Cloudera Manager 7.7.1 Cumulative hotfix 15

Know more about the Cloudera Manager 7.7.1 cumulative hotfixes 15.

This cumulative hotfix was released on October 2, 2023.

Following are the list of known issues and their corresponding workarounds that are shipped for Cloudera Manager 7.7.1 CHF15 (version: 7.7.1-h16-45582990):
OPSAPS-68689: Unable to emit the LDAP Bind password in core-site.xml for client configurations

If the CDP cluster has LDAP group to OS group mapping enabled, then applications running in Spark or Yarn would fail to authenticate to the LDAP server when trying to use the LDAP bind account during the LDAP group search.

This is because the LDAP bind password was not passed to the /etc/hadoop/conf/core-site.xml file. This was intended behavior to prevent leaking the LDAP bind password in a clear text field.

Set the LDAP Bind password through the HDFS client configuration safety valve.
  1. On the Cloudera Manager UI, navigate to the HDFS service, by clicking on the HDFS service under the Cluster.
  2. Click the Configuration tab. Search for the HDFS Client Advanced Configuration Snippet (Safety Valve) for hdfs-site.xml configuration parameter.

  3. Add an entry with the following values:
    • Name = hadoop.security.group.mapping.ldap.bind.password
    • Value = (Enter the LDAP bind password here)
    • Description = Password for LDAP bind account
  4. Then click the Save Changes button to save the safety valve entry.

  5. Perform the instructions from the Manually Redeploying Client Configuration Files to manually deploy client configuration files to the cluster.

OPSAPS-68452: Azul Open JDK 8 and 11 are not supported with Cloudera Manager

Azul Open JDK 8 and 11 are not supported with Cloudera Manager. To use Azul Open JDK 8 or 11 for Cloudera Manager RPM/DEBs, you must manually create a symlink between the Zulu JDK installation path and the default JDK path.

After installing Azul Open JDK8 or 11, you must run the following commands on all the hosts in the cluster:
Azul Open JDK 8
RHEL or SLES
# sudo ln -s /usr/lib/jvm/java-8-zulu-openjdk-jdk /usr/lib/jvm/java-8-openjdk
Ubuntu or Debian
# sudo ln -s /usr/lib/jvm/zulu-8-amd64 /usr/lib/jvm/java-8-openjdk
Azul Open JDK 11
For DEBs only
# sudo ln -s /usr/lib/jvm/zulu-11-amd64 /usr/lib/jvm/java-11
Following are the list of fixed issues that were shipped for Cloudera Manager 7.7.1 CHF15 (version: 7.7.1-h16-45582990):
OPSAPS-66023: Error message about an unsupported ciphersuite while upgrading or installing cluster with the latest FIPS compliance

When upgrading or installing a FIPS enabled cluster, Cloudera Manager is unable to download the new CDP parcel from the Cloudera parcel archive.

Cloudera Manager displays the following error message:

HTTP ERROR 400 java.net.ConnectException: Unsupported ciphersuite TLS_EDH_RSA_WITH_3DES_EDE_CBC_SHA

This issue is fixed now by correcting the incorrect ciphersuite selection.
OPSAPS-67641
The Next Run column on the Cloudera Manager > Replication > Replication Policies page was showing None Scheduled for recurring Hive ACID replication policy jobs, which is incorrect. This column now displays the correct message.
OPSAPS-67888
The ‘Hive-On-Tez Replication Metrics Getter’ command did not reschedule when the Hive-on-Tez service became unavailable. The command now reschedules automatically when the Hive-on-Tez service is unavailable and also displays a message on the Cloudera Manager UI.
OPSAPS-68387
The Status column on the Cloudera Manager > Replication > Replication Policies page was incorrectly showing Skipped for Hive ACID replication policy jobs when the job status was unknown. The column now shows the Waiting for Update status for the Hive ACID replication policy jobs until the job status is confirmed.
OPSAPS-68494
Replication Metric getter failed when the hive.resultset.use.unique.column.names parameter was set to false because the resulting columns were non-unique. The Replication Metric getter now configures the hive.resultset.use.unique.column.names parameter to true during its JDBC session to override the service configuration.

The repositories for Cloudera Manager 7.7.1-CHF15 are listed in the following table:

Table 1. Cloudera Manager 7.7.1-CHF15
Repository Type Repository Location
RHEL 8 Compatible Repository:
https://username:password@archive.cloudera.com/p/cm7/patch/7.7.1-h16-45582990/redhat8/yum
Repository File:
https://username:password@archive.cloudera.com/p/cm7/patch/7.7.1-h16-45582990/redhat8/yum/cloudera-manager.repo
RHEL 7 Compatible Repository:
https://username:password@archive.cloudera.com/p/cm7/patch/7.7.1-h16-45582990/redhat7/yum
Repository File:
https://username:password@archive.cloudera.com/p/cm7/patch/7.7.1-h16-45582990/redhat7/yum/cloudera-manager.repo
SLES 12 Repository:
https://username:password@archive.cloudera.com/p/cm7/patch/7.7.1-h16-45582990/sles12/yum
Repository File:
https://username:password@archive.cloudera.com/p/cm7/patch/7.7.1-h16-45582990/sles12/yum/cloudera-manager.repo
Ubuntu 20 Repository:
https://username:password@archive.cloudera.com/p/cm7/patch/7.7.1-h16-45582990/ubuntu2004/apt
Repository file:
https://username:password@archive.cloudera.com/p/cm7/patch/7.7.1-h16-45582990/ubuntu2004/apt/cloudera-manager.list
Ubuntu 18 Repository:
https://username:password@archive.cloudera.com/p/cm7/patch/7.7.1-h16-45582990/ubuntu1804/apt
Repository file:
https://username:password@archive.cloudera.com/p/cm7/patch/7.7.1-h16-45582990/ubuntu1804/apt/cloudera-manager.list