Though one can do the manual intervention to fix the under replicated blocks, HDFS has matured a lot and  the NameNode will take care of fixing the under replicated blocks on its own. The drawback for doing the manual step is that it may add additional load to the NameNode Operations and may cause performance degradation with existing jobs. So if you plan to do manually you may do it at least business hours or over the weekend. ... View more

Yes it's a big SIGH!!! I've tried 10s and 20s of different connection strings from trying to install older verison of Python (3.7.4) so I can install sasl and pyhive and basically everything I could find out there but it's still not working yet.    So, basically my setup is HIVE on Azure and the DB connections have server/host something like this "<server>.azurehdinsight.net" with port of 443. I'm using DBeaver to connect to the HIVE db and it's using JDBC URL - complete URL is something like this "jdbc:hive2://<server>.azurehdinsight.net:443/default;transportMode=http;ssl=true;httpPath=/hive2", so can someone please help me out with what packages I need in order for me to successfully query HIVE from Python?    @pudnik26354 - can you please post what worked for you? Thank you so much. ... View more

@Robert Levas Hello, I'm facing a similar issue with Hue. I've detailedly explained my question here: https://community.hortonworks.com/questions/147826/failed-to-access-filesystem-root-through-hue-ui.html. The output of $klist with hue user is mentioned in klist.png. Could you please help me to resolve this issue? I'll be really grateful. ... View more

Interesting, not come across this before. Try checking the permissions of the keyadmin user in Ranger UI? Does it have get permissions? Are you editing the Ranger KMS Ambari configs in this 1-2 day period? ... View more

Yes, adding these properties solved the issue for HDFS plugin. Now I will check rest of the plugins. ... View more

No you don't have to install a local KDC, you have to configure SSSD to connect to AD for linux user authentication. As said AD normally provides kerberos tickets automatically. To create a new service user in AD you best talk to your AD team. Once you have created a hue service user ( in the same group as the hdfs etc. users ) you should be able to export the keytab. The guide would be for a standard KDC. Which is also an option, however if you want a standard KDC then you need to add a one way trust from the AD to your local KDC. ... View more

For the Hue example, you have to create a Hue user in AD and then create a keytab file for Hue. This is where I am stuck. How do you create the keytab file for the Hue user? ... View more

We didn't used any regex for "sAMAccountName": Looklike your AD configured sAMAccountName as UPN. See following notes may helpful to differentiate both properties. http://www.morgantechspace.com/2014/04/samaccountname-vs-userprincipalname.html ... View more