Knox - Submitting jobs over Knox fails with HTTP/1.1 401 Unauthorized

[#1]

Description: Once you have a Hadoop cluster that is using Kerberos for authentication, you have to do the following in Ambari to configure Knox to work with that cluster.

1) Grant proxy privileges for Knox in core-site.xml

hadoop.proxyuser.knox.groups=*
hadoop.proxyuser.knox.hosts=*

2) Grant proxy privileges for Knox in webhcat-site.xml

webhcat.proxyuser.knox.groups=*
webhcat.proxyuser.knox.hosts=*

3) Grant proxy privileges for Knox in oozie-site.xml

oozie.service.ProxyUserService.proxyuser.knox.groups=*
oozie.service.ProxyUserService.proxyuser.knox.hosts=*

4) Update hive-site.xml and set the following properties on Hive Server2 hosts. Some of the properties may already be in the hive-site.xml. Ensure that the values match the ones below.

hive.server2.allow.user.substitution=true
hive.server2.transport.mode=http
hive.server2.thrift.http.port=10001
hive.server2.thrift.http.path=cliservice

NOTE: The properties shown above allows all users and all hostnames. Please consider security and update the value per your architecture.

For more info please visit this link