@bgooley  @lwang Do I have to follow the document to create hue store, when I already have a PEM file in place on the server. I have given my Hue configuration in ClouderaManager as follows : Hue TLS/SSL Server Certificate File (PEM Format)  ssl_certifcate : Server.PEM Hue TLS/SSL Server Private Key File (PEM Format) : Server.PEM ssl_private_key   PEM file is valid for the server on which hue service is enabled and hue server is running on it.   This is what my hue error log shows : [11/Jul/2019 11:19:28 -0700] wsgiserver ERROR SSL key and certificate could not be found or have a problem Traceback (most recent call last): File "/opt/cloudera/parcels/CDH-5.14.4-1.cdh5.14.4.p0.3/lib/hue/desktop/core/src/desktop/lib/wsgiserver.py", line 1701, in _bind ctx.use_privatekey_file(self.ssl_private_key) Error: [('PEM routines', 'PEM_read_bio', 'no start line'), ('SSL routines', 'SSL_CTX_use_PrivateKey_file', 'PEM lib')] [11/Jul/2019 11:19:48 -0700] wsgiserver ERROR SSL key and certificate could not be found or have a problem Traceback (most recent call last): File "/opt/cloudera/parcels/CDH-5.14.4-1.cdh5.14.4.p0.3/lib/hue/desktop/core/src/desktop/lib/wsgiserver.py", line 1701, in _bind ctx.use_privatekey_file(self.ssl_private_key) Error: [('PEM routines', 'PEM_read_bio', 'no start line'), ('SSL routines', 'SSL_CTX_use_PrivateKey_file', 'PEM lib')] [11/Jul/2019 11:20:11 -0700] wsgiserver ERROR SSL key and certificate could not be found or have a problem Traceback (most recent call last): File "/opt/cloudera/parcels/CDH-5.14.4-1.cdh5.14.4.p0.3/lib/hue/desktop/core/src/desktop/lib/wsgiserver.py", line 1701, in _bind ctx.use_privatekey_file(self.ssl_private_key) Error: [('PEM routines', 'PEM_read_bio', 'no start line'     Any idea why it shows this certificate error? ... View more

Sure. That would help. thanks ... View more

did you get this issue resolved? I am having the same problem too ... View more

Hello, I am having the same issue when I click HDFS on Hue Web UI when you say change permissions on /user/group- can you elaborate on that where, how and what? ... View more

thanks for the insights @bgooley  @GangWar . So making them non-interactive means we cannot login into a computer with the service account  but the account is  still be active in AD. So, what I want to know is Cloudera has created random accounts which are interactive i.e we can login to a machine using those accounts as a user, Can they be changed to non-interactive? ... View more

we donot want to delete them , as of now they are interactive AD accounts but we want to make non-interactive as per our organization compliance policies. ... View more

Not able to tag you in another thread. let me know if anything else need to be tried. ... View more

tried it , same error. Opened up a new thread. Please reply there. Will tag you ... View more

I have a problem in one host in my cluster. Clock offset issue. It gives an error like this : May/2019 21:57:44 +0000] 26424 Metadata-Plugin navigator_plugin INFO Refreshing Metadata Plugin for keytrustee-KMS_KEYTRUSTEE with pipelines [] [21/May/2019 21:57:44 +0000] 26424 Audit-Plugin navigator_plugin_pipeline INFO Stopping Navigator Plugin Pipeline '' for keytrustee-KMS_KEYTRUSTEE (log dir: None) [21/May/2019 21:57:44 +0000] 26424 Metadata-Plugin navigator_plugin_pipeline INFO Stopping Navigator Plugin Pipeline '' for keytrustee-KMS_KEYTRUSTEE (log dir: None) [21/May/2019 21:58:35 +0000] 26424 Monitor-HostMonitor throttling_logger ERROR chronyc: chronyc sources: not synchronized to any server All the other hosts works fine  but only this host doesn't work becaus of clock offset.  1. it is pointing to the right NTP server and is sycnhronised too. chronyd is disabled like in all other hosts. ntpd is active and running. Any help is appreciated on why cloudera agent is checking for chronyd on this one host? ... View more

all the service accounts created are in dedicated cloudera OU. ... View more