How can we mask passwords on xml configuration files in HDP for instance, the ranger-policymgr-ssl.xml file? ... View more

The thrift server stops responding and Accumulo crashes. The log shows a lot of these error messages but doesn't really point to what the issue is. Anyone familiar with this? ERROR: Error occurred during processing of message. java.lang.RuntimeException: org.apache.thrift.transport.TTransportException at org.apache.thrift.transport.TSaslServerTransport$Factory.getTransport(TSaslServerTransport.java:219) at org.apache.accumulo.core.rpc.UGIAssumingTransportFactory$1.run(UGIAssumingTransportFactory.java:51) at org.apache.accumulo.core.rpc.UGIAssumingTransportFactory$1.run(UGIAssumingTransportFactory.java:48) at java.security.AccessController.doPrivileged(Native Method) at javax.security.auth.Subject.doAs(Subject.java:360) at org.apache.hadoop.security.UserGroupInformation.doAs(UserGroupInformation.java:1637) at org.apache.accumulo.core.rpc.UGIAssumingTransportFactory.getTransport(UGIAssumingTransportFactory.java:48) at org.apache.thrift.server.TThreadPoolServer$WorkerProcess.run(TThreadPoolServer.java:208) at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142) at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617) at org.apache.accumulo.fate.util.LoggingRunnable.run(LoggingRunnable.java:35) at java.lang.Thread.run(Thread.java:745) Caused by: org.apache.thrift.transport.TTransportException ... View more

Dumped the current listing (Ambari > Admin > Service Accounts; in prep for physical deployment, and need to register these with a central service (but not AD/LDAP). Currently on HDP 2.3.0 and Ambari 2.1.1, but will be deploying to latest & greatest. Questions: 1) Can "Proxyuser Group" be redefined to something other than "users?" 2) We have all of our 'human' users in group 'hadoop' on the PoC cluster. Is this a requirement? I'd prefer to have only service accounts in the hadoop group if possible. 3) We do not currently have Ranger installed, but plan to deploy. What service account(s) and/or group(s) will this service require? ... View more