Technology

Configure AES-NI accelerated encryption in transit for HDFS by setting the cipher suite and key length in hdfs-site.xml on both the NameNode/DataNode and client sides.

A quick procedure for resolving Cloudera Manager agent failures caused by corrupted system alternatives entries, including the exact commands to stop the agent, purge stale alternatives, and restart cleanly.

A quick reference for the most useful JVM debugging commands, including heap inspection, environment introspection, and enabling GC logging on a running Java process.

Enable verbose SSL/TLS handshake logging in a JVM running Hadoop or Cloudera services to diagnose certificate and protocol issues.

A quick reference for enabling verbose Kerberos and Hadoop debug output on the command line, so you can see exactly where authentication is failing.

Kerberos cross-realm authentication relies entirely on TGS exchanges between KDCs. Understanding the three-step ticket flow makes it easier to troubleshoot trust relationships between domains.