question Re: How to Set Up Knox Gateway for Unix Users? in Support Questions

How to Set Up Knox Gateway for Unix Users?

sparsh_singhal — Wed, 30 May 2018 21:11:09 GMT

We have start demo LDAP to access services using Knox gateway. But I want to access those services using my Unix/Posix users, which are already created.

Re: How to Set Up Knox Gateway for Unix Users?

falbani — Wed, 30 May 2018 21:40:10 GMT

@Sparsh Singhal following link shows the supported authentication mechanisms and contains the links to the configuration steps:

https://docs.hortonworks.com/HDPDocuments/HDP2/HDP-2.6.5/bk_security/content/authentication_providers.html

HTH

*** If you found this answer addressed your question, please take a moment to login and click the "accept" link on the answer.

Re: How to Set Up Knox Gateway for Unix Users?

WhiteHa — Thu, 31 May 2018 14:49:03 GMT

@Sparsh Singhal You need to configure your Authentication Provider in Knox topology to use KnoxPamRealm class for setting up PAM Authentication. Follow the link here.

You can have a Ubuntu specific example of PAM configuration (/etc/pam.d/login) here. After successful configuration, you can use existing Unix users to authenticate via Knox.

Re: How to Set Up Knox Gateway for Unix Users?

sparsh_singhal — Thu, 31 May 2018 19:10:55 GMT

@Krishna Pandey Linux distro is Centos 7. I tried with PAM Authentication. I am getting HTTP 404 error.

Re: How to Set Up Knox Gateway for Unix Users?

WhiteHa — Thu, 31 May 2018 19:47:55 GMT

Can you provide more information? Mask any sensitive info and provide 404 error details, it normally means topology is not deployed. Generally, HTTP 401 error you should get for authentication related issues.

Re: How to Set Up Knox Gateway for Unix Users?

sparsh_singhal — Thu, 31 May 2018 20:07:46 GMT

@Krishna Pandey

Yes, the permissions to the topology file were not correct. But now I'm getting this error

HTTP/1.1 401 Unauthorized
Date: Thu, 31 May 2018 13:07:02 GMT
Set-Cookie: rememberMe=deleteMe; Path=/gateway/pamtest; Max-Age=0; Expires=Wed, 30-May-2018 13:07:04 GMT
WWW-Authenticate: BASIC realm="application"
Content-Length: 0
Server: Jetty(9.2.15.v20160210)

The cluster is kerberized as well.

Re: How to Set Up Knox Gateway for Unix Users?

sparsh_singhal — Thu, 31 May 2018 21:06:08 GMT

@Krishna Pandey

Thanks. It worked. Need to give read permission on /etc/shadow to user Knox. Better if we create ACLs for it.

Re: How to Set Up Knox Gateway for Unix Users?

WhiteHa — Thu, 31 May 2018 22:19:20 GMT

Yes, that's required for PAM authentication to work. Happy to help.