Member since
06-04-2019
1
Post
0
Kudos Received
0
Solutions
06-04-2019
12:33 PM
We have one local ambari HDP clusters 2.6.0.0 which has been enabled kerberos and also Ranger, Kafka also is installed as the component. We used this local Ambari Infra SolrCloud as Range Audit. At the beginning, the Ranger Audit log is shown correctly, but after a while, we got error like the below: "Error running solr query, please check solr configs. Could not find a healthy node to handle the request." Now per the suggestion from Google, I got to know the collection "ranger_audits" need to be deleted and restart the Ranger. Since we have enabled the kerberos in this Ambari Cluster, now follow the link below to try to delete the collection: https://community.hortonworks.com/articles/96618/how-to-clean-up-recreate-collections-on-ambari-inf.html but after the Kinit is successfully and run the below CURL to try to delete collection: >>curl -i -v --negotiate -u : "http://<My_Host_FQDN>:8886/solr/admin/collections?action=DELETE&name=ranger_audits" I got the below exceptions: <response> <lst name="responseHeader"><int name="status">500</int><int name="QTime">0</int></lst><lst name="error"><str name="msg">KeeperErrorCode = AuthFailed for /overseer/collection-queue-work/qnr-</str><str name="trace">org.apache.zookeeper.KeeperException$AuthFailedException: KeeperErrorCode = AuthFailed for /overseer/collection-queue-work/qnr- at org.apache.zookeeper.KeeperException.create(KeeperException.java:123) at org.apache.zookeeper.KeeperException.create(KeeperException.java:51) at org.apache.zookeeper.ZooKeeper.create(ZooKeeper.java:783) at org.apache.solr.common.cloud.SolrZkClient$9.execute(SolrZkClient.java:380) at org.apache.solr.common.cloud.SolrZkClient$9.execute(SolrZkClient.java:377) at org.apache.solr.common.cloud.ZkCmdExecutor.retryOperation(ZkCmdExecutor.java:60) at org.apache.solr.common.cloud.SolrZkClient.create(SolrZkClient.java:377) at org.apache.solr.cloud.OverseerTaskQueue.createData(OverseerTaskQueue.java:168) at org.apache.solr.cloud.OverseerTaskQueue.offer(OverseerTaskQueue.java:189) at org.apache.solr.handler.admin.CollectionsHandler.handleResponse(CollectionsHandler.java:255) at org.apache.solr.handler.admin.CollectionsHandler.handleRequestBody(CollectionsHandler.java:195) at org.apache.solr.handler.RequestHandlerBase.handleRequest(RequestHandlerBase.java:155) at org.apache.solr.servlet.HttpSolrCall.handleAdminRequest(HttpSolrCall.java:660) at org.apache.solr.servlet.HttpSolrCall.call(HttpSolrCall.java:441) at org.apache.solr.servlet.SolrDispatchFilter.doFilter(SolrDispatchFilter.java:257) at org.apache.solr.servlet.SolrDispatchFilter.doFilter(SolrDispatchFilter.java:208) at org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1652) at org.eclipse.jetty.servlet.ServletHandler.doHandle(ServletHandler.java:585) at org.eclipse.jetty.server.handler.ScopedHandler.handle(ScopedHandler.java:143) at org.eclipse.jetty.security.SecurityHandler.handle(SecurityHandler.java:577) at org.eclipse.jetty.server.session.SessionHandler.doHandle(SessionHandler.java:223) at org.eclipse.jetty.server.handler.ContextHandler.doHandle(ContextHandler.java:1127) at org.eclipse.jetty.servlet.ServletHandler.doScope(ServletHandler.java:515) at org.eclipse.jetty.server.session.SessionHandler.doScope(SessionHandler.java:185) at org.eclipse.jetty.server.handler.ContextHandler.doScope(ContextHandler.java:1061) at org.eclipse.jetty.server.handler.ScopedHandler.handle(ScopedHandler.java:141) at org.eclipse.jetty.server.handler.ContextHandlerCollection.handle(ContextHandlerCollection.java:215) at org.eclipse.jetty.server.handler.HandlerCollection.handle(HandlerCollection.java:110) at org.eclipse.jetty.server.handler.HandlerWrapper.handle(HandlerWrapper.java:97) at org.eclipse.jetty.server.Server.handle(Server.java:499) at org.eclipse.jetty.server.HttpChannel.handle(HttpChannel.java:310) at org.eclipse.jetty.server.HttpConnection.onFillable(HttpConnection.java:257) at org.eclipse.jetty.io.AbstractConnection$2.run(AbstractConnection.java:540) at org.eclipse.jetty.util.thread.QueuedThreadPool.runJob(QueuedThreadPool.java:635) at org.eclipse.jetty.util.thread.QueuedThreadPool$3.run(QueuedThreadPool.java:555) at java.lang.Thread.run(Thread.java:745) </str><int name="code">500</int></lst> </response> Seems the Zookeeper authorization is failed? Here is the what I got: [zk: <ZK_HOST>:2181(CONNECTED) 5] getAcl /infra-solr/overseer 'sasl,'infra-solr : cdrwa 'world,'anyone : r But I am thinking seems we can NOT got authorization with /etc/security/keytabs/ambari-infra-solr.service.keytab & Zookeeper keytab at the same time? Then How can I got authorization to delete this collection? Thanks.
... View more
Labels:
- Labels:
-
Apache Ranger
-
Apache Solr