test_role to GROUP <group-name>;   Note: Make sure the user is part of this particular group on all the hosts in the cluster.   Verify and you can provide the output for below command: a. show grant role role_test;   Regards, Chethan YM   ... View more

Hi ,   Can you provide the complete oozie workflow.xml and the script you are using to run this job.   1. you can collect the oozie logs for this particular workflow using below command: ( Replace the workflow id ) oozie job -oozie http://<oozie-server-host>:11000 -log <workflow-id>   2. Oozie job status using below command: oozie job -oozie http://<oozie-server-host>:11000 -info <workflow-id>   Regards, Chethan YM     ... View more

Hi,   This attached log doesn't have more information. can you attach the ranger log file where we can see the errors.   Regards, Chethan YM ... View more

Hi,   Yes, we can use both SSL and kerberos in the hadoop cluster. TLS/SSL is for encrypted network communication and kerberos is for user authentication.   May be below documentation links are related to your post. https://docs.cloudera.com/documentation/enterprise/6/6.3/topics/admin_cm_ha_tls.html https://community.cloudera.com/t5/Support-Questions/Is-it-possible-to-do-kerberos-and-ssl/td-p/120470   ... View more

Hi, Have you used the hs2-url something like below?   sqoop import --connect $MYCONN --username $MYUSER --password $MYPSWD --table "employees_test" --target-dir "/user/username/importdir/employees_test" --delete-target-dir --hive-import --hs2-url "jdbc:hive2://hs2host:10000/default;principal=hive/hs2host@DOMAIN.COM;ssl=true;sslTrustStore=/etc/cdep-ssl-conf/CA_STANDARD/truststore.jks;trustStorePassword=password" --hs2-user username --hs2-keytab "/path/to/sqooptestkeytab"   Can you provide your sqoop command along with its error output? ... View more

Hi,   I think you can check the HS2 active sessions by navigating to HS2 WEB UI, here is the screenshot for your reference.   Regards, Chethan YM ... View more

Hi,   As per the application log it seems to be the issue with permissions, Have you tried to run with other users? or have you tried to give access to this user to access the path?  Check the permissions with other users who have access to this path and try to apply the permission to "googleops" user.   {"Event":"SparkListenerTaskEnd","Stage ID":11,"Stage Attempt ID":0,"Task Type":"ResultTask","Task End Reason":{"Reason":"ExceptionFailure","Class Name":"org.apache.hadoop.security.AccessControlException","Description":"Permission denied: user=googleops, access=WRITE, inode=\"/user/yarn/google-links/google-book-feed/_temporary/0\":yarn:yarn:drwxr-xr-x\n\tat org.apache.hadoop.hdfs.server.namenode.FSPermissionChecker.check(FSPermissionChecker.java:504)\n\tat org.apache.hadoop.hdfs.server.namenode.FSPermissionChecker.checkPermission(FSPermissionChecker.java:336)\n\tat org.apache.hadoop.hdfs.server.namenode.FSPermissionChecker.checkPermission(FSPermissionChecker.java:242)\n\tat   Thank you, Chethan YM ... View more

Hi,   you have mentioned that connection will be opened till user closes the query tab from the DBeaver tool, I think it is expected suppose if you run the queries from Hue and you haven't set the session time out at Hue side the connection/session will never close until you close the hue query tab or logout from hue session. So it is the responsible of the client to close the session after query get finishes. Can you check with DBeaver team to configure the session timeout at client side? I think configuring this will help to close the sessions at impala side.   Regards, Chethan YM ... View more

Hi, Can you explain the issue in brief..  1. what is the error you are seeing while opening the UI? 2. was this accessible earlier? 3. Please attach the screenshot of the error/exception you are seeing. 4. What is the CDH version.   Regards, Chethan YM ... View more

Hi, I know i am answering to this post after a long gap still it may help to others.   As per your post even after you increasing the number of connections from 64 to 128 you are still facing the connection issues. Here first we need to check all the opened connections are closed or not if these are not closed then the issue may occur even if you increase it to 252.   Go to CM -> Impala -> Charts Library -> check "Active Frontend API connection"   Monitor the cluster if many users are using the cluster or not if you think connections are high and users are not using the cluster then the opened sessions/connections are not closed after the use.   set the "idle session timeout" in the Impala configurations, by setting this if a user opened a session and performed any operation and leave the session it will become idle session and this session will be closed by setting this timeout.   Same if you are running the impala queries from Hue you need to set the session time out something like below in the Hue Service Advanced Configuration Snippet (Safety Valve) for hue_safety_valve.ini   [impala] close_queries=true query_timeout_s=300 session_timeout_s=300   As like if you are using ODBC/JDBC clients you need to set the timeouts at the client side.   If you would like to check the number of connections/sessions those are Active and inactive Go to CM -> Impala -> click on any Impala daemon -> Go to Daemon WEB UI -> click on "\sessions" tab   Regards, Chethan YM ... View more