thanks works for me HDP3.1.4 presto-340 ... View more

I'm not sure if it matters; but it seems there is a 1.5 hour difference between the 2 ps -ef -s ; it might be possible that somehow one of the hs2 instances have not shut down cleanly earlier; I would recommend to try shutting both hs2 down; and checking that they are both stopped by hand ; check that the configs are updated - and start both of them... ... View more

@arjun more If you have KDC and AD integrated, this simply means the account to which the keytab is related has been disabled, locked, expired, or deleted. The AD service account should NEVER expire. If not could you validate the below steps Make sure the [realms] and [domain_realms] entries in cat /etc/krb5.conf is correct. Validate the contents of these 2 files /var/kerberos/krb5kdc/kdc.conf , /var/kerberos/krb5kdc/kadm5.acl Check the hdfs prinncipal # kadmin.local Authenticating as principal hdfs-uktehdpprod/admin@EUROPE.ODCORP.NET with password. kadmin.local: listprincs hdfs* hdfs-uktehdpprod@EUROPE.ODCORP.NET kadmin.local: Get the correct prncipal for hdfs # klist -kt /etc/security/keytabs/hdfs.headless.keytab Keytab name: FILE:/etc/security/keytabs/hdfs.headless.keytab KVNO Timestamp Principal ---- ------------------- ------------------------------------------------------ 1 08/24/2017 15:42:23 hdfs-uktehdpprod@EUROPE.ODCORP.NET 1 08/24/2017 15:42:23 hdfs-uktehdpprod@EUROPE.ODCORP.NET 1 08/24/2017 15:42:23 hdfs-uktehdpprod@EUROPE.ODCORP.NET Try grabbing a valid Kerberos ticket # kinit -kt /etc/security/keytabs/hdfs.headless.keytab hdfs-uktehdpprod@EUROPE.ODCORP.NET Validate the avalability period # klist Ticket cache: FILE:/tmp/krb5cc_0 Default principal: hdfs-uktehdpprod@EUROPE.ODCORP.NET Valid starting Expires Service principal 10/04/2017 19:36:12 10/05/2017 19:36:12 krbtgt/EUROPE.ODCORP.NET@EUROPE.ODCORP.NET Please revert ... View more

Yes this helps a lot. Thanks for quick answer. ... View more

Hey Nitin, Changed the configs like, object class=user Distinguished name attribute=distinguishedName Group member attribute=member And re-synced users. It is working now. Thanks for help. ... View more

Thanks nshelke it explains everything. ... View more

@nshelke, Thanks for quick reply. I will try your suggestion. ... View more

@Jay SenSharma : I am using Ambari Version 2.4.2.0, i also tried with property "authentication.ldap.username.forceLowercase" in ambari.properties file still it's giving same error. Is there any other way to convert UPPERCASE or CaMeLcase into lower in Ambari version Version 2.4.2.0 except Ambari upgradation. ... View more

Why add yarn user directory in hdfs? ... View more