Community Articles
Find and share helpful community-sourced technical articles
Announcements
Alert: Welcome to the Unified Cloudera Community. Former HCC members be sure to read and learn how to activate your account here.
Labels (1)

Description: Once you have a Hadoop cluster that is using Kerberos for authentication, you have to do the following in Ambari to configure Knox to work with that cluster.

1) Grant proxy privileges for Knox in core-site.xml

hadoop.proxyuser.knox.groups=*
hadoop.proxyuser.knox.hosts=*

2) Grant proxy privileges for Knox in webhcat-site.xml

webhcat.proxyuser.knox.groups=*
webhcat.proxyuser.knox.hosts=*

3) Grant proxy privileges for Knox in oozie-site.xml

oozie.service.ProxyUserService.proxyuser.knox.groups=*
oozie.service.ProxyUserService.proxyuser.knox.hosts=*

4) Update hive-site.xml and set the following properties on Hive Server2 hosts. Some of the properties may already be in the hive-site.xml. Ensure that the values match the ones below.

hive.server2.allow.user.substitution=true
hive.server2.transport.mode=http
hive.server2.thrift.http.port=10001
hive.server2.thrift.http.path=cliservice

NOTE: The properties shown above allows all users and all hostnames. Please consider security and update the value per your architecture.

For more info please visit this link

1,280 Views
0 Kudos
Don't have an account?
Coming from Hortonworks? Activate your account here
Version history
Revision #:
1 of 1
Last update:
‎11-27-2017 02:39 PM
Updated by:
 
Contributors
Top Kudoed Authors