@LeetKrew93    I am getting the exact same error while deploying the cm trial 7.4.4 for an encryption POC. How to get valid credentials for the repository?   KR, Sebastian ... View more

Mcafee also lists launch_container.sh under vulnerability which can be ignored as launching containers is part of a yarn architecture.   Please be kind to go through the below point to understand more about yarn:   1. Client/user submits a job request. 2. Resource manager will check the input splits and will throw an error if it cannot be computed. 3. On successful computation, the resource manager will call the job to submit the procedure. 4. It will then find a node manager where it can launch app master 5. App master process will check the input splits and will make mapper and reducer tasks(Task IDs are given at this point) 6. App master will do the computation and based on that it will request resources in form of a container that will contain memory and CPU as requested by the App master. 7. On receiving the request, the node manager will use "launch_container.sh" as well as a few other job-related inputs to successfully launch a container to be used for task execution.   This is the expected behavior and should be considered a false vulnerability. ... View more

Also Squirrel seems to be connecting to the dev cluster. It just times out when running a query such as "show databases".   If squirrel stays connected for a long time, I noticed that the query will eventually return results instead of timing out.   Per cloudera "https://docs.cloudera.com/documentation/enterprise/latest/topics/cdh_ig_hive_metastore_configure.html#concept_jsw_bnc_rp" It says that minimum 4 dedicated cores to HS2 and 4 for hive metastore. The server that hosts hs2 and metastore only has a total of 8 cores. Can this be a reason for the performance issue? Any help on this is much appreciated.   Thanks,   ... View more

Aditya     1) I dint get a chance to get the screen shot because the page is getting refresh and code gets deleted .  2 ) After writing the code the page gets refreshes and most recent paragraph gets wiped out after 10 seconds  so I dint have a chance to run code . As a workaround I tried to removing the parenthesis after count  the code was executed successfully ,with parenthesis count () the page refreshes and code gets wiped out . %sql SELECT COUNT * FROM   3) I see the below error in logs and couldn't see any other errors while adding the pargaraph. INFO [2021-06-03 16:58:03,697] xxxxxxxxxxxxxx} NotebookServer.java[onOpen]:150) - New connection from xxxxxxxxxxxxxx: xxxxxxxxxxxxxx INFO [2021-06-03 16:58:03,753] ({xxxxxxxxxxxxxx} NotebookServer.java[sendNote]:814) - New operation from xxxxxxxxxxxxxx: xxxxxxxxxxxxxx : test-xxxxxxxxxxxxxx : GET_NOTE : xxxxxxxxxxxxxx INFO [2021-06-03 16:58:03,759] xxxxxxxxxxxxxx} NotebookServer.java[sendNote]:814) - New operation from xxxxxxxxxxxxxx: xxxxxxxxxxxxxx : test-xxxxxxxxxxxxxx : GET_NOTE : xxxxxxxxxxxxxx WARN [2021-06-03 16:58:03,838] ({xxxxxxxxxxxxxx} KnoxJwtRealm.java[validateExpiration]:225) - SSO expiration date validation failed. WARN [2021-06-03 16:58:03,839] ({xxxxxxxxxxxxxx} KnoxJwtRealm.java[validateToken]:139) - Expiration time validation of JWT token failed. INFO [2021-06-03 16:58:03,934] xxxxxxxxxxxxxx} NotebookServer.java[onClose]:371) - Closed connection to xxxxxxxxxxxxxx: 36160. (1001) Shutdown WARN [2021-06-03 16:58:04,171] ({xxxxxxxxxxxxxx} KnoxJwtRealm.java[validateExpiration]:225) - SSO expiration date validation failed. WARN [2021-06-03 16:58:04,171] ({xxxxxxxxxxxxxx} KnoxJwtRealm.java[validateToken]:139) - Expiration time validation of JWT token failed. WARN [2021-06-03 16:58:04,183] ({xxxxxxxxxxxxxx} KnoxJwtRealm.java[validateExpiration]:225) - SSO expiration date validation failed. WARN [2021-06-03 16:58:04,183] ({xxxxxxxxxxxxxx} KnoxJwtRealm.java[validateToken]:139) - Expiration time validation of JWT token failed. WARN [2021-06-03 16:58:04,560] ({xxxxxxxxxxxxxx} KnoxJwtRealm.java[validateExpiration]:225) - SSO expiration date validation failed. WARN [2021-06-03 16:58:04,560] ({xxxxxxxxxxxxxx} KnoxJwtRealm.java[validateToken]:139) - Expiration time validation of JWT token failed.     ... View more

@kkhambadkone1 Has your issue been resolved? If so, please mark the appropriate reply as the solution, as it will make it easier for others to find the answer in the future.    ... View more

@fj5000 ,   Please provide below details for us to proceed :   1. CM/CDH version 2. Document you are following to implement KDC freeipa setup 3.  Refer https://www.freeipa.org/page/Troubleshooting/Kerberos and see if you can follow the suggestions coined in the doc   Regards, Aditya ... View more

Hello @LeetKrew93  Our organization requires that all log levels above DEBUG level need to be increased with the ISINFOENABLED judgment, because the official website only states that the DEBUG level does not need to be determined. It is not clear whether other levels need to be determined or not.Personally, I think such a judgment is superfluous.Please give me some advice. ... View more

@sweeny_here , Could you please provide below details :   1. Complete cloudera-scm-server logs 2. Steps/documentation followed to enable DB SSL 3. After enabling SSL on DB, did you import the DB SSL certificate to the CM truststore ?   Regards, Aditya ... View more

@VBo , Could you please let us know if you were able to start the Atlas Metadata server ? .   If not, please provide us application.log, operation logs to check further.   Regards, Aditya ... View more