@mqureshi, @amarnath reddy pappu , thanks, I've use the steps in enable-https-for-hdfs , and done the following On nwk6 (Node 6, where the nameNode is Installed) 1) Generate the jks file 2) Get the certificate signed (using OpenSSL) 3) make entries in core-site.xml, hdfs-site.xml 4) updated the files -> ssl-server.xml, ssl-client.xml 5) re-started HDFS service 6) have a questions about this next step -> ---------------------------------------------- Step7: Make sure you import the CA root to Ambari-server by running "ambari-server setup-security" ----------------------------------------- Couple of questions on this -- a) when i run -> ambari-server setup-security, i see options given below ... So, do i use the option 5 i.e. Import the certificate to the truststore ? b) Pls. note -> the truststore & keystores were create on nwk6 (where nameNode is installed), while ambari is installed on nwk7. So, do the keystore & truststore need to be copied onto nwk7 Or re-created ? [root@nwk2-bdp-hadoop-07 tmp]# ambari-server setup-security Using python /usr/bin/python
Security setup options...
===========================================================================
Choose one of the following options:
[1] Enable HTTPS for Ambari server.
[2] Encrypt passwords stored in ambari.properties file.
[3] Setup Ambari kerberos JAAS configuration.
[4] Setup truststore.
[5] Import certificate to truststore.
===========================================================================
Enter choice, (1-5): Pls. note - while the the above steps (except for ambari-server setup-security) have gone through fine, the https url (for NameNode UI, https://<nwk06>:50470) is not working.
... View more
