Hi! I'm new to Cloudera, and is trying to get my cluster up and running with Kerberos(FreeIPA). I have one cluster that seems to work as it should. In this cluster I enabled kerberos through the enable kerberos wizard in cloudera manager. Then I created one additional cluster, were I tried to enable Kerberos through the API. /cm/config -> Setting the kerberos parameters commands/configureForKerberos -> Enabling kerberos Have verified in FreeIPA that all principals are created and that kerberos is enabled in the Cloudera Manager UI. Still I get a lot of permisson issues in the manual cluster. Yarn, JobHistoryServer: Error creating done directory:[hdfs://master3:8020/user/history/done] Caused by: org.apache.hadoop.security.AccessControlException: Permission denied: user=mapred, access=WRITE, inode="/":hdfs:supergroup:drwxr-xr-x HDFS: Bad : Canary test failed to create parent directory for /tmp/.cloudera_health_monitoring_canary_files. (Probably some permisson issue as well) HBASE: Same permisson issue, tried pushing the butt to create root directory, that fixed the issue. So, do anybody have an idea on what's being done in the wizard and what i'm not doing in code on a general basis, stepwize ? I forgot to stop the cluster before running API calls, could that cause any issues? Answers are much appreciated!
... View more