Member since
10-19-2016
34
Posts
1
Kudos Received
1
Solution
10-22-2017
09:07 AM
Thanks man, thats indeed a complex application. My problem is Kafka is working, the topics are created, rangertagsync does not show any errors and still the tagsync between ranger and atlas is not working, meaning i dont see any Tags. Do you know how how can i troubleshoot ranger Tagsync precisely? Do you know which stations(components, ports, etc.) a Tag is taking frm ranger to Atlas and vice versa? I do havr the 2.5.3 with Atlas 0.7.0 Anything would help! Thank you, Regards, Normen
... View more
02-16-2017
10:51 AM
Some Comments in 2017:-) The Process i most of the time correct but i have a few more information on this: 1. Kerberos Cache Mechanisms: Depending on your line: [libdefaults]
default_ccache_name you have various odd behaviors, when not seeing your Kerberos Ticket in your Kerberos Ticket Manager Windows Client. You need to check out, which Cache Behavior suits your environment. default_ccache_name = FILE:%TEMP%\krb5cc
default_ccache_name = DIR:%TEMP%\krb5cc
default_ccache_name = API:krb5cc
default_ccache_name = MEMORY:krb5cc
default_ccache_name = MSLSA:krb5cc 2. Choosing the "workable" Kerberos Windows Client. Version 4.01 as of now demands its records from an DNS, if i understood that correctly. Since most Lab Environemnts don't have a full fledged DNS Server with Kerberos SRV Entries, which the client is looking for, switching to the older Version 3.22 seems appropriate. Also version 3.22 havs a lot more Functtions than the stripped down 4.01 Client - So it seems. Please check out the version for yourself. 3. Choosing the right Firefox Browser with the right gssapi Library. When modifying your Firefox Network.* directives, you need to make sure, that your Firefox Version (32bit/64Bit) matches EXACTLY the used gssapi Library -> gssapi32.dll / gssapi64.dll network.negotiate-auth.using-native-gsslib: false
network.negotiate-auth.gsslib;C:\09_Tools\MIT_Kerberos\bin\gssapi64.dll
It wont work otherwise and noone will tell you 😉 Additionally, when Hortonworks speak about to Kerberize the Hadoop Cluster, they actually forgot to mention that its really important to kerberize the client too. It does not magically happen. The Amount of Questions regarding "Kerberos - View doesnt work anymore, cant access my Site anymore. etc.) speaks for itself. @Hortonworks: Lot of room for more decent and more importantly End2End Documentation. Best Regards, Normen
... View more