All, This is actually a BUG, as ambari removes the falcon service but not the hooks in Oozie configs. The proper way to fix this and not have it hit you each time you upgrade is to remove the below listed values from your oozie configs. I have also opened an internal (to Hortonworks) JIRA to have this fixed in future versions of Ambari. oozie.service.ProxyUserService.proxyuser.falcon.hosts oozie.service.ProxyUserService.proxyuser.falcon.groups oozie.service.URIHandlerService.uri.handlers oozie.services.ext oozie.service.ELService.ext.functions.coord-job-submit-instances oozie.service.ELService.ext.functions.coord-action-create-inst oozie.service.ELService.ext.functions.coord-action-create oozie.service.ELService.ext.functions.coord-job-submit-data oozie.service.ELService.ext.functions.coord-action-start oozie.service.ELService.ext.functions.coord-sla-submit oozie.service.ELService.ext.functions.coord-sla-create ... View more

I can confirm for you that the deletes look correct. I normally do not do the alters, but I don't see them causing an issue. Remember to STOP ambari-server before editing. Take a good backup of the db. Then when done, start ambari-server. ... View more

@Arun A K I just use the Web Gui that comes with IPA ldap. Keep in mind I am not managing a large user base, but rather just doing small recreations to help customers. I would think the GUI would get cumbersome if you were doing an entire enterprise. ... View more

@Arun A K, first let's fix your admin. Simply go into the database and do: update users set ldap_user = 0 where user_name = 'admin'; then reset the password as follows: https://community.hortonworks.com/questions/449/how-to-reset-ambari-admin-password.html Here is the output of an ldapsearch on a user in my IPA, to show you where dn is: # orlando, users, accounts, ipa.example.com dn: uid=orlando,cn=users,cn=accounts,dc=ipa,dc=example,dc=com displayName: Orlando Teixeira cn: Orlando Teixeira objectClass: top objectClass: person objectClass: organizationalperson objectClass: inetorgperson objectClass: inetuser objectClass: posixaccount objectClass: krbprincipalaux objectClass: krbticketpolicyaux objectClass: ipaobject objectClass: ipasshuser objectClass: ipaSshGroupOfPubKeys objectClass: mepOriginEntry loginShell: /bin/sh sn: Teixeira gecos: Orlando Teixeira homeDirectory: /home/orlando krbPwdPolicyReference: cn=global_policy,cn=IPA.EXAMPLE.COM,cn=kerberos,dc=ipa, dc=example,dc=com mail: orlando@ipa.example.com krbPrincipalName: orlando@IPA.EXAMPLE.COM givenName: Orlando uid: orlando initials: OT ipaUniqueID: 3b9308de-895c-11e5-a188-0800274e577d uidNumber: 1690200001 gidNumber: 1690200001 memberOf: cn=ipausers,cn=groups,cn=accounts,dc=ipa,dc=example,dc=com memberOf: cn=test,cn=groups,cn=accounts,dc=ipa,dc=example,dc=com memberOf: cn=test2,cn=groups,cn=accounts,dc=ipa,dc=example,dc=com mepManagedEntry: cn=orlando,cn=groups,cn=accounts,dc=ipa,dc=example,dc=com krbLoginFailedCount: 6 krbLastFailedAuth: 20160601185034Z # orlando, groups, accounts, ipa.example.com dn: cn=orlando,cn=groups,cn=accounts,dc=ipa,dc=example,dc=com objectClass: posixgroup objectClass: ipaobject objectClass: mepManagedEntry objectClass: top cn: orlando gidNumber: 1690200001 description: User private group for orlando mepManagedBy: uid=orlando,cn=users,cn=accounts,dc=ipa,dc=example,dc=com ipaUniqueID: 3b9b8388-895c-11e5-a188-0800274e577d ... View more

In the ambari DB you would do: update host_role_command set status = 'COMPLETED' where request_id = 1; Also, instead of the other options you took, you could have set 17,829 to completed with almost the same command: update host_role_command set status = 'COMPLETED' where task_id = 17829; ... View more

Guilhemme, Could you please do a : yum whatprovides 'ambari-admin-password-reset' I just checked my 2.2.2 install and I do not see it: [root@mon-orlan ~]# ambari (hit tab to complete) ambari-python-wrap ambari-server ambari_server_main.py ambari-server.py ... View more

Most customers actually have user ambari for the database, so it would actually be: 2. Run 'psql -U ambari ambari' ... View more

OK, you are in a bad way. Can you get to Admin - Kerberos, and tell me do you have a disable kerberos button? I think your best bet would be to disable it, and then redeploy it. ... View more

What do you get as output if you do: /var/lib/ambari-server/resources/scripts/configs.sh -u AMBARI_USER -p AMBARI_PASS get AMBARI_SERVER CLUSTER_NAME kerberos-env ... View more

You in fact do have one hbase installed, the one internal to ambari metrics, and it needs to stay running. I think you may have an issue I have seen before, can you add this to your ambari.properties file: server.timeline.metrics.cache.disabled = true and then restart ambari, let me know if this helps. ... View more

All, I think you may have missed an important thing: sudo /usr/sbin/ambari-server setup-ldap Using python/usr/bin/python2.7 Setting up LDAP properties... We only support python 2.6.6, using 2.7 causes many many issues. Please use python 2.6.6. Also, I suggest you do an ldapsearch to test your settings: ldapsearch -x -H ldap://ldap.xxxxx.com -b dc=CENTENE,dc=com -D "CN=xxxxxx,OU=LDAP,DC=xxxxxxx,DC=com" -W "(sAMAccountName=<User-to-search-for>)" ... View more

The Ambari admin account can be disabled, and if you really like, deleted from the manage ambari users area of the Ambari gui. Of course, you cannot disable it if logged in as admin, you need to log in with another admin account to do it. ... View more