Hi all WARN org.apache.hadoop.security.LdapGroupsMapping: Failed to get groups for user impala (retry=1) by javax.naming.CommunicationException: simple bind failed: ad.corporate:<port> [Root exception is javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target] as we are seeing the above error message with Sentry Service on Cloudera 5.14 after applying new root and intermediate certificates. from error message it clearly says certificate is missing. But which certificates is missing to debug the issue for java application do as below. for to debug the issue : we added to sentry under Java Options configuration " -Djavax.net.debug=ssl " and Examined the Sentry stdout.log from CM UI after the restart of affected services. Therefore under stdout.log it says certificate is missing. Therefore we need to import required certificate to the truststore appropriately or use latest version truststore. Try to keep this flag until the issue resolves.. Hope this helps for someone. Thanks, PR
... View more
