Cloudera Manager 7.7.1 Cumulative hotfix 17

Know more about the Cloudera Manager 7.7.1 cumulative hotfixes 17.

This cumulative hotfix was released on January 18, 2024.

Following are the list of fixed issues that were shipped for Cloudera Manager 7.7.1 CHF17 (version: 7.7.1-h20-49154526):

OPSAPS-69411

Users will now be able to export sentry data only for given Hive objects (databases and tables and the respective URLs) by using the config "authorization.migration.export.migration_objects" during export.

OPSAPS-68995: Convert some DistCp feature checks from CM version checks to feature flags

To ensure interoperability between different cumulative hotfixes (CHF), the NUM_FETCH_THREADS, DELETE_LATEST_SOURCE_SNAPSHOT_ON_JOB_FAILURE, and RAISE_SNAPSHOT_DIFF_FAILURES DistCp features must be published as feature flags.

OPSAPS-68689: Unable to emit the LDAP Bind password in core-site.xml for client configurations

If the CDP cluster has LDAP group to OS group mapping enabled, then applications running in Spark or Yarn would fail to authenticate to the LDAP server when trying to use the LDAP bind account during the LDAP group search.

This is because the LDAP bind password was not passed to the /etc/hadoop/conf/core-site.xml file. This was intended behavior to prevent leaking the LDAP bind password in a clear text field.

To fix this issue, perform the instructions from the Emitting the LDAP Bind password in core-site.xml for client configurations section to emit the LDAP Bind password in core-site.xml for client configurations.

OPSAPS-69057: Customizable authorization-migration-site.xml for Sentry-to-Ranger migration

You can now add additional arguments to override any existing property in the authorization-migration-site.xml file. The Sentry to Ranger migration process during the Hive replication policy run uses this file. These additional arguments are used during the Sentry to Ranger migration process for Sentry export on the source and Ranger import on the destination. You can enter the arguments using the CM API body as shown in the following sample snippet:

“hiveArguments”: {
    ...
    “rangerImportProperties”: {
         “authorization.migration.destination.location.prefix”: “hdfs://nameservice”,
         “some.other.prop”: “some_property”
     },
     “sentryExportProperties”: {
          “authorization.migration.role.permissions”: “true”,
          “export.prop”: “export_prop_sentry”,
          “authorization.migration.destination.location.prefix”: “hdfs://nameservice”
      },
  ...
}

The repositories for Cloudera Manager 7.7.1-CHF17 are listed in the following table:

Table 1. Cloudera Manager 7.7.1-CHF17
Repository Type	Repository Location
RHEL 8 Compatible	Repository: `https://username:password@archive.cloudera.com/p/cm7/7.7.1-h20-49154526/redhat8/yum` Repository File: `https://username:password@archive.cloudera.com/p/cm7/7.7.1-h20-49154526/redhat8/yum/cloudera-manager.repo`
RHEL 7 Compatible	Repository: `https://username:password@archive.cloudera.com/p/cm7/7.7.1-h20-49154526/redhat7/yum` Repository File: `https://username:password@archive.cloudera.com/p/cm7/7.7.1-h20-49154526/redhat7/yum/cloudera-manager.repo`
SLES 12	Repository: `https://username:password@archive.cloudera.com/p/cm7/7.7.1-h20-49154526/sles12/yum` Repository File: `https://username:password@archive.cloudera.com/p/cm7/7.7.1-h20-49154526/sles12/yum/cloudera-manager.repo`
Ubuntu 20	Repository: `https://username:password@archive.cloudera.com/p/cm7/7.7.1-h20-49154526/ubuntu2004/apt` Repository file: `https://username:password@archive.cloudera.com/p/cm7/7.7.1-h20-49154526/ubuntu2004/apt/cloudera-manager.list`
Ubuntu 18	Repository: `https://username:password@archive.cloudera.com/p/cm7/7.7.1-h20-49154526/ubuntu1804/apt` Repository file: `https://username:password@archive.cloudera.com/p/cm7/7.7.1-h20-49154526/ubuntu1804/apt/cloudera-manager.list`
IBM PowerPC RHEL 7	`https://username:password@archive.cloudera.com/p/cm7/7.7.1-h20-49154526/redhat7-ppc/yum`
IBM PowerPC RHEL 8	`https://username:password@archive.cloudera.com/p/cm7/7.7.1-h20-49154526/redhat8-ppc/yum`

Technical Service Bulletins

TSB 2024-734: The Replication Policies page of Replication Manager is non-functional in Cloudera Manager UI: Cloudera discovered that certain versions of Cloudera Manager have a non-functional Replication Policies page. On the affected versions, visiting the page in Cloudera Manager results in a User Interface (UI) error and the page will not load. Because of this error, creating new replication policies, editing or deleting existing policies and viewing the existing policies on the UI is not possible.
Pre-existing policies will continue to run scheduled as expected. The execution of policies and the REST API of Cloudera Manager are not affected by this issue.
Knowledge article: For the latest update on this issue see the corresponding Knowledge article: TSB 2024-734: The Replication Policies page of Replication Manager is non-functional in Cloudera Manager UI