Member since
06-19-2020
20
Posts
3
Kudos Received
4
Solutions
My Accepted Solutions
Title | Views | Posted |
---|---|---|
1075 | 10-28-2021 06:14 AM | |
504 | 10-18-2021 02:12 AM | |
759 | 09-20-2021 04:12 AM | |
959 | 06-02-2021 03:30 AM |
12-03-2021
01:54 AM
You only need to restart the CM server after uploading the new license file, please refer: ==> https://docs.cloudera.com/documentation/enterprise/6/6.3/topics/cm_ag_licenses.html#cmug_topic_13_7__section_jt4_ynp_wr
... View more
11-01-2021
08:43 AM
This needs to be done from LDAP/AD side. Create a group in LDAP for the users you want to give access to the CM and sync only that group in CM using the group filter.
... View more
10-28-2021
06:14 AM
Hortonworks HDP 2.6.x and 3.x platforms support both Oracle JDK 8 and Open JDK 8 versions.Not validated, but supported as per doc You can use the latest version but make sure you refer: https://my.cloudera.com/knowledge/Cloudera-Customer-Advisory-Servers-with-Kerberos-enabled-stop?id=292027
... View more
10-28-2021
05:42 AM
Hey follow the below doc: https://docs.cloudera.com/cdp-private-cloud-base/7.1.6/security-kerberos-authentication/topics/cm-security-external-authentication-ldap.html Administration > Settings > Authentication Backend Order > select the appropriate one eg: External Only (with emergency Administrator access)
... View more
10-26-2021
01:29 AM
This is not a SSL related issue. For, RHEL 6.7, need RHEL 6 repo: https://archive.cloudera.com/p/cdh5/redhat/6/x86_64/cdh/5.16.2/ // you are using the RHEL7 repo. Can you check a few things from the YUM/OS side: 1. Are you behind firewall/proxy? 2. Are you able to access any other public repos? 3. Try, # yum clean all # yum repolist -v Important notice: The support for CDH 5.16.x ended on December 2020. refer: https://www.cloudera.com/legal/policies/support-lifecycle-policy.html
... View more
10-18-2021
03:19 AM
Yes, if the version is supported. But as per https://www.cloudera.com/legal/policies/support-lifecycle-policy.html the support is already ended for HDP 2.6.5. So, I would recommend upgrading the cluster to CDP for the latest features and security fixes.
... View more
10-18-2021
02:12 AM
I dont see any fix for your version. However, you can use the below workaround: If https is enabled which encrypts and authenticates the peer then it’s not an issue. Make sure dfs.http.policy in hdfs-site.xml = HTTPS_ONLY refer: https://my.cloudera.com/knowledge/TSB-2021-406-CVE-2020-9492-Hadoop-filesystem-bindings-ie?id=312034
... View more
09-20-2021
04:12 AM
1 Kudo
Hey if you are trying to create a CSR for SAN( subjectAltName ), check the available parameters in OpenSSL: https://github.com/openssl/openssl/blob/master/apps/openssl.cnf Also, share the error you are getting.
... View more
06-02-2021
03:30 AM
2 Kudos
Try creating the file manually on the KT_renewer node with below permission and check again: -rw-r--r-- 1 hue hue 3712920 Jun 2 15:23 kt_renewer.log
... View more
03-04-2021
09:03 AM
Do you have any proxy/firewall in your network? Have you added the details in the CM proxy configuration? I suspect a network/proxy issue.
... View more
02-24-2021
10:48 PM
Yeah, this should work. Also, if you want to verify the complete configuration, I would recommend contacting Cloudera technical support: ==> https://my.cloudera.com/faq/support.html
... View more
02-22-2021
11:01 PM
Are you able to Decommission the DN or NM? refer: https://docs.cloudera.com/HDPDocuments/Ambari-2.7.3.0/managing-and-monitoring-ambari/content/amb_decommission_a_nodemanager.html https://docs.cloudera.com/HDPDocuments/Ambari-2.7.3.0/managing-and-monitoring-ambari/content/amb_decommission_a_datanode.html To delete the host: https://docs.cloudera.com/HDPDocuments/Ambari-2.6.1.5/bk_ambari-operations/content/deleting_a_host_from_a_cluster.html Note: Turn off host Maintenance Mode, before deleting the host
... View more
02-19-2021
01:28 AM
Have you checked: https://docs.cloudera.com/cdp-private-cloud/latest/upgrade-hdp/topics/amb-hdp-cdp-upg.html
... View more
02-19-2021
01:20 AM
Configuration should be like this: Realm Name: ABC.EXAMPLE.COM domain_realm: .example.com = ABC.EXAMPLE.COM example.com = ABC.EXAMPLE.COM Usually, the realm name should be configured when you set up AD. I would recommend checking with your AD team to get the mapping details. Also, time should be synced.
... View more
02-18-2021
01:01 AM
By default, the name of the realm is taken to be the DNS domain name of the server in all capital letters. foo.example.org → EXAMPLE.ORG
foo.example.com → EXAMPLE.COM
foo.hq.example.com → HQ.EXAMPLE.COM In some configurations, this will be sufficient, but in others, the realm name which is derived will be the name of a non-existent realm. In these cases, the mapping from the server's DNS domain name to the name of its realm must be specified in the domain_realm section of the client system's krb5.conf. For example: [domain_realm]
.example.com = EXAMPLE.COM
example.com = EXAMPLE.COM The configuration specifies two mappings. The first mapping specifies that any system in the example.com DNS domain belongs to the EXAMPLE.COM realm. The second specifies that a system with the exact name example.com is also in the realm Also, time should be correct/synced in all servers.
... View more