Ambari Infra UI HTTP ERROR 401 after Kerberos

[#1]

After Kerberos with MIT KDC, I got error when try to access Ambari Infra UI

http://<server>:8886/solr/

HTTP ERROR 401

Problem accessing /solr/. Reason: Authentication required

Kinit with infra and HTTP keytabs worked fine.

[root@qwang-hdp ~]# kinit -kt /etc/security/keytabs/ambari-infra-solr.service.keytab infra-solr/qwang-hdp.field.hortonworks.com@FIELD.HORTONWORKS.COM
[root@qwang-hdp ~]# klist
Ticket cache: FILE:/tmp/krb5cc_0
Default principal: infra-solr/qwang-hdp.field.hortonworks.com@FIELD.HORTONWORKS.COM

Valid starting       Expires              Service principal
11/17/2016 17:53:33  11/18/2016 17:53:33  krbtgt/FIELD.HORTONWORKS.COM@FIELD.HORTONWORKS.COM

[root@qwang-hdp ~]# kinit -kt /etc/security/keytabs/spnego.service.keytab HTTP/qwang-hdp.field.hortonworks.com@FIELD.HORTONWORKS.COM
[root@qwang-hdp ~]# klist
Ticket cache: FILE:/tmp/krb5cc_0
Default principal: HTTP/qwang-hdp.field.hortonworks.com@FIELD.HORTONWORKS.COM

Valid starting       Expires              Service principal
11/17/2016 18:01:33  11/18/2016 18:01:33  krbtgt/FIELD.HORTONWORKS.COM@FIELD.HORTONWORKS.COM

Any other keytabs I need to check and anything else that could cause the problem?

[#2 · Accepted solution]

Hi Qi

As the SOLR UI is kerberised, you need to have a valid ticket on your laptop to access these kerberised views.

Please follow the instruction in this link which explain how to enable your laptop and browser for kerberos authentication.

https://community.hortonworks.com/articles/28537/user-authentication-from-windows-workstation-to-hd....

Thanks

Ravi

[#3]

@QiWang Just wanted to check if you got a chance to try this.

[#4]

I have not tried this yet, but the link you provide is sufficient for my reference. I was trying to troubleshoot Infra but the underlying problem was fixed after installing Log Search. So it is fine now.