Member since
08-10-2015
12
Posts
4
Kudos Received
0
Solutions
09-03-2015
05:59 AM
3 Kudos
Thanks for the support we just followed the below steps which we got from cloudera .com and the issue is now fixed http://www.cloudera.com/content/cloudera/en/documentation/cloudera-manager/v5-1-x/Configuring-Hadoop-Security-with-Cloudera-Manager/cm5chs_enable_hue_sec_s10.html Troubleshooting the Kerberos Ticket Renewer: If the Hue Kerberos Ticket Renewer does not start, check your KDC configuration and the ticket renewal property, maxrenewlife, for the hue/<hostname> and krbtgt principals to ensure they are renewable. If not, running the following commands on the KDC will enable renewable tickets for these principals. kadmin.local: modprinc -maxrenewlife 90day krbtgt/YOUR_REALM.COM kadmin.local: modprinc -maxrenewlife 90day +allow_renewable hue/<hostname>@YOUR-REALM.COM
... View more
08-18-2015
11:17 PM
1 Kudo
Depending on how you have set up yarn hive should be part of the "allowed.system.users" list for the NM's that list will white list all system users below the "min.user.id". There is also a list of "banned.users" that lists all users that are not allowed to run containers. All these three need to be in sync to allow running a container. The hdfs user should not be allowed since it is the superuser and could circumvent the HDFS access permissions. When you execute a job from hue authentication is taken care of by hue. It will make sure that some kind of kerberos initialisation is performed. Wilfred
... View more