Support Questions
Find answers, ask questions, and share your expertise

KNOX SSO ambari login redirect Issue

New Contributor

Ambari 2.5.1.0, Knox, Ranger ,SSL and Kerberos enabled. I have configured all required parameters and when I click on Ranger url, it is taking to Knox page and entered the login details after that its not redirecting to ranger page

here are the logs details. no errors/failed messages logged in gateway.log

here the details from gatewayaudit.log

13:49:25 ||b0e284f1-3d47-4847-9556-ace4c2f2e9b9|audit|10.25.124.251|KNOXSSO||||access|uri|/gateway/knoxsso/api/v1/websso?originalUrl=https://hostname:6080/|unavailable|Request method: POST 13:49:27 ||b0e284f1-3d47-4847-9556-ace4c2f2e9b9|audit|10.25.124.251|KNOXSSO|username_001|||authentication|uri|/gateway/knoxsso/api/v1/websso?originalUrl=https://hostname:6080/|success| 13:49:27 ||b0e284f1-3d47-4847-9556-ace4c2f2e9b9|audit|10.25.124.251|KNOXSSO||username_001|||authentication|uri|/gateway/knoxsso/api/v1/websso?originalUrl=https://hostname:6080/|success|Groups: [] 13:49:27 ||b0e284f1-3d47-4847-9556-ace4c2f2e9b9|audit|10.25.124.251|KNOXSSO|username_001|||access|uri|/gateway/knoxsso/api/v1/websso?originalUrl=https://hostname:6080/|success|Response status: 303 13:49:27 ||de1529d6-6a51-48cc-ae19-98e3438b6ed3|audit|10.25.124.251|knoxauth||||access|uri|/gateway/knoxsso/knoxauth/redirecting.html?originalUrl=https://hostname:6080/|unavailable|Request method: GET 13:49:27 ||de1529d6-6a51-48cc-ae19-98e3438b6ed3|audit|10.25.124.251|knoxauth|anonymous|||authentication|uri|/gateway/knoxsso/knoxauth/redirecting.html?originalUrl=https://hostname:6080/|success| 13:49:27 ||de1529d6-6a51-48cc-ae19-98e3438b6ed3|audit|10.25.124.251|knoxauth|anonymous|||access|uri|/gateway/knoxsso/knoxauth/redirecting.html?originalUrl=https://hostname:6080/|success|Response status: 200 13:49:27 ||4345013d-7426-4cc3-a996-672e2f8cb4d2|audit|10.25.124.251|knoxauth||||access|uri|/gateway/knoxsso/knoxauth/styles/knox.css|unavailable|Request method: GET 13:49:27 ||4345013d-7426-4cc3-a996-672e2f8cb4d2|audit|10.25.124.251|knoxauth|anonymous|||authentication|uri|/gateway/knoxsso/knoxauth/styles/knox.css|success| 13:49:27 ||4345013d-7426-4cc3-a996-672e2f8cb4d2|audit|10.25.124.251|knoxauth||||access|uri|/gateway/knoxsso/knoxauth/styles/bootstrap.min.css|unavailable|Request method: GET 13:49:27 ||4345013d-7426-4cc3-a996-672e2f8cb4d2|audit|10.25.124.251|knoxauth|anonymous|||authentication|uri|/gateway/knoxsso/knoxauth/styles/bootstrap.min.css|success| 13:49:27 ||4345013d-7426-4cc3-a996-672e2f8cb4d2|audit|10.25.124.251|knoxauth|anonymous|||access|uri|/gateway/knoxsso/knoxauth/styles/knox.css|success|Response status: 200 13:49:27 ||4345013d-7426-4cc3-a996-672e2f8cb4d2|audit|10.25.124.251|knoxauth|anonymous|||access|uri|/gateway/knoxsso/knoxauth/styles/bootstrap.min.css|success|Response status: 200 13:49:28 ||c95eaa95-0b7e-4efc-b876-706a052b10eb|audit|10.25.124.251|knoxauth||||access|uri|/gateway/knoxsso/knoxauth/images/loading.gif|unavailable|Request method: GET 13:49:28 ||c95eaa95-0b7e-4efc-b876-706a052b10eb|audit|10.25.124.251|knoxauth|anonymous|||authentication|uri|/gateway/knoxsso/knoxauth/images/loading.gif|success| 13:49:28 ||c95eaa95-0b7e-4efc-b876-706a052b10eb|audit|10.25.124.251|knoxauth|anonymous|||access|uri|/gateway/knoxsso/knoxauth/images/loading.gif|success|Response status: 200 13:49:28 ||db8701d4-a615-41f6-a312-21c787b73fbe|audit|10.25.124.251|knoxauth||||access|uri|/gateway/knoxsso/knoxauth/redirecting.jsp?originalUrl=https://hostname:6080/|unavailable|Request method: GET 13:49:28 ||db8701d4-a615-41f6-a312-21c787b73fbe|audit|10.25.124.251|knoxauth|anonymous|||authentication|uri|/gateway/knoxsso/knoxauth/redirecting.jsp?originalUrl=https://hostname:6080/|success| 13:49:28 ||db8701d4-a615-41f6-a312-21c787b73fbe|audit|10.25.124.251|knoxauth|anonymous|||access|uri|/gateway/knoxsso/knoxauth/redirecting.jsp?originalUrl=https://hostname:6080/|success|Response status: 200 13:49:28 ||95878e3f-8097-4bea-9c12-507697d1790f|audit|10.25.124.251|knoxauth||||access|uri|/gateway/knoxsso/knoxauth/styles/bootstrap.min.css|unavailable|Request method: GET 13:49:28 ||95878e3f-8097-4bea-9c12-507697d1790f|audit|10.25.124.251|knoxauth|anonymous|||authentication|uri|/gateway/knoxsso/knoxauth/styles/bootstrap.min.css|success| 13:49:28 ||a74633fb-a339-4730-9d14-7cdb2c5697e4|audit|10.25.124.251|knoxauth||||access|uri|/gateway/knoxsso/knoxauth/styles/knox.css|unavailable|Request method: GET 13:49:28 ||a74633fb-a339-4730-9d14-7cdb2c5697e4|audit|10.25.124.251|knoxauth|anonymous|||authentication|uri|/gateway/knoxsso/knoxauth/styles/knox.css|success| 13:49:28 ||a74633fb-a339-4730-9d14-7cdb2c5697e4|audit|10.25.124.251|knoxauth|anonymous|||access|uri|/gateway/knoxsso/knoxauth/styles/bootstrap.min.css|success|Response status: 200 13:49:28 ||a74633fb-a339-4730-9d14-7cdb2c5697e4|audit|10.25.124.251|knoxauth|anonymous|||access|uri|/gateway/knoxsso/knoxauth/styles/knox.css|success|Response status: 200 13:49:28 ||7727d960-398c-470f-9e0b-db89f1db89a3|audit|10.25.124.251|knoxauth||||access|uri|/gateway/knoxsso/knoxauth/libs/bower/jquery/js/jquery.js|unavailable|Request method: GET 13:49:28 ||7727d960-398c-470f-9e0b-db89f1db89a3|audit|10.25.124.251|knoxauth||||access|uri|/gateway/knoxsso/knoxauth/js/knoxauth.js|unavailable|Request method: GET 13:49:28 ||7727d960-398c-470f-9e0b-db89f1db89a3|audit|10.25.124.251|knoxauth|anonymous|||authentication|uri|/gateway/knoxsso/knoxauth/libs/bower/jquery/js/jquery.js|success| 13:49:28 ||7727d960-398c-470f-9e0b-db89f1db89a3|audit|10.25.124.251|knoxauth|anonymous|||authentication|uri|/gateway/knoxsso/knoxauth/js/knoxauth.js|success| 13:49:28 ||7727d960-398c-470f-9e0b-db89f1db89a3|audit|10.25.124.251|knoxauth|anonymous|||access|uri|/gateway/knoxsso/knoxauth/js/knoxauth.js|success|Response status: 200 13:49:28 ||7727d960-398c-470f-9e0b-db89f1db89a3|audit|10.25.124.251|knoxauth|anonymous|||access|uri|/gateway/knoxsso/knoxauth/libs/bower/jquery/js/jquery.js|success|Response status: 200 13:49:28 ||218a8cf3-f7f2-4d48-849d-d24d1f5b9108|audit|10.25.124.251|knoxauth||||access|uri|/gateway/knoxsso/knoxauth/images/loading.gif|unavailable|Request method: GET 13:49:28 ||218a8cf3-f7f2-4d48-849d-d24d1f5b9108|audit|10.25.124.251|knoxauth|anonymous|||authentication|uri|/gateway/knoxsso/knoxauth/images/loading.gif|success| 13:49:28 ||218a8cf3-f7f2-4d48-849d-d24d1f5b9108|audit|10.25.124.251|knoxauth|anonymous|||access|uri|/gateway/knoxsso/knoxauth/images/loading.gif|success|Response status: 200 13:49:29 ||a5ce2348-40ca-4664-bdd7-dcc7fbdc36af|audit|10.25.124.251|KNOXSSO||||access|uri|/gateway/knoxsso/api/v1/websso?originalUrl=https://hostname:6080/|unavailable|Request method: GET 13:49:29 ||a5ce2348-40ca-4664-bdd7-dcc7fbdc36af|audit|10.25.124.251|KNOXSSO||||access|uri|/gateway/knoxsso/api/v1/websso?originalUrl=https://hostname:6080/|success|Response status: 401 13:49:29 ||10b99e5f-044d-4491-b441-1ce32b93055b|audit|10.25.124.251|knoxauth||||access|uri|/gateway/knoxsso/knoxauth/login.html?originalUrl=https://hostname:6080/|unavailable|Request method: GET 13:49:29 ||10b99e5f-044d-4491-b441-1ce32b93055b|audit|10.25.124.251|knoxauth|anonymous|||authentication|uri|/gateway/knoxsso/knoxauth/login.html?originalUrl=https://hostname:6080/|success| 13:49:29 ||10b99e5f-044d-4491-b441-1ce32b93055b|audit|10.25.124.251|knoxauth|anonymous|||access|uri|/gateway/knoxsso/knoxauth/login.html?originalUrl=https://hostname:6080/|success|Response status: 200 13:49:29 ||12c9e9dc-be42-4557-abc8-42b035bb8d38|audit|10.25.124.251|knoxauth||||access|uri|/gateway/knoxsso/knoxauth/styles/bootstrap.min.css|unavailable|Request method: GET 13:49:29 ||12c9e9dc-be42-4557-abc8-42b035bb8d38|audit|10.25.124.251|knoxauth||||access|uri|/gateway/knoxsso/knoxauth/styles/knox.css|unavailable|Request method: GET 13:49:29 ||12c9e9dc-be42-4557-abc8-42b035bb8d38|audit|10.25.124.251|knoxauth|anonymous|||authentication|uri|/gateway/knoxsso/knoxauth/styles/bootstrap.min.css|success| 13:49:29 ||12c9e9dc-be42-4557-abc8-42b035bb8d38|audit|10.25.124.251|knoxauth|anonymous|||authentication|uri|/gateway/knoxsso/knoxauth/styles/knox.css|success| 13:49:29 ||12c9e9dc-be42-4557-abc8-42b035bb8d38|audit|10.25.124.251|knoxauth|anonymous|||access|uri|/gateway/knoxsso/knoxauth/styles/knox.css|success|Response status: 200 13:49:29 ||12c9e9dc-be42-4557-abc8-42b035bb8d38|audit|10.25.124.251|knoxauth|anonymous|||access|uri|/gateway/knoxsso/knoxauth/styles/bootstrap.min.css|success|Response status: 200 13:49:29 ||06bebac0-80f4-4d5a-bfbb-12d7d6482022|audit|10.25.124.251|knoxauth||||access|uri|/gateway/knoxsso/knoxauth/images/knox-logo.gif|unavailable|Request method: GET 13:49:29 ||06bebac0-80f4-4d5a-bfbb-12d7d6482022|audit|10.25.124.251|knoxauth|anonymous|||authentication|uri|/gateway/knoxsso/knoxauth/images/knox-logo.gif|success| 13:49:29 ||06bebac0-80f4-4d5a-bfbb-12d7d6482022|audit|10.25.124.251|knoxauth|anonymous|||access|uri|/gateway/knoxsso/knoxauth/images/knox-logo.gif|success|Response status: 200 13:49:29 ||c086f615-f7cd-4011-bf44-0cdd20edfd24|audit|10.25.124.251|knoxauth||||access|uri|/gateway/knoxsso/knoxauth/fonts/fontawesome/fontawesome-webfont.woff?v=3.2.1|unavailable|Request method: GET 13:49:29 ||c086f615-f7cd-4011-bf44-0cdd20edfd24|audit|10.25.124.251|knoxauth|anonymous|||authentication|uri|/gateway/knoxsso/knoxauth/fonts/fontawesome/fontawesome-webfont.woff?v=3.2.1|success| 13:49:29 ||c086f615-f7cd-4011-bf44-0cdd20edfd24|audit|10.25.124.251|knoxauth|anonymous|||access|uri|/gateway/knoxsso/knoxauth/fonts/fontawesome/fontawesome-webfont.woff?v=3.2.1|success|Response status: 200

gateway.log

13:49:25,692 DEBUG io.SelectorManager (SelectorManager.java:select(602)) - Selector loop woken up from select, 1/2 selected 13:49:25,692 DEBUG io.SelectChannelEndPoint (SelectChannelEndPoint.java:setKeyInterests(160)) - Key interests updated 1 -> 0 on SelectChannelEndPoint@68f17b42{/10.25.124.251:50742<->8443,Open,in,out,R,-,41637/300000,SslConnection}{io=1,kio=0,kro=1} 13:49:25,692 DEBUG io.SelectChannelEndPoint (SelectChannelEndPoint.java:updateLocalInterests(136)) - Local interests updating 1 -> 0 for SelectChannelEndPoint@68f17b42{/10.25.124.251:50742<->8443,Open,in,out,R,-,41637/300000,SslConnection}{io=0,kio=0,kro=1} 13:49:25,692 DEBUG io.SelectorManager (SelectorManager.java:submit(480)) - Queued change org.eclipse.jetty.io.SelectChannelEndPoint$1@7bce9c3e 13:49:25,692 DEBUG io.AbstractConnection (AbstractConnection.java:next(275)) - FILL_INTERESTED-->FILLING SslConnection@60db157a{NOT_HANDSHAKING,eio=-1/-1,di=-1} -> HttpConnection@c0dee2d[FILL_INTERESTED,DecryptedEndPoint@1fbe6086{/10.25.124.251:50742<->8443,Open,in,out,R,-,41637/300000,HttpConnection}->SelectChannelEndPoint@68f17b42{/10.25.124.251:50742<->8443,Open,in,out,-,-,41637/300000,SslConnection}{io=0,kio=0,kro=1}][p=HttpParser{s=START,0 of 0},g=HttpGenerator{s=START},c=HttpChannelOverHttp@1ed0bbc4{r=0,c=false,a=IDLE,uri=}] 13:49:25,692 DEBUG ssl.SslConnection (SslConnection.java:onFillable(177)) - onFillable enter DecryptedEndPoint@1fbe6086{/10.25.124.251:50742<->8443,Open,in,out,R,-,41637/300000,HttpConnection}->SelectChannelEndPoint@68f17b42{/10.25.124.251:50742<->8443,Open,in,out,-,-,41637/300000,SslConnection}{io=0,kio=0,kro=1} 13:49:25,692 DEBUG io.AbstractConnection (AbstractConnection.java:next(275)) - FILL_INTERESTED-->FILLING HttpConnection@c0dee2d[FILLING,DecryptedEndPoint@1fbe6086{/10.25.124.251:50742<->8443,Open,in,out,-,-,41637/300000,HttpConnection}->SelectChannelEndPoint@68f17b42{/10.25.124.251:50742<->8443,Open,in,out,-,-,41637/300000,SslConnection}{io=0,kio=0,kro=1}][p=HttpParser{s=START,0 of 0},g=HttpGenerator{s=START},c=HttpChannelOverHttp@1ed0bbc4{r=0,c=false,a=IDLE,uri=}] 13:49:25,692 DEBUG ssl.SslConnection (SslConnection.java:onFillable(198)) - onFillable exit DecryptedEndPoint@1fbe6086{/10.25.124.251:50742<->8443,Open,in,out,-,-,41637/300000,HttpConnection}->SelectChannelEndPoint@68f17b42{/10.25.124.251:50742<->8443,Open,in,out,-,-,41637/300000,SslConnection}{io=0,kio=0,kro=1} 13:49:25,692 DEBUG server.HttpConnection (HttpConnection.java:onFillable(207)) - HttpConnection@c0dee2d[FILLING,DecryptedEndPoint@1fbe6086{/10.25.124.251:50742<->8443,Open,in,out,-,-,41637/300000,HttpConnection}->SelectChannelEndPoint@68f17b42{/10.25.124.251:50742<->8443,Open,in,out,-,-,41637/300000,SslConnection}{io=0,kio=0,kro=1}][p=HttpParser{s=START,0 of 0},g=HttpGenerator{s=START},c=HttpChannelOverHttp@1ed0bbc4{r=0,c=false,a=IDLE,uri=}] onFillable HttpChannelState@6f45b3ec{s=IDLE i=true a=null} 13:49:25,692 DEBUG io.AbstractConnection (AbstractConnection.java:next(275)) - FILLING-->IDLE SslConnection@60db157a{NOT_HANDSHAKING,eio=-1/-1,di=-1} -> HttpConnection@c0dee2d[FILLING,DecryptedEndPoint@1fbe6086{/10.25.124.251:50742<->8443,Open,in,out,-,-,41637/300000,HttpConnection}->SelectChannelEndPoint@68f17b42{/10.25.124.251:50742<->8443,Open,in,out,-,-,41637/300000,SslConnection}{io=0,kio=0,kro=1}][p=HttpParser{s=START,0 of 0},g=HttpGenerator{s=START},c=HttpChannelOverHttp@1ed0bbc4{r=0,c=false,a=IDLE,uri=}] 13:49:25,693 DEBUG ssl.SslConnection (SslConnection.java:fill(481)) - SslConnection@60db157a{NOT_HANDSHAKING,eio=-1/-1,di=-1} -> HttpConnection@c0dee2d[FILLING,DecryptedEndPoint@1fbe6086{/10.25.124.251:50742<->8443,Open,in,out,-,-,41637/300000,HttpConnection}->SelectChannelEndPoint@68f17b42{/10.25.124.251:50742<->8443,Open,in,out,-,-,41637/300000,SslConnection}{io=0,kio=0,kro=1}][p=HttpParser{s=START,0 of 0},g=HttpGenerator{s=START},c=HttpChannelOverHttp@1ed0bbc4{r=0,c=false,a=IDLE,uri=}] fill enter 13:49:25,693 DEBUG io.SelectorManager (SelectorManager.java:runChange(525)) - Running change org.eclipse.jetty.io.SelectChannelEndPoint$1@7bce9c3e 13:49:25,693 DEBUG io.SelectorManager (SelectorManager.java:select(599)) - Selector loop waiting on select 13:49:25,693 DEBUG io.ChannelEndPoint (ChannelEndPoint.java:fill(142)) - filled -1 SelectChannelEndPoint@68f17b42{/10.25.124.251:50742<->8443,Open,in,out,-,-,41638/300000,SslConnection}{io=0,kio=0,kro=1} 13:49:25,693 DEBUG io.ChannelEndPoint (ChannelEndPoint.java:shutdownInput(65)) - ishut SelectChannelEndPoint@68f17b42{/10.25.124.251:50742<->8443,Open,in,out,-,-,41638/300000,SslConnection}{io=0,kio=0,kro=1} 13:49:25,693 DEBUG ssl.SslConnection (SslConnection.java:fill(509)) - SslConnection@60db157a{NOT_HANDSHAKING,eio=0/-1,di=-1} -> HttpConnection@c0dee2d[FILLING,DecryptedEndPoint@1fbe6086{/10.25.124.251:50742<->8443,Open,in,out,-,-,41638/300000,HttpConnection}->SelectChannelEndPoint@68f17b42{/10.25.124.251:50742<->8443,Open,ISHUT,out,-,-,41638/300000,SslConnection}{io=0,kio=0,kro=1}][p=HttpParser{s=START,0 of 0},g=HttpGenerator{s=START},c=HttpChannelOverHttp@1ed0bbc4{r=0,c=false,a=IDLE,uri=}] filled -1 encrypted bytes 13:49:25,693 DEBUG ssl.SslConnection (SslConnection.java:fill(526)) - SslConnection@60db157a{NOT_HANDSHAKING,eio=0/-1,di=-1} -> HttpConnection@c0dee2d[FILLING,DecryptedEndPoint@1fbe6086{/10.25.124.251:50742<->8443,Open,in,out,-,-,41638/300000,HttpConnection}->SelectChannelEndPoint@68f17b42{/10.25.124.251:50742<->8443,Open,ISHUT,out,-,-,41638/300000,SslConnection}{io=0,kio=0,kro=1}][p=HttpParser{s=START,0 of 0},g=HttpGenerator{s=START},c=HttpChannelOverHttp@1ed0bbc4{r=0,c=false,a=IDLE,uri=}] unwrap Status = BUFFER_UNDERFLOW HandshakeStatus = NOT_HANDSHAKING bytesConsumed = 0 bytesProduced = 0 13:49:25,693 DEBUG ssl.SslConnection (SslConnection.java:fill(689)) - SslConnection@60db157a{NEED_WRAP,eio=-1/-1,di=-1} -> HttpConnection@c0dee2d[FILLING,DecryptedEndPoint@1fbe6086{/10.25.124.251:50742<->8443,Open,ISHUT,out,-,-,41638/300000,HttpConnection}->SelectChannelEndPoint@68f17b42{/10.25.124.251:50742<->8443,Open,ISHUT,out,-,-,41638/300000,SslConnection}{io=0,kio=0,kro=1}][p=HttpParser{s=START,0 of 0},g=HttpGenerator{s=START},c=HttpChannelOverHttp@1ed0bbc4{r=0,c=false,a=IDLE,uri=}] fill exit 13:49:25,693 DEBUG http.HttpParser (HttpParser.java:atEOF(1547)) - atEOF HttpParser{s=START,0 of 0} 13:49:25,693 DEBUG http.HttpParser (HttpParser.java:parseNext(1232)) - parseNext s=START HeapByteBuffer@7d596ec7[p=0,l=0,c=17408,r=0]={<<<>>>\x17\x03\x03@\x18\x00\x00\x00\x00\x00\x00\x00\x0bkI\xE0\r...\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00} 13:49:25,694 DEBUG http.HttpParser (HttpParser.java:setState(1587)) - START --> CLOSED 13:49:25,694 DEBUG io.AbstractEndPoint (AbstractEndPoint.java:onClose(108)) - onClose DecryptedEndPoint@1fbe6086{/10.25.124.251:50742<->8443,Open,ISHUT,out,-,-,41639/300000,HttpConnection}->SelectChannelEndPoint@68f17b42{/10.25.124.251:50742<->8443,Open,ISHUT,out,-,-,41639/300000,SslConnection}{io=0,kio=0,kro=1} 13:49:25,694 DEBUG ssl.SslConnection (SslConnection.java:shutdownOutput(878)) - SslConnection@60db157a{NEED_WRAP,eio=-1/-1,di=-1} -> HttpConnection@c0dee2d[FILLING,DecryptedEndPoint@1fbe6086{/10.25.124.251:50742<->8443,Open,ISHUT,out,-,-,41639/300000,HttpConnection}->SelectChannelEndPoint@68f17b42{/10.25.124.251:50742<->8443,Open,ISHUT,out,-,-,41639/300000,SslConnection}{io=0,kio=0,kro=1}][p=HttpParser{s=CLOSED,0 of 0},g=HttpGenerator{s=START},c=HttpChannelOverHttp@1ed0bbc4{r=0,c=false,a=IDLE,uri=}] shutdownOutput: oshut=false, ishut=true 13:49:25,694 DEBUG io.AbstractEndPoint (AbstractEndPoint.java:onClose(108)) - onClose SelectChannelEndPoint@68f17b42{/10.25.124.251:50742<->8443,CLOSED,ISHUT,out,-,-,41639/300000,SslConnection}{io=0,kio=0,kro=1} 13:49:25,694 DEBUG io.ChannelEndPoint (ChannelEndPoint.java:close(115)) - close SelectChannelEndPoint@68f17b42{/10.25.124.251:50742<->8443,CLOSED,ISHUT,out,-,-,41639/300000,SslConnection}{io=0,kio=0,kro=1} 13:49:25,694 DEBUG io.SelectorManager (SelectorManager.java:destroyEndPoint(756)) - Destroyed SelectChannelEndPoint@68f17b42{/10.25.124.251:50742<->8443,CLOSED,ISHUT,OSHUT,-,-,41639/300000,SslConnection}{io=0,kio=-1,kro=-1} 13:49:25,694 DEBUG io.AbstractConnection (AbstractConnection.java:onClose(210)) - onClose HttpConnection@c0dee2d[FILLING,DecryptedEndPoint@1fbe6086{/10.25.124.251:50742<->8443,CLOSED,ISHUT,OSHUT,-,-,41639/300000,HttpConnection}->SelectChannelEndPoint@68f17b42{/10.25.124.251:50742<->8443,CLOSED,ISHUT,OSHUT,-,-,41639/300000,SslConnection}{io=0,kio=-1,kro=-1}][p=HttpParser{s=CLOSED,0 of 0},g=HttpGenerator{s=START},c=HttpChannelOverHttp@1ed0bbc4{r=0,c=false,a=IDLE,uri=}] 13:49:25,694 DEBUG io.AbstractConnection (AbstractConnection.java:onClose(210)) - onClose SslConnection@60db157a{NEED_WRAP,eio=-1/-1,di=-1} -> HttpConnection@c0dee2d[FILLING,DecryptedEndPoint@1fbe6086{/10.25.124.251:50742<->8443,CLOSED,ISHUT,OSHUT,-,-,41639/300000,HttpConnection}->SelectChannelEndPoint@68f17b42{/10.25.124.251:50742<->8443,CLOSED,ISHUT,OSHUT,-,-,41639/300000,SslConnection}{io=0,kio=-1,kro=-1}][p=HttpParser{s=CLOSED,0 of 0},g=HttpGenerator{s=START},c=HttpChannelOverHttp@1ed0bbc4{r=0,c=false,a=IDLE,uri=}] 13:49:25,694 DEBUG io.AbstractEndPoint (AbstractEndPoint.java:onClose(108)) - onClose SelectChannelEndPoint@68f17b42{/10.25.124.251:50742<->8443,CLOSED,ISHUT,OSHUT,-,-,41639/300000,SslConnection}{io=0,kio=-1,kro=-1} 13:49:25,694 DEBUG io.AbstractConnection (AbstractConnection.java:next(275)) - FILLING-->IDLE HttpConnection@c0dee2d[IDLE,DecryptedEndPoint@1fbe6086{/10.25.124.251:50742<->8443,CLOSED,ISHUT,OSHUT,-,-,41639/300000,HttpConnection}->SelectChannelEndPoint@68f17b42{/10.25.124.251:50742<->8443,CLOSED,ISHUT,OSHUT,-,-,41639/300000,SslConnection}{io=0,kio=-1,kro=-1}][p=HttpParser{s=CLOSED,0 of 0},g=HttpGenerator{s=START},c=HttpChannelOverHttp@1ed0bbc4{r=0,c=false,a=IDLE,uri=}] 13:49:25,698 DEBUG io.SelectorManager (SelectorManager.java:select(602)) - Selector loop woken up from select, 1/1 selected 13:49:25,698 DEBUG io.SelectChannelEndPoint (SelectChannelEndPoint.java:setKeyInterests(160)) - Key interests updated 1 -> 0 on SelectChannelEndPoint@2b5d1c9f{/10.25.124.251:50741<->8443,Open,in,out,R,-,41151/300000,SslConnection}{io=1,kio=0,kro=1} 13:49:25,698 DEBUG io.SelectChannelEndPoint (SelectChannelEndPoint.java:updateLocalInterests(136)) - Local interests updating 1 -> 0 for SelectChannelEndPoint@2b5d1c9f{/10.25.124.251:50741<->8443,Open,in,out,R,-,41151/300000,SslConnection}{io=0,kio=0,kro=1} 13:49:25,698 DEBUG io.SelectorManager (SelectorManager.java:submit(480)) - Queued change org.eclipse.jetty.io.SelectChannelEndPoint$1@3551e6b6 13:49:25,698 DEBUG io.AbstractConnection (AbstractConnection.java:next(275)) - FILL_INTERESTED-->FILLING SslConnection@66e9da92{NOT_HANDSHAKING,eio=-1/-1,di=-1} -> HttpConnection@134eaa4d[FILL_INTERESTED,DecryptedEndPoint@45560086{/10.25.124.251:50741<->8443,Open,in,out,R,-,41151/300000,HttpConnection}->SelectChannelEndPoint@2b5d1c9f{/10.25.124.251:50741<->8443,Open,in,out,-,-,41151/300000,SslConnection}{io=0,kio=0,kro=1}][p=HttpParser{s=START,0 of -1},g=HttpGenerator{s=START},c=HttpChannelOverHttp@45b2cb22{r=2,c=false,a=IDLE,uri=}] 13:49:25,698 DEBUG ssl.SslConnection (SslConnection.java:onFillable(177)) - onFillable enter DecryptedEndPoint@45560086{/10.25.124.251:50741<->8443,Open,in,out,R,-,41151/300000,HttpConnection}->SelectChannelEndPoint@2b5d1c9f{/10.25.124.251:50741<->8443,Open,in,out,-,-,41151/300000,SslConnection}{io=0,kio=0,kro=1} 13:49:25,698 DEBUG io.AbstractConnection (AbstractConnection.java:next(275)) - FILL_INTERESTED-->FILLING HttpConnection@134eaa4d[FILLING,DecryptedEndPoint@45560086{/10.25.124.251:50741<->8443,Open,in,out,-,-,41151/300000,HttpConnection}->SelectChannelEndPoint@2b5d1c9f{/10.25.124.251:50741<->8443,Open,in,out,-,-,41151/300000,SslConnection}{io=0,kio=0,kro=1}][p=HttpParser{s=START,0 of -1},g=HttpGenerator{s=START},c=HttpChannelOverHttp@45b2cb22{r=2,c=false,a=IDLE,uri=}] 13:49:25,698 DEBUG ssl.SslConnection (SslConnection.java:onFillable(198)) - onFillable exit DecryptedEndPoint@45560086{/10.25.124.251:50741<->8443,Open,in,out,-,-,41151/300000,HttpConnection}->SelectChannelEndPoint@2b5d1c9f{/10.25.124.251:50741<->8443,Open,in,out,-,-,41151/300000,SslConnection}{io=0,kio=0,kro=1} 13:49:25,698 DEBUG server.HttpConnection (HttpConnection.java:onFillable(207)) - HttpConnection@134eaa4d[FILLING,DecryptedEndPoint@45560086{/10.25.124.251:50741<->8443,Open,in,out,-,-,41151/300000,HttpConnection}->SelectChannelEndPoint@2b5d1c9f{/10.25.124.251:50741<->8443,Open,in,out,-,-,41151/300000,SslConnection}{io=0,kio=0,kro=1}][p=HttpParser{s=START,0 of -1},g=HttpGenerator{s=START},c=HttpChannelOverHttp@45b2cb22{r=2,c=false,a=IDLE,uri=}] onFillable HttpChannelState@50b4ed20{s=IDLE i=true a=null} 13:49:25,698 DEBUG io.AbstractConnection (AbstractConnection.java:next(275)) - FILLING-->IDLE SslConnection@66e9da92{NOT_HANDSHAKING,eio=-1/-1,di=-1} -> HttpConnection@134eaa4d[FILLING,DecryptedEndPoint@45560086{/10.25.124.251:50741<->8443,Open,in,out,-,-,41151/300000,HttpConnection}->SelectChannelEndPoint@2b5d1c9f{/10.25.124.251:50741<->8443,Open,in,out,-,-,41151/300000,SslConnection}{io=0,kio=0,kro=1}][p=HttpParser{s=START,0 of -1},g=HttpGenerator{s=START},c=HttpChannelOverHttp@45b2cb22{r=2,c=false,a=IDLE,uri=}] 13:49:25,698 DEBUG io.SelectorManager (SelectorManager.java:runChange(525)) - Running change org.eclipse.jetty.io.SelectChannelEndPoint$1@3551e6b6 13:49:25,698 DEBUG io.SelectorManager (SelectorManager.java:select(599)) - Selector loop waiting on select 13:49:25,698 DEBUG ssl.SslConnection (SslConnection.java:fill(481)) - SslConnection@66e9da92{NOT_HANDSHAKING,eio=-1/-1,di=-1} -> HttpConnection@134eaa4d[FILLING,DecryptedEndPoint@45560086{/10.25.124.251:50741<->8443,Open,in,out,-,-,41151/300000,HttpConnection}->SelectChannelEndPoint@2b5d1c9f{/10.25.124.251:50741<->8443,Open,in,out,-,-,41151/300000,SslConnection}{io=0,kio=0,kro=1}][p=HttpParser{s=START,0 of -1},g=HttpGenerator{s=START},c=HttpChannelOverHttp@45b2cb22{r=2,c=false,a=IDLE,uri=}] fill enter 13:49:25,698 DEBUG io.ChannelEndPoint (ChannelEndPoint.java:fill(142)) - filled 1071 SelectChannelEndPoint@2b5d1c9f{/10.25.124.251:50741<->8443,Open,in,out,-,-,41151/300000,SslConnection}{io=0,kio=0,kro=1} 13:49:25,699 DEBUG ssl.SslConnection (SslConnection.java:fill(509)) - SslConnection@66e9da92{NOT_HANDSHAKING,eio=1071/-1,di=-1} -> HttpConnection@134eaa4d[FILLING,DecryptedEndPoint@45560086{/10.25.124.251:50741<->8443,Open,in,out,-,-,41152/300000,HttpConnection}->SelectChannelEndPoint@2b5d1c9f{/10.25.124.251:50741<->8443,Open,in,out,-,-,0/300000,SslConnection}{io=0,kio=0,kro=1}][p=HttpParser{s=START,0 of -1},g=HttpGenerator{s=START},c=HttpChannelOverHttp@45b2cb22{r=2,c=false,a=IDLE,uri=}] filled 1071 encrypted bytes 13:49:25,699 DEBUG ssl.SslConnection (SslConnection.java:fill(526)) - SslConnection@66e9da92{NOT_HANDSHAKING,eio=0/-1,di=-1} -> HttpConnection@134eaa4d[FILLING,DecryptedEndPoint@45560086{/10.25.124.251:50741<->8443,Open,in,out,-,-,41152/300000,HttpConnection}->SelectChannelEndPoint@2b5d1c9f{/10.25.124.251:50741<->8443,Open,in,out,-,-,0/300000,SslConnection}{io=0,kio=0,kro=1}][p=HttpParser{s=START,0 of -1},g=HttpGenerator{s=START},c=HttpChannelOverHttp@45b2cb22{r=2,c=false,a=IDLE,uri=}] unwrap Status = OK HandshakeStatus = NOT_HANDSHAKING bytesConsumed = 1071 bytesProduced = 1042 13:49:25,699 DEBUG ssl.SslConnection (SslConnection.java:fill(689)) - SslConnection@66e9da92{NOT_HANDSHAKING,eio=-1/-1,di=-1} -> HttpConnection@134eaa4d[FILLING,DecryptedEndPoint@45560086{/10.25.124.251:50741<->8443,Open,in,out,-,-,41152/300000,HttpConnection}->SelectChannelEndPoint@2b5d1c9f{/10.25.124.251:50741<->8443,Open,in,out,-,-,0/300000,SslConnection}{io=0,kio=0,kro=1}][p=HttpParser{s=START,0 of -1},g=HttpGenerator{s=START},c=HttpChannelOverHttp@45b2cb22{r=2,c=false,a=IDLE,uri=}] fill exit

3 REPLIES 3

New Contributor

I also tried few different options as below still same issue

updated the hostnames ( two nodes and ambari host ) /etc/hosts file at both the nodes.

added knoxsso.cookie.secure.only = true in knoxsso-topology config

Please help me here

@Nara g did you find a solution to this problem?

Rising Star

@Nara g Please try adding a valid FQDN as host name in your /etc/hosts entry so that a cookie can be set for valid domain in your Browser. For example, host1.narag.com <ip_address_of_your_host1>. Make similar entries for your other hosts. Later try accessing your Ranger host with complete URL, for example https://ranger.narag.com:6080