@kvinod    Sorry I have been away for quite a while. What's the relation between hostname001 and hostname003 or simply what services are running on these 2 servers? Have you tried regenerating the keytabs? ... View more

@SHADA  please take note this thread was closed can you open a new thread and attach the errors,logs or screenshot of the error you are encountering  and remember to be precise on the version of the sandbox whether it VMware,Docker or Virtualbox Tag me in the new thread ... View more

@ARVINDR  There is something you got to investigate. The correct output should look like below. I remember answering such a question something I need to locate the solution     [zk: localhost:2181(CONNECTED) o] ls /hiveserver2 [serverUri=hdp2.test.com:10000;version=1.2.1000.2.6.2.0-205;sequence=0000000061] [zk: localhost:2181(CONNECTED) 1] Can you get the ACL for that znode [zk: localhost:2181(CONNECTED) 0] getAcl /hiveserver2 'world,'anyone : cdrwa [zk: localhost:2181(CONNECTED) 1]   The above is for a non-kerberized cluster . Please revert ... View more

@npdell  Before starting the upgrade did you by any change validate the upgrade path with Cloudera supportmatrix  this should have been your first reference source. ... View more

@desind  I can see the error Authentication is not valid  but it seems you didn't use the format super:password->super:DyNYQEQvajljsxlhf5uS4PJ9R28=   instead, your input was as below according to the steps you shared. addauth digest super:password And then  delete  the znode  that should work [zk: xxx.unx.sas.com(CONNECTED) 2] deleteall /kafka-acl/Topic Please do that and revert         ... View more

@ARVINDR  Yes, its possible first questions first Don't attempt this if this is a production cluster  !!! Only when it's your scratch/dev cluster. What is the HDP version? The username mapping is managed by the Isilon admin  I don't know how the authorization works maybe the HDP admin user has been delegated to Isilon where changing it at the cluster level won't synchronize with the OS. After the above response, we can come up with a procedure        ... View more

@desind  By default, Zookeeper runs without the option of becoming a superuser to administrate znodes in the ZK ensemble, for example, to fix ACLs, remove znodes that are not required anymore, or create new ones in specific locations. Zookeeper grants permissions through ACLs through different schemas or authentication methods, such as 'world', 'digest', or 'sasl' if we use Kerberos. We can potentially we locked out if we were to grant everyone just read permissions to a znode, as we would not be able to delete it or modify it anymore.     ... View more

@desind  I tweaked it a little bit it should work in Cloudera Go to Cloudera zookeeper server home   # cd $CDH_HOME/zookeeper-server   Run below command   java -cp "./zookeeper.jar:lib/slf4j-api-1.6.1.jar" org.apache.zookeeper.server.auth.DigestAuthenticationProvider super:password   The output should look like below   SLF4J: Failed to load class "org.slf4j.impl.StaticLoggerBinder". SLF4J: Defaulting to no-operation (NOP) logger implementation SLF4J: See <a href="<a href="http://www.slf4j.org/codes.html#StaticLoggerBinder" target="_blank">http://www.slf4j.org/codes.html#StaticLoggerBinder</a>" target="_blank"><a href="http://www.slf4j.org/codes.html#StaticLoggerBinder</a" target="_blank">http://www.slf4j.org/codes.html#StaticLoggerBinder</a</a>> for further details. super:password->super:DyNYQEQvajljsxlhf5uS4PJ9R28=   Copy the super:DyNYQEQvajljsxlhf5uS4PJ9R28=  text and login to Cloudera Manager and goto zookeeper config. Add below to zookeeper-env template config   export SERVER_JVMFLAGS="$SERVER_JVMFLAGS -Dzookeeper.DigestAuthenticationProvider.superDigest=super:DyNYQEQvajljsxlhf5uS4PJ9R28="   Save and Restart Zookeeper and launch zookeeper shell on CDH cli   # . /bin/zkCli.sh -server your_server.com   addauth as below Now to removing  the ACL should work Now try to delete an ACL in zookeeper this should work.   addauth digest super:password   Unfortunately, I don't have a CDH sandbox  so you might have to adjust some cmds     ... View more

@ARVINDR  In a usual setup, the hive service should run on a master node and you run hive client on the client nodes ie. edge nodes and data nodes because during deployment Ambari copies the master configuration to all clients host e.g copy hive config to all host where hive client has been installed.   ... View more

@ARVINDR  Why did you have to re-install the service? The issue is with Reason: Error mapping uname 'hive' to uid remember the hive uid is mapped to root. I am not an Isilon expert so I am really handicapped here Please let me know  ... View more