Member since
01-15-2018
93
Posts
2
Kudos Received
1
Solution
My Accepted Solutions
Title | Views | Posted |
---|---|---|
1083 | 09-13-2018 02:23 PM |
03-31-2020
05:39 AM
2 Kudos
What happened?
Starting up a ZooKeeper server in a Kerberized CDP-DC 7.0.3 cluster failed with the logs below.
2020-03-30 12:23:10,251 ERROR org.apache.zookeeper.server.quorum.QuorumPeerMain: Unexpected exception, exiting abnormally java.io.IOException: Could not configure server because SASL configuration did not allow the ZooKeeper server to authenticate itself properly: javax.security.auth.login.LoginException: Message stream modified (41) at org.apache.zookeeper.server.ServerCnxnFactory.configureSaslLogin(ServerCnxnFactory.java:243) at org.apache.zookeeper.server.NIOServerCnxnFactory.configure(NIOServerCnxnFactory.java:646) at org.apache.zookeeper.server.quorum.QuorumPeerMain.runFromConfig(QuorumPeerMain.java:148) at org.apache.zookeeper.server.quorum.QuorumPeerMain.initializeAndRun(QuorumPeerMain.java:123) at org.apache.zookeeper.server.quorum.QuorumPeerMain.main(QuorumPeerMain.java:82)
The JDK for this environment is OpenJDK 1.8.0_242.
# java -version openjdk version "1.8.0_242" OpenJDK Runtime Environment (build 1.8.0_242-b08) OpenJDK 64-Bit Server VM (build 25.242-b08, mixed mode)
Solution
Removing the line of renew_lifetime in /etc/krb5.conf.
Removing this line means to use the default value, 0, for renew_lifetime.
Thus, it may also need to specify renew_lifetime when running kinit command.
See also
http://mail-archives.apache.org/mod_mbox/hadoop-yarn-dev/201909.mbox/%3CCAKRKJ1O3yrYKDZ=WhU=i6A+zqxFnUidxvwQzNCTW0mnEv2WFPA@mail.gmail.com%3E
On this page, Akira Ajisaka, one of Hadoop PMCs, described the solution.
He also mentioned a related OpenJDK's JIRA ticket.
https://bugs.centos.org/view.php?id=17000
This page also introduced the same solution.
Additionally, this page showed another solution, setting sun.security.krb5.disableReferrals=true in java.security file. But in my case, this solution didn't work.
https://my.cloudera.com/knowledge/Cloudera-Customer-Advisory-Servers-with-Kerberos-enabled-stop?id=292027
This is a related article from the Cloudera Knowledge Base.
It also describes sun.security.krb5.disableReferrals=true as its workaround.
... View more
Labels:
10-18-2018
09:49 AM
Thanks, @Jay Kumar SenSharma
... View more
10-17-2018
01:42 AM
How do I restrict access to Ambari WebUI by IP address? Of course, using a firewall included in OS is a solution, but I'd like to know the way which requires only to modify Ambari's configurations. I know Ambari uses Jetty for HTTP server and Jetty provides IP address restriction by IPAccessHandler https://www.eclipse.org/jetty/documentation/9.4.x/ipaccess-handler.html, but I'm not sure how to apply this to Ambari.
... View more
Labels:
- Labels:
-
Apache Ambari
10-09-2018
07:51 AM
Thanks, @Jay Kumar SenSharma!
... View more
10-09-2018
06:11 AM
I'm using Ambari 2.6.2.2 and Ambari 2.6.2.2 has "Service Auto Start Configuration" that enables a component restarting when it went down unexpectedly. However, I could not find an automatic "Restart" operation in the operations history when the automatic restart functionality worked. How can I get to know that the automatic component restart happened?
... View more
Labels:
- Labels:
-
Apache Ambari
10-05-2018
07:30 AM
Hi, Please try adding <service>
<role>ATLAS-API</role>
<url>http://${atlas_metadata_server_host}:${atlas_metadata_server_port}/</url>
</service> (e.g. <service>
<role>ATLAS-API</role>
<url>http://toide-2.toide.hortonworks.com:21000/</url>
</service> ) to your "Advanced topology". I met "Something went wrong" error on Atlas WebUI before adding it.
... View more
09-28-2018
02:48 AM
Thanks @Sharmadha Sainath
... View more
09-27-2018
06:34 AM
How do I delete an Atlas tag which is associated with entities those are already deleted? I found that I couldn't delete an Atlas tag named "mytag" and when I tried to delete that tag I saw "Given type mytag has references". However, "mytag" was not associated with any entities. Then I noticed "Show historical entities" checkbox and I checked the checkbox, then an entity already deleted appeared. I thought I could delete "mytag" after deleting the association between "mytag" and that entity, but I couldn't find the way to remove that association.
... View more
Labels:
- Labels:
-
Apache Atlas
09-19-2018
10:14 AM
Thanks, @Sandeep Nemuri That reference link is also helpful!
... View more
09-18-2018
03:43 AM
What stores clusterID, namespaceID, and blockpoolID? As far as I know... ${dfs.namenode.name.dir}/current/VERSION stores clusterID, namespaceID, and blockpoolID. ${dfs.journalnode.edits.dir}/${nameservice}/current/VERSION stores clusterID and namespaceID. ${dfs.datanode.data.dir}/current/VERSION stores clusterID. Directory name under ${dfs.datanode.data.dir}/current includes blockpoolID. ${dfs.datanode.data.dir}/current/${blockpoolID}/current/VERSION stores namespaceID and blockpoolID. Is there any other file or file name/directory name storing those IDs?
... View more
Labels:
- Labels:
-
Apache Hadoop