@enirys Follow the below steps on ambari db 1. Take ambari DB backup 2. Execute the below mentioned SQL commands on ambari DB # DELETE FROM ambari.kkp_mapping_service where kkp_id in (select kkp_id from ambari.kerberos_keytab_principal where principal_name = 'HTTP/cnode28.26f5de01-5e40-4d8a-98bd-a4353b7bf5e3.datalake@26F5DE01-5E40-4D8A-98BD-A4353B7BF5E3.DATALAKE');
# DELETE FROM kerberos_keytab_principal WHERE principal_name='HTTP/cnode28.26f5de01-5e40-4d8a-98bd-a4353b7bf5e3.datalake@26F5DE01-5E40-4D8A-98BD-A4353B7BF5E3.DATALAKE';
# DELETE FROM kerberos_principal WHERE principal_name='HTTP/cnode28.26f5de01-5e40-4d8a-98bd-a4353b7bf5e3.datalake@26F5DE01-5E40-4D8A-98BD-A4353B7BF5E3.DATALAKE'; 3. After executing above command restart ambari server and regenerate the keytabs
... View more
@SSRIL From the stack trace I can see, it is failing to install Smartsense hst package, Smartsense hst package is shipped with ambari reporitory Make sure that ambari repository exists on the host For the HDP repo, can you share a complete screenshot of the repositories page
... View more
@jakezhang From the screenshot, I can see cm_kms policy is not in sync Policy needs to be sync after ranger users is added to the policy, then only the Ranger user will be allowed to Get the keys
... View more
@jakezhang Can you check is cm_kms policy is in sync after adding the ranger users to the policy Share the screenshot of Ranger Ui => Audit => Plugins
... View more
@jakezhang Check is cm_kms policy is in sync Also, modify the Config Properties values in cm_kms as shown below tag.download.auth.users=kms
policy.download.auth.users=keyadmin,rangerkms
... View more
@jakezhang Can you try adding ranger url in "Ranger KMS Server Advanced Configuration Snippet (Safety Valve) for conf/ranger-kms-security.xml” ranger.plugin.kms.policy.rest.url=http://<rangerhostname>:<port no> Also, make sure that DB for ranger and ranger kms are separate
... View more
@Sayed016 I can see there is no "," after Yarn username, Can you try adding"," after yarn user name as shown below yarn.admin.acl=dr.who,user1,yarn,admingroup2
... View more
