Support Questions
Find answers, ask questions, and share your expertise

Configuring SPNEGO

Highlighted

Configuring SPNEGO

Contributor

After I execute steps in https://docs.hortonworks.com/HDPDocuments/Ambari-2.1.2.0/bk_Ambari_Security_Guide/content/_configuri..., I access namenode ui and others, it returns "

HTTP ERROR 401

Problem accessing /index.html. Reason:

org.apache.hadoop.security.authentication.util.SignerException: Invalid signed text: ".

Can someone help me seolve it?

1 REPLY 1

Re: Configuring SPNEGO

This is normal behavior as you have to authenticate with kerberos on your client and negotiate kerberos with your browser.

On the local host, where web browser is running: 1. Configure krb5.conf with correct hadoop domain info. 2. Run kinit to obtain a kerberos ticket from KDC server. 3. Configure web browser to use the kerberos ticket, which depends on different type of web browser (More details on http://crimsonfu.github.io/2012/06/22/kerberos-browser.html).