Member since
12-15-2021
12
Posts
0
Kudos Received
1
Solution
My Accepted Solutions
Title | Views | Posted |
---|---|---|
2003 | 12-12-2022 02:00 AM |
12-14-2022
12:56 AM
I want to know in ambari, how do you make these configurations separate? Because I now want to have several small kafka clusters in the kafka service, but I find that these configurations are globally unique.
... View more
Labels:
- Labels:
-
Apache Ambari
-
Apache Kafka
12-12-2022
02:00 AM
Thank you! After seeing your help, I checked this document and then solved the problem, thanks again. https://docs.cloudera.com/HDPDocuments/HDP3/HDP-3.1.0/fault-tolerance/content/configuring_ranger_admin_ha_with_ssl.html
... View more
12-12-2022
01:21 AM
when I enable HDFS Federation RBF, Hive tez job will throw error as follows: hive-server2.log: Caused by: org.apache.hadoop.hive.ql.metadata.HiveException: Hive Runtime Error while processing writable (null) org.apache.hadoop.security.AccessControlException: Client cannot authenticate via:[TOKEN, KERBEROS] I see https://issues.apache.org/jira/browse/TEZ-4032, and my tez version is 0.10.1,I didn't get any help from it. Is there someone who can help me?
... View more
Labels:
- Labels:
-
Apache Hive
-
Apache Tez
-
HDFS
05-06-2022
02:27 AM
I also met the same problem, how did you solve it? thank you
... View more
04-25-2022
12:39 AM
I set up a Haproxy service: listen ranger_admin bind 0.0.0.0:6080 mode tcp server ranger_node1:6080 server ranger_node2:6080 Then I refer to the document, https://docs.cloudera.com/HDPDocuments/HDP3/HDP-3.1.0/fault-tolerance/content/configuring_ranger_admin_ha_with_ssl.html from 32 steps to the end. I found the Ranger authorization invalid. Namenode log error: WARN client.RangerAdminRESTClient (RangerAdminRESTClient.java:getServicePoliciesIfUpdated(182)) - Error getting policies. secureMode=true, user=nn/node1@TEST.COM (auth:KERBEROS), response={"httpStatusCode":401,"statusCode":0}, serviceName=Captain_hadoop WARN client.RangerAdminRESTClient (RangerAdminRESTClient.java:getServiceTagsIfUpdated(365)) - Error getting tags. secureMode=true, user=nn/node1@TEST.COM (auth:KERBEROS), response={"httpStatusCode":401,"statusCode":0}, serviceName=Captain_hadoop Ranger admin access log error: "GET /service/plugins/secure/policies/download/Captain_hadoop?lastKnownVersion=8&lastActivationTime=1650799134085&pluginId=hdfs@node1-Captain_hadoop&clusterName=Captain&supportsPolicyDeltas=false HTTP/1.1" 401 - "-" "Java/1.8.0_202" May I ask how to solve this situation,Is there any kind person who can help? Thank you very much!
... View more
Labels:
- Labels:
-
Apache Ambari
-
Apache Ranger
-
Kerberos
04-25-2022
12:17 AM
Thank you for the attention, the Principal name is complete and correct. Impala Catalog and Impala Server will report an error: 9236 authentication.cc:177] SASL message (Kerberos (internal)): GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (Server krbtgt/statestore_hostname@TEST.COM not found in Kerberos database) When I set "-skip_internal_kerberos_auth=true", only Coordinator gets this error. When I set "-skip_internal_kerberos_auth=true" and "-skip_external_kerberos_auth=true", all components are fine, but then Kerberos authentication is lost.
... View more
04-25-2022
12:09 AM
Thank you for the attention, I try to regenerate the Kerberos credentials but get the same result. Enable impala in Ambari
... View more
04-12-2022
12:41 AM
Impala 3.4 When impala-shell is started, impalad.ERROR: authentication.cc:177] SASL message (Kerberos (external)): GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (No key table entry found for impala@node1) I don't understand why it got the wrong principal. I passed in the correct principal and keytab in the startup file. Can someone help me? Thank you very much.
... View more
Labels:
- Labels:
-
Apache Impala
-
Kerberos