Log messages show that chrony loses synchronisation frequently.   Are you also able to reach server ipsap01.ecb.de during the time of the issue? The last received values seem to be higher as compared to the other available server. Please compare the performance with servers configured on other hosts which do not report the issue. Check with your network/OS team on the server availability and to make time synchronization stable on the hosts     ... View more

Hi @Shriniwas    Please refer our installation guide [1] and review the steps performed so far. I would suggest to review the steps under document [2] to ensure the environment is correctly setup before installation. Configure Network Names Disabling the Firewall Setting SELinux mode Enable an NTP Service Install Python 2.7 on Hue Hosts [1] https://docs.cloudera.com/documentation/enterprise/latest/topics/installation.html   [2] https://docs.cloudera.com/documentation/enterprise/latest/topics/installation.html#install_cm_cdh ... View more

What is the curl output to the namenode web UI? curl -k "<namenode web UI address>" ... View more

What is the error? Please share the snapshot Did you restart the cluster services post disabling kerberos? Are you able to fetch curl output to the namenode web UI? curl -k "<namenode web UI address>"   Previous output does show established connections from 10.49.70.13. Please check if 50070 is the port for namenode web UI.     ... View more

Could you please check your code once as the referenced file M1.txt is a local path file whereas the command arguments show iinput hdfs path. ... View more

To disable the SPNEGO authentication for the Hadoop services, modify the following properties related to the service    Ambari Web > Services > HDFS > Configs >  Advanced core-site: hadoop.http.authentication.simple.anonymous.allowed = true hadoop.http.authentication.type = simple    It will require the dependent / affected services to be restarted. ... View more

Yes, you can follow below steps to disable SPNEGO authentication From the Clusters tab, select the service (HDFS, MapReduce, or YARN) for which you want to disable authentication. Click the Configuration tab. Under the Scope filter, click service_name (Service-Wide). Under the Category filter, click Security to display the security configuration options. In the Enable Kerberos Authentication for HTTP Web-Consoles setting, uncheck the box to disable authentication requirement for the selected service_name (Service-Wide). Click Save Changes to save the change.  This will require service restart ... View more

For Windows 10, you need to download and install the MIT Kerberos Client: Visit the MIT Kerberos Distribution Page. Download and install (typical installation) the appropriate MIT Kerberos client for Windows - Windows 4.1 64-bit version. The default location of the Kerberos configuration file on Windows machine is "C:\ProgramData\MIT\Kerberos5\krb5.ini" (this is hidden file) Copy the contents from the /etc/krb5.conf file from one of the hosts in the Hadoop cluster (from Linux) into the krb5.ini file on Windows, save the changes and exit. Configure the following environment properties for MIT Kerberos by visiting Control Panel -> System -> Advanced -> Environment Variables on Windows: KRB5_CONFIG: Path of the Kerberos ini file. KRB5CCNAME: Path of the Kerberos credential cache file. Save the changes and reboot the machine. Open MIT Kerberos Ticket Manager and supply the appropriate principal and password to have a valid TGT to authenticate to Kerberos Web Consoles: Configure browser to use SPNEGO to negotiate Kerberos authentication and then try to access the web UI ... View more

What is the windows version being used here? ... View more

httpFS hostname is the hostname of the web UI you want access to. This command is used to map the domain name being used by cluster nodes to the kerberos REALM they belong to. A specific hostname with domainname can be configured, or all hosts in a domain with a "." before the domain or subdomain.  Eg: C:\Windows\system32>ksetup /addhosttorealmmap .example.com CLUSTER.REALM     It can be run multiple times to add specific domains/hosts to the mapping to the CLUSTER.REALM. ... View more