This occurs in two scenarios 1. Jdk-11 installed but not provided mod 777 2. jdk-11 not properly extracted and moved  install openjdk11 download the file openjdk-11_linux-x64_bin.tar to /tmp tar -xf openjdk-11_linux-x64_bin.tar mv /tmp/jdk-11 /usr/lib/jvm chmod 777 /usr/lib/jvm/jdk-11 update-alternatives --install "/usr/bin/java" "java" "/usr/lib/jvm/jdk-11/bin/java" 1010 update-alternatives --install "/usr/bin/javac" "javac" "/usr/lib/jvm/jdk-11/bin/javac" 1010 verify > java -version & javac -version restart cloudera-scm-server ... View more

Hi Loaimohamed79 I see you cannot create the topics after enabling the TLS and it failed with the TimeoutException. Since you have enabled the TLS, 'listeners' property must be using SASL_SSL or SSL protocol and hence with the 'kafka-topics' command you will need to use the argument  --command-config and pass the client.properties file that includes the below properties, --- security.protocol=SASL_SSL OR SSL sasl.kerberos.service.name=kafka ssl.truststore.location=<truststore-location> --- So the command will look like, kafka-topics --create --topic demo --bootstrap-server 192.168.1.235:9093 --partitions 3 --replication-factor 3 --command-config <client.properties-file-location> Kindly follow these steps and let us know if it helps. ... View more

Hi @Loaimohamed79  When Kerberos is enabled by default, Spnego authentication will be enabled for a few web UIs in CDP. To access the web UI, either you need to configure Spnego authentication or disable Spnego authentication by unchecking "Enable Kerberos Authentication for HTTP Web-Consoles" in service configurations. Refer to the below document to configure Spnego authentication settings in the browser. https://docs.cloudera.com/cdp-private-cloud-base/7.1.8/security-how-to-guides/topics/cm-security-browser-access-kerberos-protected-url.html ... View more