Member since
10-04-2021
8
Posts
1
Kudos Received
3
Solutions
My Accepted Solutions
Title | Views | Posted |
---|---|---|
2549 | 03-15-2022 05:32 PM | |
2593 | 03-14-2022 04:36 PM | |
4845 | 10-10-2021 10:48 PM |
03-15-2022
05:39 PM
Hello Team, We are facing some issue related to Hue KT renewal server not starting up. the KT renewal log saying k.urls' from '/opt/cloudera/parcels/CDH-6.3.4-1.cdh6.3.4.p0.6626826/lib/hue/desktop/libs/notebook/src/notebook/urls.py'> (notebook:notebook) ^notebook/> [16/Mar/2022 01:30:32 +0100] urls DEBUG Dynamic pattern: <RegexURLResolver <module 'dashboard.urls' from '/opt/cloudera/parcels/CDH-6.3.4-1.cdh6.3.4.p0.6626826/lib/hue/desktop/libs/dashboard/src/dashboard/urls.py'> (dashboard:dashboard) ^dashboard/> [16/Mar/2022 01:30:32 +0100] urls DEBUG Dynamic pattern: <RegexURLResolver <module 'kafka.urls' from '/opt/cloudera/parcels/CDH-6.3.4-1.cdh6.3.4.p0.6626826/lib/hue/desktop/libs/kafka/src/kafka/urls.py'> (kafka:kafka) ^kafka/> [16/Mar/2022 01:30:32 +0100] urls DEBUG Static pattern: <RegexURLPattern None ^static\/(?P<path>.*)$> [16/Mar/2022 01:30:32 +0100] kt_renewer INFO Keytab renewer not starting, no keytab configured I have done below action also : kadmin.local: modprinc -maxrenewlife 90day +allow_renewable hue/elara2-edge-u4-n01.dev.mlb.jupiter.nbyt.fr@DEV.MLB.JUPITER.NBYT.FR Principal "hue/elara2-edge-u4-n01.dev.mlb.jupiter.nbyt.fr@DEV.MLB.JUPITER.NBYT.FR" modified. kadmin.local: modprinc -maxrenewlife 90day krbtgt/DEV.MLB.JUPITER.NBYT.FR@DEV.MLB.JUPITER.NBYT.FR Principal "krbtgt/DEV.MLB.JUPITER.NBYT.FR@DEV.MLB.JUPITER.NBYT.FR" modified. kadmin.local: Can somone help to fix the issue?
... View more
Labels:
- Labels:
-
Cloudera Hue
-
Kerberos
-
Security
03-15-2022
05:32 PM
1 Kudo
The issue is resolved . The issue was related to password for Host.pem file
... View more
03-14-2022
04:36 PM
Hello , In our working machine , it is set under root : Working :- [root@elara-master-u2-n02 ~]# getfacl /opt/cloudera/security/x509/key/host.pem getfacl: Removing leading '/' from absolute path names # file: opt/cloudera/security/x509/key/host.pem # owner: root # group: root user::rw- group::r-- other::r-- [root@elara-master-u2-n02 ~]# Not working :- [root@elara2-master-u4-n02 83-hdfs-NAMENODE]# getfacl /opt/cloudera/security/x509/key/host.pem getfacl: Removing leading '/' from absolute path names # file: opt/cloudera/security/x509/key/host.pem # owner: root # group: root user::rw- group::r-- other::r-- [root@elara2-master-u4-n02 83-hdfs-NAMENODE]#
... View more
03-14-2022
08:43 AM
Hello Team, Our impala services are not starting : its failing with below log file: Although we have put all configuration file in Impala configuration. 4:18:23.781 PM INFO cc:370 Webserver: set_ssl_option: cannot open /opt/cloudera/security/x509/key/host.pem: error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad decrypt 4:18:23.782 PM INFO cc:124 Webserver: Could not start on address 0.0.0.0:8007 @ 0xb5e579 @ 0x11e5fec @ 0x110e053 @ 0xac6b1c @ 0x7ffa35134554 @ 0xb237e8 4:18:23.782 PM FATAL cc:59 Webserver: Could not start on address 0.0.0.0:8007
... View more
Labels:
- Labels:
-
Apache Impala
-
Cloudera Manager
10-11-2021
04:10 AM
Our customer looking to get logs of all jobs ran in a particular cluster . How to gather such information ? can someone help on this.
... View more
Labels:
- Labels:
-
Apache Hadoop
10-10-2021
10:48 PM
Hello , I applied below solution to do the fix. hdfs dfs -setfacl -R -m group:calapr01:r-x /tmp/logs/* hdfs dfs -setfacl -m default:group:calapr01:r-x /tmp/logs/hive/logs Seems I found this link helpful : https://my.cloudera.com/knowledge/ERROR-quotPermission-denied-userltusernamegt-accessREADEXECUTE?id=293648
... View more
10-04-2021
07:49 PM
Examples :
[ledapp3@leda-edge-u1-n01 ~]$ yarn logs -applicationId application_1616602302580_19604 >crash.log
WARNING: YARN_OPTS has been replaced by HADOOP_OPTS. Using value of YARN_OPTS.
Permission denied: user=ledapp3, access=READ_EXECUTE, inode="/tmp/logs/hive/logs/application_1616602302580_19604":hive:hadoop:drwxrwx---
[calapr01@callisto-edge-u2-n01 ~]$ yarn logs -applicationId application_1623858219829_386030 | head
WARNING: YARN_OPTS has been replaced by HADOOP_OPTS. Using value of YARN_OPTS.
Permission denied: user=calapr01, access=READ_EXECUTE, inode="/tmp/logs/hive/logs/application_1623858219829_386030":hive:hadoop:drwxrwx---
[gaiapr01@ganymede-edge-u2-n01 ~]$ yarn logs --applicationId application_1631641196769_7918 | head
WARNING: YARN_OPTS has been replaced by HADOOP_OPTS. Using value of YARN_OPTS.
21/10/01 15:23:44 INFO client.ConfiguredRMFailoverProxyProvider: Failing over to rm249
Permission denied: user=gaiapr01, access=EXECUTE, inode="/tmp/logs/hive":hive:hadoop:drwxrwx--
[gaiapr01@io-edge-u1-n01 ~]$yarn logs --applicationId=application_1626699923211_6165
WARNING: YARN_OPTS has been replaced by HADOOP_OPTS. Using value of YARN_OPTS.
21/10/01 15:27:05 INFO client.ConfiguredRMFailoverProxyProvider: Failing over to rm204
Permission denied: user=gaiapr01, access=EXECUTE, inode="/tmp/logs/hive":hive:hadoop:drwxrwx--
The problem seems to be that it is the user hive that creates such log files, and so the applicative accounts that launch the jobs cannot access it, and so we can not access it.
We need the applicative accounts to have Read permissions on those log files, otherwise we cannot figure out why our jobs failed since we do not have access to logs. We tried to check the ACL rights : [smohanty@io-edge-u1-n01 ~]$ hdfs dfs -getfacl /tmp/logs/hive/logs/ # file: /tmp/logs/hive/logs # owner: hive # group: hadoop user::rwx group::rwx group:dsi_moe_bigdata_prod:r-x mask::rwx other::--- default:user::rwx default:group::rwx default:group:dsi_moe_bigdata_prod:r-x default:mask::rwx default:other::--- [smohanty@io-edge-u1-n01 ~]$ [smohanty@callisto-edge-u2-n01 ~]$ hdfs dfs -getfacl /tmp/logs/hive/logs/ # file: /tmp/logs/hive/logs # owner: hive # group: hadoop user::rwx user:calapr00:rwx user:calapr01:rwx group::rwx group:dsi_moe_dev_bigdata:r-x mask::rwx other::--- default:user::rwx default:group::rwx default:group:dsi_moe_dev_bigdata:r-x default:mask::rwx default:other::--- [smohanty@callisto-edge-u2-n01 ~]$ Is there any ACL modification needed
... View more
Labels:
- Labels:
-
Apache Hadoop
-
Apache YARN
-
HDFS