Member since
09-23-2013
238
Posts
72
Kudos Received
28
Solutions
My Accepted Solutions
Title | Views | Posted |
---|---|---|
1810 | 08-13-2019 09:10 AM | |
3186 | 07-22-2015 08:51 AM | |
7104 | 06-29-2015 06:43 AM | |
4950 | 06-02-2015 05:17 PM | |
20777 | 05-23-2015 04:48 AM |
01-16-2023
11:44 PM
@techfriend this can be resolved after modifiying the principle. WARNING: no policy specified for mapred/ip-172-31-46-169.us-west-2.compute.internal@HADM.RU; defaulting to no policy
add_principal: Principal or policy already exists while creating "mapred/ip-172-31-46-169.us-west-2.compute.internal@HADM.RU".
+ '[' 604800 -gt 0 ']'
++ kadmin -k -t /var/run/cloudera-scm-server/cmf5922922234613877041.keytab -p cloudera-scm/admin@HADM.RU -r HADM.RU -q 'getprinc -terse mapred/ip-172-31-46-169.us-west-2.compute.internal@HADM.RU'
++ tail -1
++ cut -f 12
+ RENEW_LIFETIME=0
+ '[' 0 -eq 0 ']'
+ echo 'Unable to set maxrenewlife'
+ exit 1 modprinc -maxrenewlife 90day +allow_renewable mapred/ip-172-31-46-169.us-west-2.compute.internal@HADM.RU
... View more
11-28-2021
09:22 PM
If you are facing issue Clock offset issue then there will be problem with your ntp is not in sync.
To resolve follow some commands
Check in which host it is giving problem go under that host through CLI and
1. systemctl status ntpd.service (For checking the status, if its not working the it showing Inactive message)
2. route -n copy the ntp server ip address (You will find under Destination column)
3. ntpdate <ntp server ip address>
4. systemctl start ntpd.service (for starting & syncing your host, after firing wait for sometime)
5. ntpstat (for checking whether it is synchronized or not it should be in synchronized)
after performing above steps your Clock offset issue will get resolved.
Regard,
... View more
09-23-2021
07:09 AM
1 Kudo
They will be in the process directory for the component. For example: hive.keytab is in:
/var/run/cloudera-scm-agent/process/*-hive_on_tez-HIVESERVER2
... View more
02-21-2020
02:58 AM
Try Setting up "udp" for the Kerberos Clients. /etc/krb5.conf
[libdefaults]
udp_preference_limit = 1
... View more
11-05-2019
07:09 AM
Hi, I have got a similar issue. My file host is the following for all hosts in my cluster: 127.0.0.1 localhost.localdomain localhost 13.48.140.49 master.sysdatadigital.it master 13.48.181.38 slave1.sysdatadigital.it slave1 13.48.185.39 slave2.sysdatadigital.it slave2 13.53.62.160 slave3.sysdatadigital.it slave3 13.48.18.0 slave4.sysdatadigital.it slave4 What did you change exactly? Many thanks, M
... View more
08-13-2019
09:10 AM
What version of CM/CDH are you using? Do you have an enterprise licensee (its required for Auto-TLS). From the documentation here: https://www.cloudera.com/documentation/enterprise/latest/topics/auto_tls.html What section/step of the documentation are you on? All that step did (touching the database) was disable TLS in the CM config...
... View more
03-28-2019
08:46 AM
Frequent pauses in the JVM by the Garbage Collector indicate the heap memory settings are too low. Please increase the CM -> Cloudera Management Service -> Configuration -> Scope: Service Monitor -> Category: Resource Management -> Java Heap Size of Service Monitor in Bytes and Java Heap Size of Service Monitor in Bytes configuration property values accordingly. The Service Monitor Requirements documentation chapter has guidance for the values to choose.
... View more
01-14-2019
10:23 PM
Very well explained, thanks for the post~
... View more
12-09-2018
09:13 PM
Can somebody please help ? kinit: Failed to store credentials: Internal credentials cache error (filename: /hue_krb5_ccache) while getting initial credentials [09/Dec/2018 21:06:24 -0800] kt_renewer INFO Reinitting kerberos retry attempt 2 from keytab /bin/kinit -k -t /run/cloudera-scm-agent/process/450-hue-KT_RENEWER/hue.keytab -c /hue_krb5_ccache hue/kabo1.unraveldatalab.com@unravel.COM [09/Dec/2018 21:06:24 -0800] kt_renewer ERROR Couldn't reinit from keytab! `kinit' exited with 1. kinit: Failed to store credentials: Internal credentials cache error (filename: /hue_krb5_ccache) while getting initial credentials [09/Dec/2018 21:06:24 -0800] kt_renewer ERROR FATAL: max_retries of 3 reached. Exiting... [09/Dec/2018 21:06:28 ] settings INFO Welcome to Hue 3.9.0 [09/Dec/2018 21:06:31 -0800] __init__ INFO Couldn't import snappy. Support for snappy compression disabled. [09/Dec/2018 21:06:31 -0800] kt_renewer INFO Reinitting kerberos retry attempt 0 from keytab /bin/kinit -k -t /run/cloudera-scm-agent/process/450-hue-KT_RENEWER/hue.keytab -c /hue_krb5_ccache hue/kabo1.unraveldatalab.com@unravel.COM [09/Dec/2018 21:06:31 -0800] kt_renewer ERROR Couldn't reinit from keytab! `kinit' exited with 1. kinit: Failed to store credentials: Internal credentials cache error (filename: /hue_krb5_ccache) while getting initial credentials [09/Dec/2018 21:06:34 -0800] kt_renewer INFO Reinitting kerberos retry attempt 1 from keytab /bin/kinit -k -t /run/cloudera-scm-agent/process/450-hue-KT_RENEWER/hue.keytab -c /hue_krb5_ccache hue/kabo1.unraveldatalab.com@unravel.COM [09/Dec/2018 21:06:34 -0800] kt_renewer ERROR Couldn't reinit from keytab! `kinit' exited with 1. kinit: Failed to store credentials: Internal credentials cache error (filename: /hue_krb5_ccache) while getting initial credentials [09/Dec/2018 21:06:37 -0800] kt_renewer INFO Reinitting kerberos retry attempt 2 from keytab /bin/kinit -k -t /run/cloudera-scm-agent/process/450-hue-KT_RENEWER/hue.keytab -c /hue_krb5_ccache hue/kabo1.unraveldatalab.com@unravel.COM [09/Dec/2018 21:06:37 -0800] kt_renewer ERROR Couldn't reinit from keytab! `kinit' exited with 1. kinit: Failed to store credentials: Internal credentials cache error (filename: /hue_krb5_ccache) while getting initial credentials [09/Dec/2018 21:06:37 -0800] kt_renewer ERROR FATAL: max_retries of 3 reached. Exiting... \ [root@kabo1 ~]# cat /etc/krb5.conf [libdefaults] default_realm = unravel.COM dns_lookup_kdc = false dns_lookup_realm = false ticket_lifetime = 24h renew_lifetime = 7d forwardable = true default_tkt_enctypes = aes256-cts-hmac-sha1-96 default_tgs_enctypes = aes256-cts-hmac-sha1-96 permitted_enctypes = aes256-cts-hmac-sha1-96 allow_weak_crypto = true udp_preference_limit = 1 kdc_timeout = 3000 [realms] unravel.COM = { kdc = kabo1.unraveldatalab.com admin_server = kabo1.unraveldatalab.com } [domain_realm] [root@kabo1 ~]# cat /var/kerberos/krb5kdc/kdc.conf [kdcdefaults] kdc_ports = 88 kdc_tcp_ports = 88 [realms] EXAMPLE.COM = { #master_key_type = aes256-cts max_renewable_life = 7d 0h 0m 0s acl_file = /var/kerberos/krb5kdc/kadm5.acl dict_file = /usr/share/dict/words admin_keytab = /var/kerberos/krb5kdc/kadm5.keytab supported_enctypes = aes256-cts:normal aes128-cts:normal des3-hmac-sha1:normal arcfour-hmac:normal camellia256-cts:normal camellia128-cts:normal des-hmac-sha1:normal des-cbc-md5:normal des-cbc-crc:normal default_principal_flags = +renewable }
... View more
09-04-2018
04:08 PM
LOL... just checked the dates. It has been quite a while since Neta Je posted this (09-03-2015!) I just saw your response, @Koti_Karri and followed along ;-).
... View more