Member since
02-23-2021
17
Posts
0
Kudos Received
0
Solutions
11-26-2021
01:36 AM
@arunek95 Hi We tried the same steps which are in link but spnego keytab not generated after restarting cloudera manager . Please suggest some workaround for same.
... View more
11-25-2021
01:11 AM
Hi Team, I searched on web for spengo keytab in cloudera but did not get any proper result to create this keytab and configuration in cloudera hadoop server. Please help for same and provide link or steps to do same . Thanks in advance!!!
... View more
Labels:
09-30-2021
10:38 PM
Hi , I have kerberos enabled hdp hadoop cluster and also I have enabled SSL to same hadoop cluster . but after that Hadoop cluster url is not accessible with 8443 port . url - https://<clusterip>:8443/ I want to know that - Kerberos and SSL both works together or not in hadoop server ? please reply asap. Thanks in advance.
... View more
08-24-2021
09:44 PM
@Shelton I have already executed steps that you have provided in the link but still ambari services rest api url is not kerberized . is there any other configuration required ? or ambari services rest api url do not support kerberos authentication ?
... View more
08-22-2021
11:30 PM
@Shelton Enabling kerberos we have to set properties as below to HDFS,YARN etc etc . hadoop.security.authentication kerberos hadoop.security.authorization true hadoop.http.authentication.simple.anonymous.allowed false after configuring kerberos properly then when we hit the url of any component of hadoop server on browser then will get HTTP ERROR 403 . REST api url pattern - http://host:8080/api/v1/clusters/<cluster_name>/services/<service_name> but when we hit the same service rest api url on browser then we could see the response on browser details are as below - { "href" : "http://host:8080/api/v1/clusters/cluster_name/services/HDFS", "ServiceInfo" : { "cluster_name" : "<cluster_name>", "maintenance_state" : "OFF", "service_name" : "HDFS", "state" : "STARTED" }, "alerts_summary" : { "CRITICAL" : 0, "MAINTENANCE" : 0, "OK" : 26, "UNKNOWN" : 1, "WARNING" : 0 }, "alerts" : [ .......................... but response should not be display on browser if url is kerberized and we should get http error 403 . so here we want to kerberize rest api url . please help for same.
... View more
08-20-2021
12:19 AM
I have a hadoop server which namenode, datanode , YARN component etc are spnego kerberized and when we hit their url's on web we get as below - url - http://host:50070/jmx?qry=Hadoop:* here 50070 is namenode port output : HTTP ERROR 403
Problem accessing /index.html. Reason:
GSSException: Defective token detected (Mechanism level: GSSHeader did not above response on web indicates that url is kerberized. I tried to enable spnego kerberos for ambari with using command "ambari-server setup-security" and completed kerberos configuration. but when hit the url of ambari services rest api then getting proper output - url - http://host:8080/api/v1/clusters/cluster_name/services/HDFS I could see the proper output for above url on web . why both url's output is not same , it should be same if enabled kerberos . please help and thanks in advance!!!
... View more
Labels:
08-17-2021
02:31 AM
Please help if anyone knows about it . Thanks in advance!!!
... View more
08-10-2021
11:56 PM
and below two properties are found in ambari.properties file - kerberos.check.jaas.configuration=true kerberos.keytab.cache.dir=/var/lib/ambari-server/data/cache
... View more
08-10-2021
11:54 PM
@niparmar some rules are defined in hadoop.security.auth_to_local property. and some property as below - hadoop.security.authentication kerberos hadoop.security.authorization true hadoop.http.authentication.simple.anonymous.allowed false I am posting it in regards hdfs configuration . Please suggest what we missed here.
... View more
08-10-2021
05:58 AM
@niparmar Hi I have kerberos enabled hadoop server so its name node , datanode yarn mapreduce are kerberos enabled but its service url is not kerberos enabled as I can hit that url on web and get the output on web but if it is kerberos enabled then it should not be hit on web . while running below command getting :- curl --negotiate -u: 'http://ambari-host:8080/api/v1/clusters/clusterabc/services/HDFS output : { "status": 403, "message": "Authentication required" } Please suggest some solution for it . Thanks in advance.
... View more