Support Questions
Find answers, ask questions, and share your expertise
Announcements
Alert: Welcome to the Unified Cloudera Community. Former HCC members be sure to read and learn how to activate your account here.

Hue authentication on cloudera 5.15 is very slow after configuring AD based kerberos

Hue authentication on cloudera 5.15 is very slow after configuring AD based kerberos

New Contributor

Hi, After configuring the kerberos with AD principles, the Hue authentication is very very slow. The setup is like

1. cloudera manager 5.15

2. Kerberos enables with global-AD system user. 

3. Configure Hue with 

     Authentication backend: desktop.auth.backend.LdapBackend

     gave ldap url as AD url

4. Write hue.ini script..because the cloudera version 5.15 didnt work so we added some script based on this thread

https://community.cloudera.com/t5/Web-UI-Hue-Beeswax/could-not-load-AD-group-members/td-p/56545

5. We didnt setup TLS/SSL certificate ..

 

Any ideas about why the authentication is taking long time (3 to 4 minutes) some times its very quick.. not predictable.. even the services(hdfs, hive, spark) are not stable with kerberos.. Your help should be appreciated and will help lot ....Thanks!

 

  

 

 

1 REPLY 1
Highlighted

Re: Hue authentication on cloudera 5.15 is very slow after configuring AD based kerberos

Rising Star
Can you test an LDAP query from the Hue server using a client such as ldapsearch? It would be good to see how long it takes to get a response from the LDAP server.

Check the value you set for base_dn. If this is overly broad it may take a long time to find users and groups in LDAP. Look to narrow this down as much as possible to reduce the size of the LDAP search. I'd also recommend reading the documentation as this provides information on how you can configure and test LDAP authentication in Hue.

https://www.cloudera.com/documentation/enterprise/latest/topics/hue_sec_ldap_auth.html

Regards,
Jim
Don't have an account?
Coming from Hortonworks? Activate your account here