question Re: Why falcon reset api does not integrate with knox? in Archives of Support Questions (Read Only)

Why falcon reset api does not integrate with knox?

ruoyuwang66 — Mon, 14 Mar 2016 19:45:57 GMT

Re: Why falcon reset api does not integrate with knox?

vranganathan — Tue, 22 Mar 2016 06:47:38 GMT

Since Knox makes requests on behalf of other users, the ability to be configured as a super user that can submit requests on behalf of other users is needed and a REST API support to invoke as other users. These features existed for Oozie but were only added for Falcon in Dal-M20 (2.3.4) or later.

In the future versions of Knox, this can be enabled.

Re: Why falcon reset api does not integrate with knox?

thall — Tue, 22 Mar 2016 07:15:41 GMT

As of HDP 2.3 (with Knox 0.6.0) -- a new extensibility mechanism was introduced which will allow you to add new REST APIs to be protected by Knox. Ideally, we will integrate Falcon and Knox as part of a future release -- so this comes out of the box, but until then --- have a look at this:

http://docs.hortonworks.com/HDPDocuments/HDP2/HDP-2.4.0/bk_Knox_Gateway_Admin_Guide/content/adding_new_service_knox_gateway.html

Re: Why falcon reset api does not integrate with knox?

vranganathan — Sat, 26 Mar 2016 01:29:00 GMT

Just to make sure everyone understands - this needs 2.3.4 of Falcon where we specifically added the ability of proxy super users