question Re: Ambari Infra UI HTTP ERROR 401 after Kerberos in Archives of Support Questions (Read Only)

Ambari Infra UI HTTP ERROR 401 after Kerberos

qiwang — Fri, 18 Nov 2016 02:02:39 GMT

After Kerberos with MIT KDC, I got error when try to access Ambari Infra UI

HTTP ERROR 401

Problem accessing /solr/. Reason: Authentication required

Kinit with infra and HTTP keytabs worked fine.

[root@qwang-hdp ~]# kinit -kt /etc/security/keytabs/ambari-infra-solr.service.keytab infra-solr/qwang-hdp.field.hortonworks.com@FIELD.HORTONWORKS.COM
[root@qwang-hdp ~]# klist
Ticket cache: FILE:/tmp/krb5cc_0
Default principal: infra-solr/qwang-hdp.field.hortonworks.com@FIELD.HORTONWORKS.COM

Valid starting       Expires              Service principal
11/17/2016 17:53:33  11/18/2016 17:53:33  krbtgt/FIELD.HORTONWORKS.COM@FIELD.HORTONWORKS.COM

[root@qwang-hdp ~]# kinit -kt /etc/security/keytabs/spnego.service.keytab HTTP/qwang-hdp.field.hortonworks.com@FIELD.HORTONWORKS.COM
[root@qwang-hdp ~]# klist
Ticket cache: FILE:/tmp/krb5cc_0
Default principal: HTTP/qwang-hdp.field.hortonworks.com@FIELD.HORTONWORKS.COM

Valid starting       Expires              Service principal
11/17/2016 18:01:33  11/18/2016 18:01:33  krbtgt/FIELD.HORTONWORKS.COM@FIELD.HORTONWORKS.COM

Any other keytabs I need to check and anything else that could cause the problem?

Re: Ambari Infra UI HTTP ERROR 401 after Kerberos

Ravi_G — Fri, 18 Nov 2016 07:21:39 GMT

Hi Qi

As the SOLR UI is kerberised, you need to have a valid ticket on your laptop to access these kerberised views.

Please follow the instruction in this link which explain how to enable your laptop and browser for kerberos authentication.

https://community.hortonworks.com/articles/28537/user-authentication-from-windows-workstation-to-hd.html

Thanks

Ravi

Re: Ambari Infra UI HTTP ERROR 401 after Kerberos

Ravi_G — Fri, 18 Nov 2016 23:57:18 GMT

@QiWang Just wanted to check if you got a chance to try this.

Re: Ambari Infra UI HTTP ERROR 401 after Kerberos

qiwang — Sat, 19 Nov 2016 00:03:35 GMT

I have not tried this yet, but the link you provide is sufficient for my reference. I was trying to troubleshoot Infra but the underlying problem was fixed after installing Log Search. So it is fine now.