With the Ambari agents would ambari-agent reset <ambari server hostname> accomplish the same thing? Or does it do more than clear certificates? ... View more

Came to this page when troubleshooting... When a user opened a notebook this message would appear in the logs, they were still able to view notebooks in our configuration. ERROR [2017-11-30 00:03:36,714] ({qtp431687835-71} GetUserList.java[getUserList]:107) - Error retrieving User list from ActiveDirectory Realm javax.naming.AuthenticationException: [LDAP: error code 49 - 80090308: LdapErr: DSID-0C09042F, comment: AcceptSecurityCo ntext error, data 52e, v2580^@] Found a good tip here Conclusion is that when activeDirectoryRealm.principalSuffix is used activeDirectoryRealm.systemUsername should just be the simple username (e.g. ldap-reader) , rather than the fully distinguished name as shown in this setup guide. Also I found Credential Providers (jceks) aren't too hard to work with once you know about hadoop credential Usage: hadoop credential [generic options] [--help] [create <alias> [-provider provider-path]] [delete <alias> [-f] [-provider provider-path]] [list [-provider provider-path]] ... View more