Thanks a lot, my problem is fixed by using the escapted version of password. ... View more

@AppaRao,   We are working on publishing this publicly, but for now on CM/5.13.1 and higher:   (1)   Cloudera Manager:   Update java.security for the Java version used by Cloudera Manager:   - Open $JAVA_HOME/jre/lib/security/java.security in an editor Add or replace this line: - jdk.tls.disabledAlgorithms=SSLv3, TLSv1, TLSv1.1, RC4, MD5withRSA, DH keySize < 768, 3DES_EDE_CBC   (2)   Impala:   There are two different mechanisms to get TLS 1.2 support, depending on your operating system. On RHEL/CentOS 7, add the following to a CM Configuration Snippet (Safety Valve).   Impala on RHEL/CentOS 7 In CM, add the following parameter in Impala's safety valve: Impala Command Line Argument Advanced Configuration Snippet (Safety Valve) -ssl_minimum_version=tlsv1.2   On RHEL/CentOS 6, the above flag unfortunately does not work. Add the following instead:   Impala on RHEL/CentOS 6   In CM, add the following parameter in Impala's safety valve: Impala Command Line Argument Advanced Configuration Snippet (Safety Valve) -ssl_cipher_list=DEFAULT:!aNULL:!eNULL:!LOW:!EXPORT:!SSLv2:!SSLv3:!TLS1     ... View more

@manuh,   I recommend you start a new thread since the answer to this one doesn't really make sense. enabling kerberos for web consoles will not help resolve a PKIX error (which occurs when a client cannot find trust for the signer of the server certificate of the server to which the client is connecting).   Enabling kerberos for web-consoles will not solve TLS problems.  Something else that was done must have resolved the issue.   Enabling Kerberos Authentication for Web Consoles will require that any clients connecting to them use SPNEGO to authenticate.  This requires browser configuration and sometimes OS-level and krb5.conf configuration changes. It is best to plan this move carefully and make sure you know how to configure clients to use SPNEGO if you are going to enable kerberos for web consoles.   If you are having any problems similar to what was described in this thread, please give us some background of what you are trying to do and what isn't working.   Thanks,   Ben ... View more

@bgooley   Thank you for your help. We finished the upgrade with success.   After some cleanings in the cluster we started the upgrade using CM Upgrade page. We did all steps until the new parcel activation. When we tried to do next steps from CM Upgrade page we got a error box without any messages. We redeployed configuration and restarted services manually using CM.   At the end we had to redeploy Oozie Shared libraries and SQL Server JDBC dirver. ... View more

@yassine24,   Basic information about how to query and update Service config via python:   http://cloudera.github.io/cm_api/docs/python-client/#configuring-services-and-roles   Also, I pulled this from the Community ... it shows how to update an hdfs safety valve via REST API:   curl -iv -X PUT -H "Content-Type:application/json" -H "Accept:application/json" -d '{"items":[{ "name": "core_site_safety_valve","value": "<property><name>hadoop.proxyuser.ztsps.users</name><value>*</value></property><property><name>hadoop.proxyuser.ztsps.groups</name><value>*</value></property>"}]}' http://admin:admin@10.1.0.1:7180/api/v12/clusters/cluster/services/hdfs/config   You can try using the above information to update the safety valve for hbase_service_config_safety_valve.   NOTE that when updating the safety valve, what you update will replace what was there.  If you want to "add" a property to the safety valve, you need to include all the properties you want as an end result. ... View more

@Manindar,   Indeed, if you have a replication factor of 3 and only one DataNode is alive, then there is nowhere to replicate.  3 nodes with a replication factor of 3 means the blocks are already on that one node and there is nothing to replicate/move.     ... View more

@alexmc6   "*" is not a valid regex.  ".*" may be what you were going for...   I am not quite clear on your business requirement, but I think you are saying that you want to maybe create 10 replication schedules that will replicate chunks of 10 of your area databases... akin to this:   area([0-9]|1[0])_.*db     ... View more