Created on 08-10-2021 02:36 AM - last edited on 08-10-2021 08:56 PM by ask_bill_brooks
1) Ambari Server Url : http://host:port
2) Amabri server services rest api url : http://host:port/api/v1/clusters/<clustername>/services/<service name>
Trying to enable kerberos authentication for point 2 url.
please help for same.
Created 08-10-2021 05:20 AM
@Nitin0858 below command will work if you enable kerberos for ambari
curl --negotiate -u: 'http://<hostname>:8080/api/v1/clusters/<cluster_name>/services/<service_name>;'
curl --negotiate -u: 'http://ambari-host:8080/api/v1/clusters/clusterabc/services/HIVE'
Please find the steps below:
1) ambari-server setup-kerberos
2) ambari-server restart
3) Verify kerberos properties are updated in ambari.properties | grep kerberos
4) kinit with ambari admin principal and run the curl call.
Created 08-10-2021 05:58 AM
I have kerberos enabled hadoop server so its name node , datanode yarn mapreduce are kerberos enabled but its service url is not kerberos enabled as I can hit that url on web and get the output on web but if it is kerberos enabled then it should not be hit on web .
while running below command getting :-
curl --negotiate -u: 'http://ambari-host:8080/api/v1/clusters/clusterabc/services/HDFS
"message": "Authentication required"
Please suggest some solution for it .
Thanks in advance.
Created 08-10-2021 11:35 PM
@Nitin0858 Was the ambari-server setup-kerberos run? Can you check the auth_to_local rule and mapping.
Created 08-10-2021 11:54 PM
some rules are defined in hadoop.security.auth_to_local property.
and some property as below -
I am posting it in regards hdfs configuration .
Please suggest what we missed here.
Created 08-10-2021 11:56 PM
and below two properties are found in ambari.properties file -
Created 08-17-2021 02:31 AM
Please help if anyone knows about it .
Thanks in advance!!!