Member since
10-01-2018
802
Posts
144
Kudos Received
130
Solutions
My Accepted Solutions
| Title | Views | Posted |
|---|---|---|
| 3541 | 04-15-2022 09:39 AM | |
| 2864 | 03-16-2022 06:22 AM | |
| 7485 | 03-02-2022 09:44 PM | |
| 3450 | 03-02-2022 08:40 PM | |
| 2362 | 01-05-2022 07:01 AM |
04-21-2020
09:13 AM
1 Kudo
@RajeshBodolla The general steps which I used to follow for Reinstall KTS from scratch this below, might be you are missing something. 1. Stop the KMS service 2. Delete the KMS service from the Cloudera Manager UI 3. Then remove all the contents under "rm -rf /var/lib/kms-keytrustee/" Note - Make sure that the hidden directory is also removed '/var/lib/kms-keytrustee/keytrustee/.keytrustee' 4. Now sync the Active and passive KTS using the following steps: a. Stop the Key Trustee Server service (Key Trustee Server service > Actions > Stop). b. Run the following command on the Active Key Trustee Server: $ sudo rsync -zav --exclude .ssl /var/lib/keytrustee/.keytrustee root@keytrustee02.example.com:/var/lib/keytrustee/. Note - Replace keytrustee02.example.com with the hostname of the Passive Key Trustee Server. c. Run the following command on the Passive Key Trustee Server: $ sudo ktadmin init d. Start the Key Trustee Server service (Key Trustee Server service > Actions > Start). e. Enable synchronous replication (Key Trustee Server service > Actions > Setup Enable Synchronous Replication in HA mode). f. Restart the Key Trustee Server service (Key Trustee Server service > Actions > Restart). Once this is done, now recreate the KMS service using the steps in the following link https://www.cloudera.com/documentation/enterprise/latest/topics/key_trustee_kms_ha.html
... View more
04-21-2020
01:36 AM
@bhara Unfortunately we don't have any public document for this but for overview you can follow this thread. https://community.cloudera.com/t5/Support-Questions/Version-upgrade-from-HDP-2-6-to-CDP/m-p/270234/highlight/true#M207374
... View more
04-21-2020
01:29 AM
2 Kudos
@Cl0ck You can always use OLD database, this is not am issue. For disabling TLS for admin console from CLI you can use below method. 1. Determine Cloudera Manager Database cat /etc/cloudera-scm-server/db.properties 2. Make database backup Postgres Backup: ---------------- pg_dump scm > scm_db_.backup 3. Connect to database Postgres Connect: ------------------ psql -U scm -h localhost -p 7432 -d postgres Password for user scm: postgres=> \l postgres=> \c scm 4. Show TLS related rows select * from CONFIGS where attr like '%tls%'; 5. Update TLS for web_tls update CONFIGS set value = 'false' where attr = 'web_tls'; You can generate the key and password as well with same method you did previously. Else please for reference you can use this doc. https://docs.cloudera.com/documentation/enterprise/5-14-x/topics/how_to_configure_cm_tls.html
... View more
03-25-2020
05:07 AM
@dil4852 Yes, in CDH for many services History and Rollback option is available so for CDSW. Refer the screenshot. You can follow the below link for more details. https://docs.cloudera.com/documentation/enterprise/6/6.3/topics/cm_mc_revert_configs.html
... View more
03-20-2020
01:23 AM
1 Kudo
@mon Cloudera Enterprise 6 requires Python 2.6 or higher on RHEL 6 compatible operating systems, but requires Python 2.7 or higher on RHEL 7 compatible operating systems. Only Hue and Spark2 needed Python 2.7 and rest of all CDH component in C6 train needs Python less than Python3. You can use Python 3 but not for CDH services until or unless you are trying some custom operations/job which needs some other Python version.
... View more
03-18-2020
02:32 AM
Sure, don't forget to close this thread my accepting this as solution once you done. Cheers,
... View more
03-17-2020
03:47 AM
@Mondi The best way to review the Heap requirement guide form Cloudera below: https://docs.cloudera.com/documentation/enterprise/6/release-notes/topics/rg_hardware_requirements.html#concept_vvv_cxt_gbb The heap tuning can be differ as per the cluster load and the service usages and sometime the only way to choose either reduce the load or add storage. The above guide can you give couple of answers around this question.
... View more
03-17-2020
03:28 AM
@ARVINDR I guess the error "STATUS_MEDIA_WRITE_PROTECTED = 0xC00000A2" is not a Hadoop error message. This error is from Isilon as per the error codes listed in: http://emc-isilon.github.io/pike/api/index.html https://emc-isilon.github.io/pike/api/pike.ntstatus.Status-class.html To resolve this error, check the Isilon Namenode logs.
... View more
03-16-2020
04:35 AM
Glad to hear that issue is resolved. Please close this thread by marking this as solved. Cheers, Thanks for contributing in Cloudera Community.
... View more
03-05-2020
10:27 AM
@khjomaa The error message is complaining about the LDAP(S) issue, though as you said you already tried the below command and this worked. ldapsearch -LLL -H ldaps://<xxxxx>.<xxxxx>.com:636 -b OU=cdh-kerberos,OU=CDH,DC=<xxxxx>,DC=com -x -D cdhadmin@<XXXXX>.COM -w <PASSWORD> I would like to ask the output of below command form CM server host which will give you a clear picture of LDAP over SSL is enabled from AD side or not. If openssl shows no peer certificate is returned. This indicates that the port is NOT listening via TLS: # openssl s_client -showcerts -connect <xxxxx>.<xxxxx>.com:636 Also for the Manage krb5.conf through Cloudera Manager it will be good to enable it if you want to manage krb5.conf file without any intervention and smoothly. Cheers,
... View more