Member since
08-10-2016
170
Posts
14
Kudos Received
6
Solutions
My Accepted Solutions
Title | Views | Posted |
---|---|---|
19695 | 01-31-2018 04:55 PM | |
4229 | 11-29-2017 03:28 PM | |
1846 | 09-27-2017 02:43 PM | |
2030 | 09-12-2016 06:36 PM | |
1949 | 09-02-2016 01:58 PM |
12-17-2023
06:03 PM
Saw the same issue and debug it by adding Java option -Dsun.security.krb5.debug=true In the logs, I found the IP address of KDC is shown instead of the hostname. That's suspicious. So I tried adding the IP -> hostname mapping of the KDC server in /etc/hosts. It resolved the issue. There could be other causes for your issue. The debug logs can show you more clues.
... View more
09-17-2018
06:52 PM
1 Kudo
@Matt Andruff Accessing Ambari, Atlas, Zeppelin would give a Annonymous access to it's UIs, and Authenticatin is managed by that component individually by default, meaning User can access the UIs using Knox and will have to provide logins configured for it. With Zeppelin 0.8 onwards which comes with HDP 3.0, there is a support for KnoxSSO which can be used to login to ZeppelinUI. Ref: https://zeppelin.apache.org/docs/0.8.0/setup/security/shiro_authentication.html#knox-sso https://issues.apache.org/jira/browse/ZEPPELIN-3090 https://knox.apache.org/books/knox-0-13-0/dev-guide.html#KnoxSSO+Integration Up till HDP 2.6.5 does not support Zeppelin KnoxSSO Integration.
... View more
04-08-2018
04:50 PM
Interestingly I did try "use" but zeppelin's SQL interpreter doesn't seem to track 'use database' between statements. Maybe that's an issue I should report. @bkosaraju I really appreciate the thorough answer.
... View more
03-14-2018
05:15 PM
@Kshitij Badani How do we get full write access to llap in HDP 2.6.3? I'm happy to do work to make this work, otherwise I'll have to tell my client to down grade back to 2.6.2. I'd prefer not to do that.
... View more
02-01-2018
04:17 PM
Can you check you hadoop.kms.authentication.kerberos.name.rules settings from kms-site.xml? Try "DEFAULT" if you have a customized setting that is invalid. You mentioned that the kms principle is changed. Can you also post your hadoop.kms.authentication.kerberos.principal and hadoop.security.auth_to_local settings from core-site.xml?
... View more
01-31-2018
04:55 PM
rebooted all services that had keytabs, and then I was able to connect. There error stopped. Thanks for the responses.
... View more
12-11-2017
02:30 PM
@Manfred PAUL Im my last reply I actually meant to include a link to this article: https://community.hortonworks.com/articles/110104/fixing-hiveserver-interactive-llap-failures-with-e.html
... View more
09-27-2017
06:57 PM
nm I eventually got it: cluster create --version 2.6 --description "Haoop Pilot" --password D@T@L@K3_2017 --enableKnoxGateway true --stackRepoId HDP-2.6 --stackBaseURL "http://public-repo-1.hortonworks.com/HDP/centos7/2.x/updates/2.6.0.3" --stack "HDP" --utilsBaseURL "http://public-repo-1.hortonworks.com/HDP-UTILS-1.1.0.21/repos/centos7" --utilsRepoId "HDP-UTILS-1.1.0.21" --os RedHat --ambariRepoBaseURL http://public-repo-1.hortonworks.com/ambari/centos6/2.x/updates/2.5.0.3 --ambariVersion 2.5.0.3-7 --ambariRepoGpgKey http://public-repo-1.hortonworks.com/ambari/centos6/RPM-GPG-KEY/RPM-GPG-KEY-Jenkins --verify true
Cluster creation started So I guess just a better error mesasge would be helpful saying that "--version" required.
... View more
09-20-2017
12:31 PM
Hi @Matt Andruff, Cloudbreak does not populate kerberos related settings into the gateway-site.xml config file of Knox: https://github.com/apache/knox/blob/master/gateway-release/home/conf/gateway-site.xml#L40 E.g gateway.hadoop.kerberos.secured is not set and krb5.conf is not set. Until this is fixed in Cloudbreak I recommend not to select the "Enable Knox Gateway" on Cloudbreak, but as a workaround you can add KNOX_SERVER into the blueprint and let Ambari configure Knox. Kind regards, Attila
... View more