Cloudera Docs

Reset ZNode ACLs

If you have a kerberized cluster, you manually have to reset the ZNode ACLs after upgrading from HDP to CDP.

ZNode ACLs have to be reset only for kerberized cluster. If you have a non-kerberized cluster, skip this post-upgrade task.
  1. Log into Cloudera Manager UI.
  2. Set the -Dzookeeper.skipACL property to yes.
    1. Navigate to ZooKeeper > Configuration.
    2. Find the Java Configuration Options for ZooKeeper Server property.
    3. Add the following setting: -Dzookeeper.skipACL=yes
    4. Click Save.
    5. Restart the ZooKeeper service.
  3. Select the YARN service.
  4. Click Actions.
  5. Select the Reset ACLs on YARN Zookeeper nodes action.
  6. After the command is executed, remove the -Dzookeeper.skipACL property:
    1. Navigate to ZooKeeper > Configuration.
    2. Find the Java Configuration Options for ZooKeeper Server property.
    3. Remove the following setting: -Dzookeeper.skipACL=yes
    4. Click Save.
    5. Restart the ZooKeeper service.