Member since
01-15-2019
274
Posts
23
Kudos Received
29
Solutions
My Accepted Solutions
| Title | Views | Posted |
|---|---|---|
| 2031 | 01-29-2024 03:30 AM | |
| 1924 | 02-21-2023 05:50 AM | |
| 1920 | 01-17-2023 05:53 AM | |
| 1691 | 12-29-2022 03:07 AM | |
| 5078 | 06-28-2022 08:16 AM |
08-11-2020
06:53 AM
@Mondi KMS service should be installed on your CDH cluster. Before installing KMS, you should have a dedicated cluster added using the Cloudera manager Add Cluster option which has the KTS service roles installed. If you are installing default Hadoop KMS Java Keystore KMS, the above can be ignored since the default Hadoop KMS included in CDH uses a file-based Java KeyStore (JKS) for its backing keystore. You can simply add the service from Cloudera Manager. Cloudera strongly recommends that you enable TLS for both the HDFS and the Key Trustee KMS services to prevent the passage of plain text key material between the KMS and HDFS data nodes. Refer below document https://docs.cloudera.com/documentation/enterprise/latest/topics/sg_hdfs_encryption_wizard.html#concept_fcq_phr_wt Hope this helps, Paras Was your question answered? Make sure to mark the answer as the accepted solution. If you find a reply useful, say thanks by clicking on the thumbs up button.
... View more
08-10-2020
06:25 AM
@Mondi Cloudera provides two implementations of the Hadoop KMS. Refer below document for more details. https://docs.cloudera.com/documentation/enterprise/latest/topics/cdh_sg_kms.html You need to install Key Trustee KMS only when using KTS as backing keystore instead of the file-based Java KeyStore (JKS) used by the default Hadoop KMS. There should be a separate cluster for keytrustee server. This would be mentioned as one of the steps when you enable HDFS encryption via the wizard. Refer below document https://docs.cloudera.com/documentation/enterprise/6/6.3/topics/sg_hdfs_encryption_wizard.html#concept_n2p_5vq_vt Hope this helps, Paras Was your question answered? Make sure to mark the answer as the accepted solution. If you find a reply useful, say thanks by clicking on the thumbs up button.
... View more
08-07-2020
01:09 AM
@Mondi You do not need to install Cloudera Navigator for KMS and KTS. Refer : https://docs.cloudera.com/documentation/enterprise/6/6.3/topics/encryption_prereqs.html#concept_g23_454_y5__section_n4w_b5v_ls Please refer below documents for encrypting data at rest requirement and installing KMS and KTS. You must install Key Trustee Server before installing and using Key Trustee KMS. https://docs.cloudera.com/documentation/enterprise/6/6.3/topics/encryption_planning.html#concept_c4m_knq_w5 https://docs.cloudera.com/documentation/enterprise/6/6.3/topics/key_trustee_install.html#xd_583c10bfdbd326ba-590cb1d1-149e9ca9886--7b84 https://docs.cloudera.com/documentation/enterprise/6/6.3/topics/cm_ig_install_keytrustee.html#xd_583c10bfdbd326ba-590cb1d1-149e9ca9886--7860 Hope this helps, Paras Was your question answered? Make sure to mark the answer as the accepted solution. If you find a reply useful, say thanks by clicking on the thumbs up button.
... View more
08-04-2020
08:42 PM
1 Kudo
@ebeb It seems there is some issue with either your credentials or connectivity to the URL. Please confirm if you are using credentials generated from the license file. Refer below document for obtaining username and password for adding to the baseurl https://docs.cloudera.com/cdp/latest/release-guide/topics/cdpdc-cm-download-information.html Also, confirm the URL connectivity from your CM server host using curl command : #ping archive.cloudera.com # curl https://username:password@archive.cloudera.com/p/cm7/7.1.2/redhat6/yum Hope this helps, Paras Was your question answered? Make sure to mark the answer as the accepted solution. If you find a reply useful, say thanks by clicking on the thumbs up button.
... View more
07-23-2020
03:36 AM
@fransyk It is not compulsory to have both the roles on different hosts. Having said that, in production environments it is recommended to differentiate worker hosts and master hosts. Please refer below document for recommended role allocations for different cluster sizes: https://docs.cloudera.com/documentation/enterprise/latest/topics/cm_ig_host_allocations.html#concept_f43_j4y_dw Hope this helps, Paras Was your question answered? Make sure to mark the answer as the accepted solution. If you find a reply useful, say thanks by clicking on the thumbs up button.
... View more
07-23-2020
02:55 AM
@fransyk Yes, you can have datanode and namenode role together on a host as long as the hardware requirements are met for the service to avoid any out of memory issues. Please refer https://docs.cloudera.com/documentation/enterprise/6/release-notes/topics/rg_hardware_requirements.html#concept_fzz_dq4_gbb Hope this helps, Paras Was your question answered? Make sure to mark the answer as the accepted solution. If you find a reply useful, say thanks by clicking on the thumbs up button.
... View more
07-22-2020
06:55 AM
@pdev Yes, BDR is supported between different CDH versions. Refer below links for more details https://docs.cloudera.com/documentation/enterprise/5-14-x/topics/cm_bdr_replication_intro.html#concept_rt2_1wt_bx https://docs.cloudera.com/documentation/enterprise/6/release-notes/topics/rg_pcm_bdr.html#bdr Hope this helps, Paras Was your question answered? Make sure to mark the answer as the accepted solution. If you find a reply useful, say thanks by clicking on the thumbs up button.
... View more
07-22-2020
04:47 AM
@pdev Please refer document [1] for details on how to enable replication between cluster with kerberos configuration. To configure encryption of data transmission between source and destination clusters: Enable TLS/SSL for HDFS clients on both the source and the destination clusters. You may also need to configure trust between the SSL certificates on the source and destination. The certificates of the source cluster should be trusted by your destination cluster. Enable TLS/SSL for the two peer Cloudera Manager Servers. Refer link [2] for more details. [1] https://docs.cloudera.com/documentation/enterprise/5-14-x/topics/cm_bdr_replication_and_kerberos.html#xd_583c10bfdbd326ba-5676e95c-13ed333c3d9--7ff3 [2] https://docs.cloudera.com/documentation/enterprise/5-14-x/topics/cm_bdr_replication_and_encryption.html#concept_lrr_rcf_4r Hope this helps, Paras Was your question answered? Make sure to mark the answer as the accepted solution. If you find a reply useful, say thanks by clicking on the thumbs up button.
... View more
07-22-2020
04:08 AM
1 Kudo
@rok You can use the Cloudera Manager REST API to export and import all of its configuration data. The API exports a JSON document that contains configuration data for the Cloudera Manager instance. You can use this JSON document to back up and restore a Cloudera Manager deployment. Refer below document for the steps: https://docs.cloudera.com/documentation/enterprise/6/6.3/topics/cm_intro_api.html#concept_dnn_cr5_mr Hope this helps, Paras Was your question answered? Make sure to mark the answer as the accepted solution. If you find a reply useful, say thanks by clicking on the thumbs up button.
... View more
07-09-2020
01:53 AM
1 Kudo
@tanishq1197 When you see this log entry, the Cloudera Manager Admin Console is ready: INFO WebServerImpl:com.cloudera.server.cmf.WebServerImpl: Started Jetty server Try to access the CM API instead, you should use the login credentials curl -u <username>:password http://<cm_host>:<port>/api/v19/clusters Are you able to reach out to the CM server from your desktop? #ping cmserverhost #telnet cmserverhost port
... View more