About nthomas

nthomas · ‎12-03-2021

You only need to restart the CM server after uploading the new license file, please refer: ==> https://docs.cloudera.com/documentation/enterprise/6/6.3/topics/cm_ag_licenses.html#cmug_topic_13_7__section_jt4_ynp_wr

nthomas · ‎11-01-2021

This needs to be done from LDAP/AD side. Create a group in LDAP for the users you want to give access to the CM and sync only that group in CM using the group filter.

nthomas · ‎10-28-2021

Hortonworks HDP 2.6.x and 3.x platforms support both Oracle JDK 8 and Open JDK 8 versions.Not validated, but supported as per doc You can use the latest version but make sure you refer: https://my.cloudera.com/knowledge/Cloudera-Customer-Advisory-Servers-with-Kerberos-enabled-stop?id=292027

nthomas · ‎10-28-2021

Hey follow the below doc: https://docs.cloudera.com/cdp-private-cloud-base/7.1.6/security-kerberos-authentication/topics/cm-security-external-authentication-ldap.html Administration > Settings > Authentication Backend Order > select the appropriate one eg: External Only (with emergency Administrator access)

nthomas · ‎10-26-2021

This is not a SSL related issue. For, RHEL 6.7, need RHEL 6 repo: https://archive.cloudera.com/p/cdh5/redhat/6/x86_64/cdh/5.16.2/ // you are using the RHEL7 repo. Can you check a few things from the YUM/OS side: 1. Are you behind firewall/proxy? 2. Are you able to access any other public repos? 3. Try, # yum clean all # yum repolist -v Important notice: The support for CDH 5.16.x ended on December 2020. refer: https://www.cloudera.com/legal/policies/support-lifecycle-policy.html

nthomas · ‎10-18-2021

Yes, if the version is supported. But as per https://www.cloudera.com/legal/policies/support-lifecycle-policy.html the support is already ended for HDP 2.6.5. So, I would recommend upgrading the cluster to CDP for the latest features and security fixes.

nthomas · ‎10-18-2021

I dont see any fix for your version. However, you can use the below workaround: If https is enabled which encrypts and authenticates the peer then it’s not an issue. Make sure dfs.http.policy in hdfs-site.xml = HTTPS_ONLY refer: https://my.cloudera.com/knowledge/TSB-2021-406-CVE-2020-9492-Hadoop-filesystem-bindings-ie?id=312034

nthomas · ‎09-20-2021

Hey if you are trying to create a CSR for SAN(subjectAltName), check the available parameters in OpenSSL: https://github.com/openssl/openssl/blob/master/apps/openssl.cnf Also, share the error you are getting.

nthomas · ‎06-02-2021

Try creating the file manually on the KT_renewer node with below permission and check again: -rw-r--r-- 1 hue hue 3712920 Jun 2 15:23 kt_renewer.log

nthomas · ‎03-04-2021

Do you have any proxy/firewall in your network? Have you added the details in the CM proxy configuration? I suspect a network/proxy issue.

Online	Offline
Last Visited	‎02-17-2022 03:48 AM

Member Since	‎06-19-2020 02:06 AM
Last Visited	‎02-17-2022 03:48 AM
Posts	20
Kudos received	3

Cloudera Community

Re: jdk1.8.0_311 compatibility

Re: does CVE-2020-9492 fixed in HDP 2.6.5

Re: How to secure Kafka Broker Server with a SSL C...

Re: Hue kt log error

Re: uploading license key to cloudera manager for ...

Re: Prevent users outside of LDAP filter from logg...

Re: jdk1.8.0_311 compatibility

Re: Prevent users outside of LDAP filter from logg...

Re: CDH 5.16.2 Installation in CentOS 6.7 problem ...

Re: does CVE-2020-9492 fixed in HDP 2.6.5

Re: does CVE-2020-9492 fixed in HDP 2.6.5

Re: How to secure Kafka Broker Server with a SSL C...

Re: Hue kt log error

Re: Valid license but no new Parcels available in ...