question Re: Multiple Knox gateways? in Archives of Support Questions (Read Only)

Multiple Knox gateways?

kabalax — Mon, 13 Jun 2016 21:43:49 GMT

Hello,

Can I have multiple Knox gateways each bound to a different AD?

I got one Knox gateway authenticating to an AD and it works perfectly fine. I'd like to setup another gateway but point it to another AD. Do I need to duplicate <topology>, <gateway> or <provider>?

Thanks.

Re: Multiple Knox gateways?

emaxwell — Tue, 14 Jun 2016 01:02:18 GMT

@Teddy Brewski

This can be done!

Install the Knox server on multiple hosts (can be done by going to Hosts -> hostname -> Add Service -> Knox Gateway).
Create a config group for Knox and assign nodes to each config group (Knox -> Configs -> Manage Config Groups)
Modify the Advanced Topology for each config group (accessed with the drop down at the top of the Configs page) to change the AD configuration as appropriate.

Re: Multiple Knox gateways?

kabalax — Tue, 14 Jun 2016 01:21:55 GMT

Perfect -- many thanks!

Re: Multiple Knox gateways?

sshimpi — Tue, 14 Jun 2016 01:29:47 GMT

@Teddy Brewski

In addition to @emaxwell also check - "Know support active directory searches using nested ou's and/or multiple AD search strings"

https://community.hortonworks.com/questions/1783/does-knox-support-active-directory-searches-using.html

Re: Multiple Knox gateways?

amiller — Tue, 14 Jun 2016 01:29:49 GMT

Running each topology on its own Gateway instance is fine, but it's not necessary. You can use a single Knox Gateway instance and simply create a separate topology per-AD.

Say you have 2 topologies, ad1 and ad2, then you can connect using:

https://knox-host:8443/gateway/ad1/<service>/.

https://knox-host:8443/gateway/ad2/<service>/.