About JoaoBarreto

PavelZeger · ‎01-23-2019

I encountered the same error but despite the fact I set group mapping to LDAP in HDFS group mapping with appropriate bind user ,in the log of Sentry I'm getting a warning with ShellBasedUnixGroupsMapping and not LdapGroupsMapping. Need a help with ASAP.

JoaoBarreto · ‎10-23-2018

Just a few changes I've detected. In the agent configuration don't use EXPORT. In /etc/default/cloudera-scm-agent just add: KRB5_CONFIG=/path/krb5.conf Also, you will need to hammer Kerberos Server and Kadmin files. KDC -> /etc/sysconfig/krb5kdc Add: KRB5_CONFIG=/path/krb5.conf And also: Kadmin -> /etc/sysconfig/kadmin Add: KRB5_CONFIG=/path/krb5.conf This will allow you to start both services after you create the databases (kdb5_util create -s). If you don't do this, kerberos will still read /etc/krb5.conf and weird stuff will appear. LET'S GO PEOPLE!!! 😄 Hammer on!

bgooley · ‎10-08-2018

@JoaoBarreto, It is possible to do so, but it is not something we document or test exactly. The closest steps would be only doing the Cloudera Manager steps here: https://www.cloudera.com/documentation/enterprise/5-15-x/topics/install_singleuser_reqts.html#concept_ivr_lng_2v Since the agent runs as "root" by default, you shouldn't need to do any of the agent-specific steps there. Also, the Management Service "System User" and "System Group" are "cloudera-scm" by default. You may need to do a little trial and error to get everything working, but I don't think it would be too bad.

JoaoBarreto · ‎12-27-2017

I can't actually do that, cause the AD comes from a major company... and it's managed by them. 😞 Thanks for the reply!

Online	Offline
Last Visited	‎02-21-2024 07:30 AM

Member Since	‎12-19-2017 05:37 AM
Last Visited	‎02-21-2024 07:30 AM
Posts	23
Kudos received	2

Cloudera Community

Re: Hive, Sentry, Kerberos and Active Directory - ...

Re: [Kerberos] How to setup Cloudera Manager in or...

Re: Changing installation username from "cloudera-...

Re: sentry doesnt work based on AD