Knox configuration without AD/LDAP

[#1]

Hi,

we are using hdp 2.5.2

I'm newer in security part. I have integrated Kerberos unix based authentication(we are not using LDAP) where we have also configured SPNEGO for restrict the UI access, which is working fine. Now We are looking for knox, As per documentation, Knox provide SSO facility. I have few query based on knox

1. Is it mandatory to install AD/LDAP with KNOX? we want to run knox without AD/LDAP.

2. How know is useful in web based URL? Have there any specific link and configuration which i can understand.

3. Does we have to remove SPNEGO if we want to configure KNOX with SSO?

Please assist..

Will be very helpful..

[#2]

Can someone assist on this post?

[#3 · Accepted solution]

@Vinay K

1. Usually Knox is configured with LDAP. But there are other options as well. Here is the link to the list of supported authentication providers for Knox: link (LDAP, PAM, Spnego and Anonymous)

2. The list of supported hadoop services and WebUI is here: link

3. No, you don't need to remove SPNEGO.

HTH