How can we mask passwords on xml configuration files in HDP for instance, the ranger-policymgr-ssl.xml file? ... View more

The thrift server stops responding and Accumulo crashes. The log shows a lot of these error messages but doesn't really point to what the issue is. Anyone familiar with this? ERROR: Error occurred during processing of message. java.lang.RuntimeException: org.apache.thrift.transport.TTransportException at org.apache.thrift.transport.TSaslServerTransport$Factory.getTransport(TSaslServerTransport.java:219) at org.apache.accumulo.core.rpc.UGIAssumingTransportFactory$1.run(UGIAssumingTransportFactory.java:51) at org.apache.accumulo.core.rpc.UGIAssumingTransportFactory$1.run(UGIAssumingTransportFactory.java:48) at java.security.AccessController.doPrivileged(Native Method) at javax.security.auth.Subject.doAs(Subject.java:360) at org.apache.hadoop.security.UserGroupInformation.doAs(UserGroupInformation.java:1637) at org.apache.accumulo.core.rpc.UGIAssumingTransportFactory.getTransport(UGIAssumingTransportFactory.java:48) at org.apache.thrift.server.TThreadPoolServer$WorkerProcess.run(TThreadPoolServer.java:208) at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142) at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617) at org.apache.accumulo.fate.util.LoggingRunnable.run(LoggingRunnable.java:35) at java.lang.Thread.run(Thread.java:745) Caused by: org.apache.thrift.transport.TTransportException ... View more

Dumped the current listing (Ambari > Admin > Service Accounts; in prep for physical deployment, and need to register these with a central service (but not AD/LDAP). Currently on HDP 2.3.0 and Ambari 2.1.1, but will be deploying to latest & greatest. Questions: 1) Can "Proxyuser Group" be redefined to something other than "users?" 2) We have all of our 'human' users in group 'hadoop' on the PoC cluster. Is this a requirement? I'd prefer to have only service accounts in the hadoop group if possible. 3) We do not currently have Ranger installed, but plan to deploy. What service account(s) and/or group(s) will this service require? ... View more

I have a few questions regarding Phoenix and CSV data loading. Currently on HDP 2.3.4. 1. Does "Bulk CSV Data Loading" support local index creation? 2. Does "Asynchronous Index Population" support local index creation? OR 3. Is there any way to create a local index manually rather than automatic as when we are doing bulk upload in existing table, automatic local index becomes inconsistent. FYI - We are only using hbase bulk upload to upload data into hbase. ... View more

The local index is created in existing table is +millions of records. Does bulk csv data loading support local index creation? and does asynchronous index population support local index creation? or Is there any way to create local index manually rather than automatic as when we are doing bulk upload into an existing table, automatic local index becomes inconsistent. We are only using hbase bulk upload to upload data into hbase at the moment. ... View more

The cluster is not Kerberized but we are migrating a cluster to a different domain along with with increased security. My questions: 1) What's the recommended method for changing the cluster hostnames and IPs so that Ambari/HDP is aware. 2) There will be new restrictions regarding iptables/ports and root access. This cluster was set up with no firewalls and password-less root access with Ambari using the root user. Aside from making sure the correct ports are open, Are there more considerations here? ... View more

Problem: We had opened our firewall to the old IP address for smartsense.hortonworks.com and it seems the IP has changed in the last couple weeks. Because of this our firewall is blocking the connection attempt now and we cannot upload bundles using the smartsense gateway. Can you please provide an IP range that we can open in our firewall so that if the IP changes we will still be able to connect? ... View more

using a non-MIT kerberos server, and manage keytabs and kerberos accounts themselves, not through ambari. how can they change the passwords for both ranger admin and keyadmin. The docs are unclear on what this entails: can we just change them in our IPA, and that's it? Are there any config changes or updates necessary in Ambari when we do that? Would anything about the process impact uptime on our cluster? ... View more

Currently default JDK is jdk1.8.0_40 which seems to have issues with Kerberos. Currently at HDP 2.3.2, and Ambari 2.1.2. Customer is planning on setting this up with jdk1.8.0_60 and needs conformation that these below changes are enough for jdk1.8.0_60 to be accepted as new default in file serverSetup.py: JDKRelease("jdk1.8", "Oracle JDK 1.8 + Java Cryptography Extension (JCE) Policy Files 8", "http://public-repo-1.hortonworks.com/ARTIFACTS/jdk-8u40-linux-x64.tar.gz", "jdk-8u40-linux-x64.tar.gz", "http://public-repo-1.hortonworks.com/ARTIFACTS/jce_policy-8.zip", "jce_policy-8.zip", "/usr/jdk64/jdk1.8.0_40", "(jdk.*)/jre") He will change names from jdk1.8.0_40 to jdk1.8.0_60 and use my own repository to host the file. Not touching jce-policy. Could you please confirm if these changes are enough? ... View more