Namenode UI (HDFSUI) through knox has only 1 of six tabs working (HA cluster)

[#1]

Howdy guys, I have visibility of several webui's Ranger, Atlas and WebHDFS.

The cluster is Kerberized and has HA on the NameNode (Ambari-2.4.2 + HDP-2.5.3)

There is a firewall between knox and both the namenodes and my declaration.

<gateway>
...
<!-- required for HA -->
<provider>
<role>ha</role>
<name>HaProvider</name>
<enabled>true</enabled>
<param name="WEBHDFS" value="maxFailoverAttempts=3;failoverSleep=1000;maxRetryAttempts=300;retrySleep=1000;enabled=true" /> </provider>
</gateway>
<service>
<role>WEBHDFS</role>
<url>http://ACTIVENN:50070/webhdfs</url>
<url>http://STANDBYNN:50070/webhdfs</url>
</service>
<service>
<role>HDFSUI</role>
<url>http://ACTIVENN:50070</url>
</service>
<service>
<role>NAMENODE</role>
<url>hdfs://ha-name-for-cluster</url>
</service>

Note: The log page on the last tabs says "unauthorized dr.who 403"

I noticed a similar problem here:

• https://issues.apache.org/jira/browse/KNOX-626
• https://community.hortonworks.com/content/kbentry/67710/unable-to-access-datanode-tab-from-namenode-...

What are the reasons why there might be missing tab data?

[#2 · Accepted solution]

Hello @rbailey,

Yes, this is a known issue when NameNode UI is accessed via Knox. As of HDP 2.6, only the Ranger, Ambari and Zeppelin UIs are certified to work with Knox. Other UIs (like NN) may see issues like the one you described above. As of this writing, it is work in progress. You will see more certified UIs in upcoming releases.

Hope this helps !