Cloudera Manager 7.7.1 Cumulative hotfix 17

Know more about the Cloudera Manager 7.7.1 cumulative hotfixes 17.

This cumulative hotfix was released on January 18, 2024.

Following are the list of fixed issues that were shipped for Cloudera Manager 7.7.1 CHF17 (version: 7.7.1-h20-49154526):
OPSAPS-69411
Users will now be able to export sentry data only for given Hive objects (databases and tables and the respective URLs) by using the config "authorization.migration.export.migration_objects" during export.
OPSAPS-68995: Convert some DistCp feature checks from CM version checks to feature flags
To ensure interoperability between different cumulative hotfixes (CHF), the NUM_FETCH_THREADS, DELETE_LATEST_SOURCE_SNAPSHOT_ON_JOB_FAILURE, and RAISE_SNAPSHOT_DIFF_FAILURES DistCp features must be published as feature flags.
OPSAPS-68689: Unable to emit the LDAP Bind password in core-site.xml for client configurations

If the CDP cluster has LDAP group to OS group mapping enabled, then applications running in Spark or Yarn would fail to authenticate to the LDAP server when trying to use the LDAP bind account during the LDAP group search.

This is because the LDAP bind password was not passed to the /etc/hadoop/conf/core-site.xml file. This was intended behavior to prevent leaking the LDAP bind password in a clear text field.

To fix this issue, perform the instructions from the Emitting the LDAP Bind password in core-site.xml for client configurations section to emit the LDAP Bind password in core-site.xml for client configurations.

OPSAPS-69057: Customizable authorization-migration-site.xml for Sentry-to-Ranger migration
You can now add additional arguments to override any existing property in the authorization-migration-site.xml file. The Sentry to Ranger migration process during the Hive replication policy run uses this file. These additional arguments are used during the Sentry to Ranger migration process for Sentry export on the source and Ranger import on the destination. You can enter the arguments using the CM API body as shown in the following sample snippet:
“hiveArguments”: {
    ...
    “rangerImportProperties”: {
         “authorization.migration.destination.location.prefix”: “hdfs://nameservice”,
         “some.other.prop”: “some_property”
     },
     “sentryExportProperties”: {
          “authorization.migration.role.permissions”: “true”,
          “export.prop”: “export_prop_sentry”,
          “authorization.migration.destination.location.prefix”: “hdfs://nameservice”
      },
  ...
}

The repositories for Cloudera Manager 7.7.1-CHF17 are listed in the following table:

Table 1. Cloudera Manager 7.7.1-CHF17
Repository Type Repository Location
RHEL 8 Compatible Repository:
https://username:password@archive.cloudera.com/p/cm7/7.7.1-h20-49154526/redhat8/yum
Repository File:
https://username:password@archive.cloudera.com/p/cm7/7.7.1-h20-49154526/redhat8/yum/cloudera-manager.repo
RHEL 7 Compatible Repository:
https://username:password@archive.cloudera.com/p/cm7/7.7.1-h20-49154526/redhat7/yum
Repository File:
https://username:password@archive.cloudera.com/p/cm7/7.7.1-h20-49154526/redhat7/yum/cloudera-manager.repo
SLES 12 Repository:
https://username:password@archive.cloudera.com/p/cm7/7.7.1-h20-49154526/sles12/yum
Repository File:
https://username:password@archive.cloudera.com/p/cm7/7.7.1-h20-49154526/sles12/yum/cloudera-manager.repo
Ubuntu 20 Repository:
https://username:password@archive.cloudera.com/p/cm7/7.7.1-h20-49154526/ubuntu2004/apt
Repository file:
https://username:password@archive.cloudera.com/p/cm7/7.7.1-h20-49154526/ubuntu2004/apt/cloudera-manager.list
Ubuntu 18 Repository:
https://username:password@archive.cloudera.com/p/cm7/7.7.1-h20-49154526/ubuntu1804/apt
Repository file:
https://username:password@archive.cloudera.com/p/cm7/7.7.1-h20-49154526/ubuntu1804/apt/cloudera-manager.list
IBM PowerPC RHEL 7
https://username:password@archive.cloudera.com/p/cm7/7.7.1-h20-49154526/redhat7-ppc/yum
IBM PowerPC RHEL 8
https://username:password@archive.cloudera.com/p/cm7/7.7.1-h20-49154526/redhat8-ppc/yum

Technical Service Bulletins

TSB 2024-734: The Replication Policies page of Replication Manager is non-functional in Cloudera Manager UI
Cloudera discovered that certain versions of Cloudera Manager have a non-functional Replication Policies page. On the affected versions, visiting the page in Cloudera Manager results in a User Interface (UI) error and the page will not load. Because of this error, creating new replication policies, editing or deleting existing policies and viewing the existing policies on the UI is not possible.

Pre-existing policies will continue to run scheduled as expected. The execution of policies and the REST API of Cloudera Manager are not affected by this issue.

Knowledge article
For the latest update on this issue see the corresponding Knowledge article: TSB 2024-734: The Replication Policies page of Replication Manager is non-functional in Cloudera Manager UI