Member since
11-13-2019
12
Posts
2
Kudos Received
0
Solutions
03-25-2022
12:59 AM
Hi @mszurap , Thank you for the solution, I guess this would help to audit HUE access, though I was I looking for CM Audits. For HUE I assume I need to add the parameter you mentioned in the following HUE configuration item. Hue Service Advanced Configuration Snippet (Safety Valve) for hue_safety_valve.ini Regarding to the preserve source client IP when login into CM console. I did log a ticket Cloudera Support and apparently there is JIRA OPSAPS-41615 was raised for this enhancement for CM server able to read XFF header. I don't have the access to the JIRA. I am not sure if you do. Thanks again for the solution for HUE. I will try to test it my environment and I will update you. Kind regards, Rama.
... View more
03-22-2022
10:34 AM
1 Kudo
@pandu2022 I have feeling that your kerberos principle doesn't exist on the KDC server. On the statestore server can you try running "kinit impala_test/<host_fqdn>@<REALM>". If you get prompt for password that indicate your principle is exist on KDC server. If you get error (not found in kerberos database) when you kinit, that indicate your principle doesn't exist on the KDC server. If the kinit works from catalog server, then most likely on statestore you are using different KDC server. In this case may be you should check your /etc/krb5.conf to make sure there are match. rgds, Ram.
... View more
03-22-2022
10:03 AM
1 Kudo
Hi @AzfarB I think it is quite common for modern linux kernel to move some inactive pages into swap to bring down memory footprint. As long your application or Solr not having any performance issue, I would not concern much on the swapping and I would just increase the threshold. rgds, Ram.
... View more
03-22-2022
09:48 AM
Hello All, We are connecting to CM console via F5 Load Balancer (Reverse Proxy). We are trying to enable X-Forwarded-For (XFF) in HTTP header, to get actual source client IP address from the CM Audits log. How can I enable CM server to read XFF HTTP header for the source client IP address instead of reading source IP address from layer 3? Thank you in advance.
... View more
Labels:
- Labels:
-
Cloudera Manager
06-24-2020
07:50 PM
If you execute "rmr /solr". you may encounter following authentication error. rmr /solr Authentication is not valid : /solr/security To workaround this you can use skipACL option, which found in the following site. https://www.programmersought.com/article/60861634876/ Note: This is workaround steps in Cloudera Manager. 1. Zookeeper->Configration->java Configuration Options for Zookeeper Server Add -Dzookeeper.skipACL=yes 2. Restart the zookeeper service Remember to revert the change and restart zookeeper after you manage to remove /solr rgds, Rama.
... View more