About aliyesami

aliyesami · ‎12-23-2016

you are a genius rgangappa .. . it got rid of the krb5-conf error. but now its complaining about the 'Kerberos-env' file ? 23 Dec 2016 14:29:52,975 INFO [ambari-client-thread-30] AbstractResourceProvider:810 - Caught an exception while updating host components, retrying : org.apache.ambari.server.AmbariException: The 'kerberos-env' configuration is not available 23 Dec 2016 14:29:53,226 INFO [ambari-client-thread-30] AbstractResourceProvider:925 - Received a updateHostComponent request, clusterName=FDOT_Hadoop, serviceName=RANGER_KMS, componentName=RANGER_KMS_SERVER, hostname=hadoop1.tolls.dot.state.fl.us, requ est={ clusterName=FDOT_Hadoop, serviceName=RANGER_KMS, componentName=RANGER_KMS_SERVER, hostname=hadoop1.tolls.dot.state.fl.us, desiredState=INSTALLED, state=null, desiredStackId=null, staleConfig=null, adminState=null} 23 Dec 2016 14:29:53,231 ERROR [ambari-client-thread-30] KerberosHelperImpl:1952 - The 'kerberos-env' configuration is not avai lable

aliyesami · ‎12-23-2016

if my krb5.conf file is corrupt how can I get valid TGT ? -bash-4.1$ kinit sami Password for sami@abc.com: -bash-4.1$ klist Ticket cache: FILE:/tmp/krb5cc_600 Default principal: sami@abc.com Valid starting Expires Service principal 12/23/16 11:47:19 12/24/16 11:47:19 krbtgt/abc.com@abc.com renew until 12/23/16 11:47:19 -bash-4.1$

aliyesami · ‎12-23-2016

here is the krb5.conf file I have , and all the TGT for HIVE n HBASE are working fine so I don't think there is any issue with krb5.conf file. [root@hadoop1 ~]# find / -name krb5.conf /usr/hdp/2.5.0.0-1245/knox/templates/krb5.conf /usr/hdp/2.4.3.0-227-DELME/knox/templates/krb5.conf /etc/krb5.conf /var/lib/ambari-server/resources/scripts/krb5.conf [root@hadoop1 ~]# [root@hadoop1 ~]# more /etc/krb5.conf [libdefaults] renew_lifetime = 7d forwardable = true default_realm = abc.com ticket_lifetime = 24h dns_lookup_realm = false dns_lookup_kdc = false default_ccache_name = /tmp/krb5cc_%{uid} #default_tgs_enctypes = aes des3-cbc-sha1 rc4 des-cbc-md5 #default_tkt_enctypes = aes des3-cbc-sha1 rc4 des-cbc-md5 [logging] default = FILE:/var/log/krb5kdc.log admin_server = FILE:/var/log/kadmind.log kdc = FILE:/var/log/krb5kdc.log [realms] abc.com = { admin_server = hadoop1.abc.com kdc = hadoop1.abc.com } [root@hadoop1 ~]#

aliyesami · ‎12-23-2016

aliyesami · ‎12-23-2016

can someone please guide me on how to debug ? I tried two times but the thread just dies and no one contributes to it anymore . I really need to get this fixed as I am unable to proceed further, I will appreciate anyone sticking to this thread till its resolved . The only clue I have is the following error in the Ambari server log file when I try to reinstall ranger KMS in my HDP2.5 setup 22 Dec 2016 17:12:34,798 INFO [ambari-client-thread-177498] AbstractResourceProvider:810 - Caught an exception while updating host components, retrying : org.apache.ambari.server.AmbariException: The 'krb5-conf' configuration is not available22 Dec 2016 17:12:35,049 INFO [ambari-client-thread-177498] AbstractResourceProvider:925 - Received a updateHostComponent request, clusterName=FDOT_Hadoop, serviceName=RANGER_KMS, componentName=RANGER_KMS_SERVER, hostname=hadoop1.tolls.dot.state.fl.us, request={ clusterName=FDOT_Hadoop, serviceName=RANGER_KMS, componentName=RANGER_KMS_SERVER, hostname=hadoop1.tolls.dot.state.fl.us, desiredState=INSTALLED, state=null, desiredStackId=null, staleConfig=null, adminState=null}22 Dec 2016 17:12:35,053 ERROR [ambari-client-thread-177498] KerberosHelperImpl:1938 - The 'krb5-conf' configuration is not available22 Dec 2016 17:12:35,053 INFO [ambari-client-thread-177498] AbstractResourceProvider:810 - Caught an exception while updating host components, retrying : org.apache.ambari.server.AmbariException: The 'krb5-conf' configuration is not available^C

aliyesami · ‎12-22-2016

yes you are very right , it was the white spaces , once I typed it by hand it took it thanks for your help

aliyesami · ‎12-22-2016

I am really confused , I showed you the picture above showing the key is not being accepted , can you please take a look?

aliyesami · ‎12-22-2016

still cant add the key , giving me error shown above , please help

aliyesami · ‎12-22-2016

I asked this earlier but didn't get any response , I badly need answers for the following : 1- is there a install/config guide for Ranger KMS for HDP2.5 ? I could only find one guide for HDP2.3 and screens don't match up with the HDP2.5 I have. 2- The old document is asking to put key-value pairs in the custom-kms-site but its not even accepting the key (I am entering the key exactly as in the document) with the following error :

aliyesami · ‎12-17-2016

I am already using Ranger with Kerberos authentication, but I see Knox is part of HDPCA certification so I also want to learn Knox.

Online	Offline
Last Visited	‎11-03-2016 03:37 PM

Member Since	‎04-22-2016 08:38 AM
Last Visited	‎11-03-2016 03:37 PM
Posts	931
Kudos received	46

Cloudera Community

Re: NON-ANSI JOIN in hive

Re: insert query hangs from hive view ONLY

Re: cant start rest server

Re: hbase rest api failing

Re: how to read time reported by yarn

Re: Ranger KMS install failing

Re: Ranger KMS install failing

Re: Ranger KMS install failing

Re: Ranger KMS install failing

Ranger KMS install failing

Re: ranger KMS issues

Re: ranger KMS issues

Re: ranger KMS issues

ranger KMS issues

whats the difference between Ranger and Knox ?