nickwallen commented on issue #1519: METRON-2265: Update Kerberos settings
URL: https://github.com/apache/metron/pull/1519#issuecomment-536046991
 
 
   +1 I was able to kerberize successfully.  I am finding that running 
kerberized in the development environment with HDP 3.1 is a bit unstable due to 
limited resources in the VM.  This has always been a problem and requires a bit 
of massaging. 
   
   Here are some brief notes on things I did to get this to work in our 
resource constrained dev environment.
   * Before you begin the kerberization wizard in Ambari stop all sensor stubs.
       ```
       systemctl stop sensor-stubs-bro
       systemctl stop sensor-stubs-yaf
       systemctl stop sensor-stubs-snort
       ```
   * Shut-down (or don't restart after kerberization) as many services as you 
can that are not directly in-use like YARN, MR, Profiler, Pcap, etc.  
   
   * Elasticsearch will fail the service check after kerberization.  Its status 
will remain "yellow" due to resource constraints.  This will prevent the other 
services from being started automatically.  
   
   * When this service check fails, just close the kerberos wizard and continue 
on. Then manually restart the HDP and Metron services that you want to test.  
Avoid starting anything that you don't need like YARN, etc.
   
   * Restart a single telemetry source to see telemetry flow end-to-end.  No 
need to run all 3 of the demo telemetry sources and this lightens the load a 
bit.
       ```
       systemctl start sensor-stubs-bro
       ```
   
   @tigerquoll Might any of this help explain what might have happened in your 
environment?
   

----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
us...@infra.apache.org


With regards,
Apache Git Services

Reply via email to