Member since
10-13-2015
26
Posts
15
Kudos Received
1
Solution
My Accepted Solutions
Title | Views | Posted |
---|---|---|
1128 | 10-23-2015 10:05 PM |
11-24-2015
02:28 AM
1 Kudo
@Neeraj Sabharwal Yes, I had to create a local ambari-qa user to have the Hbase check status to work.
... View more
11-18-2015
06:05 PM
2 Kudos
You can alwasy use Nifi. Nifi processor has ability to read a file, split it, drop into kafka.
... View more
11-12-2015
07:22 PM
The policy is there but I don't see ambari-qa in the list of external users.
... View more
11-12-2015
06:52 PM
The hbase smoke test is ran from Service Check in ambari and obviously Hbase Ranger policy doesn't know anything about ambari-qa user? Can we change that? or add ambari-qa user to the policy?
... View more
Labels:
- Labels:
-
Apache Ambari
-
Apache Ranger
11-12-2015
03:41 PM
Are you able to issue a simple ldapsearch from the command line? ldapsearch -H ldaps://192.168.1.1:636 -D "cn=xxxx,ou=xxxx,ou=xxxx,dc=xxxx,dc=pmh,dc=org" -x -W -b "cn=xxx,ou=xxx,ou=xxxx,dc=xxxx,dc=xxxx,dc=org"
... View more
11-11-2015
08:14 PM
1 Kudo
log into the ranger database, and delete the following rows in order. delete from x_group_users where added_by_id in (1,2)
delete from x_user where added_by_id in (1,2) delete from x_group where added_by_id in (1,2)
... View more
11-10-2015
02:52 PM
thanks @Neeraj. this helps from the command line, though if I want to do it from java, the client is still picking up the computer username not that one you pass in...
... View more
11-06-2015
06:14 PM
my cluster is not yet secured. so I have non secure zooker node. I tried this: "jdbc:phoenix:<zookeper-host>:2181:/hbase-unsecure:<uid>" but no luck. would that work with non-secure zookeeper node?
... View more
11-06-2015
06:08 PM
1 Kudo
I see the plugin but then I see this https://issues.apache.org/jira/browse/RANGER-246 and for Storm, it gives me an alert that only works with secure cluster. advice?
... View more
Labels:
- Labels:
-
Apache Kafka
-
Apache Ranger
-
Apache Storm
11-06-2015
05:46 PM
1 Kudo
Currently Have Hbase protected by Ranger. I am not able to connect to Hbase via Phoenix from an external java client since its picking up my machine userid and that is not an authorized user. Is there a way to pass in the user in phoenix connection url?
... View more
Labels:
- Labels:
-
Apache HBase
-
Apache Phoenix
-
Apache Ranger
11-05-2015
09:46 PM
thanks @rmani@hortonworks.com
... View more
11-05-2015
08:30 PM
1 Kudo
It seem that invoking the test from the KNox repository in Ranger failes due to miss path to the cert. Caused by: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
... View more
Labels:
- Labels:
-
Apache Knox
-
Apache Ranger
11-04-2015
12:10 AM
If necessary you can import the CA cert to ${JAVA_HOME}/jre/lib/security/cacerts. If using a self-signed cert you can use the keytool to import it into ${JAVA_HOME}/jre/lib/security/cacerts also. seem this step is necessary even for self-signed certs.
... View more
11-03-2015
11:44 PM
@Neeraj Yes, I figure that much out and now its complaining about not finding the cert which I have imported into a truststore and pointing to it.
... View more
11-03-2015
10:41 PM
Ranger usersych is throwing an exception while connecting to AD: below is the exception, any ideas? I have verified that I can bind successfully with AD. 03 Nov 2015 17:39:40 INFO UserGroupSync [UnixUserSyncThread] - Begin: initial load of user/group from source==>sink
03 Nov 2015 17:39:40 INFO LdapUserGroupBuilder [UnixUserSyncThread] - LDAPUserGroupBuilder updateSink started
03 Nov 2015 17:39:40 INFO LdapUserGroupBuilder [UnixUserSyncThread] - LdapUserGroupBuilder initialization started
03 Nov 2015 17:39:40 ERROR UserGroupSync [UnixUserSyncThread] - Failed to initialize UserGroup source/sink. Will retry after 30000 milliseconds. Error details:
javax.naming.ServiceUnavailableException: xx.xxx.xx..xx:636; socket closed
at com.sun.jndi.ldap.Connection.readReply(Connection.java:449)
at com.sun.jndi.ldap.LdapClient.ldapBind(LdapClient.java:365)
at com.sun.jndi.ldap.LdapClient.authenticate(LdapClient.java:214)
at com.sun.jndi.ldap.LdapCtx.connect(LdapCtx.java:2788)
at com.sun.jndi.ldap.LdapCtx.<init>(LdapCtx.java:319)
at com.sun.jndi.ldap.LdapCtxFactory.getUsingURL(LdapCtxFactory.java:192)
at com.sun.jndi.ldap.LdapCtxFactory.getUsingURLs(LdapCtxFactory.java:210)
at com.sun.jndi.ldap.LdapCtxFactory.getLdapCtxInstance(LdapCtxFactory.java:153)
at com.sun.jndi.ldap.LdapCtxFactory.getInitialContext(LdapCtxFactory.java:83)
at javax.naming.spi.NamingManager.getInitialContext(NamingManager.java:684)
at javax.naming.InitialContext.getDefaultInitCtx(InitialContext.java:313)
at javax.naming.InitialContext.init(InitialContext.java:244)
at javax.naming.ldap.InitialLdapContext.<init>(InitialLdapContext.java:154)
at org.apache.ranger.ldapusersync.process.LdapUserGroupBuilder.createLdapContext(LdapUserGroupBuilder.java:149)
at org.apache.ranger.ldapusersync.process.LdapUserGroupBuilder.updateSink(LdapUserGroupBuilder.java:262)
at org.apache.ranger.usergroupsync.UserGroupSync.run(UserGroupSync.java:58)
at java.lang.Thread.run(Thread.java:745)
... View more
Labels:
- Labels:
-
Apache Ranger
10-29-2015
08:21 PM
thank you. and in addition this tool is assuming you have manually created the store and you are pointing to it. it does not create one for you.
... View more
10-29-2015
05:23 PM
After running security-setup on ambari, and then choose option [3] - setup trustore, it successfull say its completed, but yet no trust store created in the path.
... View more
Labels:
- Labels:
-
Apache Ambari
10-23-2015
10:05 PM
4 Kudos
fixed the issue. I realized that I uninstalled the ambari-server where some of the python libraries symobolic links where sill pointing to the ambari-server folder. recreated the symbolic links in the site-packages to point to ambari-agent folder and that fixed it.
... View more
10-23-2015
09:38 PM
1 Kudo
While starting the agent on a new node, I get the following: Checking for previously running Ambari Agent...
Starting ambari-agent
Verifying ambari-agent process status...
ERROR: ambari-agent start failed. For more details, see /var/log/ambari-agent/ambari-agent.out:
====================
File "/usr/lib/python2.6/site-packages/ambari_agent/NetUtil.py", line 21, in <module>
from HeartbeatHandlers import HeartbeatStopHandlers
File "/usr/lib/python2.6/site-packages/ambari_agent/HeartbeatHandlers.py", line 21, in <module>
from ambari_commons.exceptions import FatalException
File "/usr/lib/python2.6/site-packages/ambari_commons/__init__.py", line 21, in <module>
"""
File "/usr/lib/python2.6/site-packages/ambari_commons/os_check.py", line 133, in <module>
File "/usr/lib/python2.6/site-packages/ambari_commons/os_check.py", line 115, in __init__
File "/usr/lib/python2.6/site-packages/ambari_commons/os_check.py", line 112, in initialize_data
Exception: Couldn't load 'os_family.json' file
... View more
Labels:
- Labels:
-
Apache Ambari
10-21-2015
09:40 PM
2 Kudos
Any one notice any performance for degradation while having all clients accessing services via rest over KNOX? It see for me Knox is not a good solution for low latency applications. thoughts?
... View more
Labels:
- Labels:
-
Apache Knox
10-21-2015
04:43 PM
1 Kudo
I had better luck expunging the message by changing the retention time and then resetting back. kafka-topics.sh --zookeeper localhost:13003 --alter --topic MyTopic --config retention.ms=1000
... View more
10-21-2015
04:19 PM
its been a while, but this is at least a place to start looking at: when you grab a connection in a kerberos mode, you need to perform the following in the connection: Subject current = Subject.getSubject(AccessController.getContext()); this.connection = (Connection) Subject.doAs(signedOnUserSubject, new PrivilegedExceptionAction<Object>() {
... View more
10-20-2015
02:30 PM
this is great blog. what about the partition size for the namedirs? multiple namedirs?
... View more
10-19-2015
11:25 PM
Labels:
- Labels:
-
Apache Hadoop