Thanks Jay Kumar SenSharma for your comments, I have followed more or less the same steps are you provided but still gets ldap connection error. I have pasted my steps below, hope to get feedback [ambari@hadoop /]$ sudo keytool -import -file /etc/pki/ca-trust/source/anchors/activedirectory.cer -alias adcert -keystore /var/lib/ambari-server/keys/cacerts.jks Enter keystore password: [ambari@hadoop /]$ sudo ambari-server stop Using python /usr/bin/python
Stopping ambari-server
Waiting for server stop...
Ambari Server stopped [ambari@hadoop /]$ sudo ambari-server setup-security
Using python /usr/bin/python
Security setup options...
=========================================================================== Choose one of the following options: [1] Enable HTTPS for Ambari server. [2] Encrypt passwords stored in ambari.properties file. [3] Setup Ambari kerberos JAAS configuration. [4] Setup truststore. [5] Import certificate to truststore.
=========================================================================== Enter choice, (1-5): 4 Do you want to configure a truststore [y/n] (y)? y The truststore is already configured. Do you want to re-configure the truststore [y/n] (y)? y TrustStore type [jks/jceks/pkcs12] (jks): jks Path to TrustStore file :/var/lib/ambari-server/keys/cacerts.jks Password for TrustStore: Re-enter password: Ambari Server 'setup-security' completed successfully. [ambari@hadoop /]$ sudo ambari-server setup-security
Using python /usr/bin/python
Security setup options...
=========================================================================== Choose one of the following options: [1] Enable HTTPS for Ambari server. [2] Encrypt passwords stored in ambari.properties file. [3] Setup Ambari kerberos JAAS configuration. [4] Setup truststore. [5] Import certificate to truststore.
=========================================================================== Enter choice, (1-5): 5 Do you want to configure a truststore [y/n] (y)? y Do you want to import a certificate [y/n] (y)? y Please enter an alias for the certificate: adcert Enter path to certificate: /etc/pki/ca-trust/source/anchors/activedirectory.cer Ambari Server 'setup-security' completed successfully. [ambari@hadoop /]$ sudo ambari-server start
... View more
