Archives of Support Questions (Read Only)

This is an archived board for historical reference. Information and links may no longer be available or relevant
Announcements
This board is archived and read-only for historical reference. To ask a new question, please post a new topic on the appropriate active board.

Why falcon reset api does not integrate with knox?

avatar
New Member
 
1 ACCEPTED SOLUTION

avatar
New Member

As of HDP 2.3 (with Knox 0.6.0) -- a new extensibility mechanism was introduced which will allow you to add new REST APIs to be protected by Knox. Ideally, we will integrate Falcon and Knox as part of a future release -- so this comes out of the box, but until then --- have a look at this:

http://docs.hortonworks.com/HDPDocuments/HDP2/HDP-2.4.0/bk_Knox_Gateway_Admin_Guide/content/adding_n...

View solution in original post

3 REPLIES 3

avatar
Expert Contributor

Since Knox makes requests on behalf of other users, the ability to be configured as a super user that can submit requests on behalf of other users is needed and a REST API support to invoke as other users. These features existed for Oozie but were only added for Falcon in Dal-M20 (2.3.4) or later.

In the future versions of Knox, this can be enabled.

avatar
New Member

As of HDP 2.3 (with Knox 0.6.0) -- a new extensibility mechanism was introduced which will allow you to add new REST APIs to be protected by Knox. Ideally, we will integrate Falcon and Knox as part of a future release -- so this comes out of the box, but until then --- have a look at this:

http://docs.hortonworks.com/HDPDocuments/HDP2/HDP-2.4.0/bk_Knox_Gateway_Admin_Guide/content/adding_n...

avatar
Expert Contributor

Just to make sure everyone understands - this needs 2.3.4 of Falcon where we specifically added the ability of proxy super users