Support Questions
Find answers, ask questions, and share your expertise
Announcements
Alert: Welcome to the Unified Cloudera Community. Former HCC members be sure to read and learn how to activate your account here.

NameNode and Yarn and Storm and HBase UI Cannot Accessed.

Highlighted

NameNode and Yarn and Storm and HBase UI Cannot Accessed.

Contributor

After I "Enable Kerberos", the ui that I want to access responsing is

HTTP ERROR 401

Problem accessing /index.html. Reason:

    org.apache.hadoop.security.authentication.util.SignerException: Invalid signed text: 

Powered by Jetty://

16 REPLIES 16

Re: NameNode and Yarn and Storm and HBase UI Cannot Accessed.

Super Mentor

@Zhao Chaofeng

What is the value of "yarn.timeline-service.http-authentication.type" simple ?

- If it is "kerberos" then have you setup the SPNEGO properly ?

.

Re: NameNode and Yarn and Storm and HBase UI Cannot Accessed.

Contributor

Re: NameNode and Yarn and Storm and HBase UI Cannot Accessed.

Super Mentor

@Zhao Chaofeng

Have you setup your browser for Kerberos Authentication? Like setting "network.negotiate-auth.trusted-uris" in Firefox? And Enabled firefox to use native gsslib for authentication

Example:

https://docs.oracle.com/cd/E41633_01/pt853pbh1/eng/pt/tsec/task_EnablingKerberosAuthenticationinFire...

Re: NameNode and Yarn and Storm and HBase UI Cannot Accessed.

Contributor

Yes, the NameNode UI cannot be accessed after I "Enable Kerberos".

Re: NameNode and Yarn and Storm and HBase UI Cannot Accessed.

Super Mentor

@Zhao Chaofeng

Please check the following link which talks about "Enabling SPNEGO Authentication for Hadoop"

https://docs.hortonworks.com/HDPDocuments/Ambari-2.2.1.0/bk_Ambari_Security_Guide/content/_configuri...

Re: NameNode and Yarn and Storm and HBase UI Cannot Accessed.

Contributor

Yes, I have checked it. I am puzzeld whether "/etc/security/http_secret" is correct. Maybe it should be "/etc/security/keytabs/http_secret"?

Re: NameNode and Yarn and Storm and HBase UI Cannot Accessed.

Super Mentor

@Zhao Chaofeng

As per the doc the path should be : "/etc/security/http_secret" but it will be easy to find that out

dd if=/dev/urandom of=/etc/security/http_secret bs=1024 count=1
chown hdfs:hadoop /etc/security/http_secret
chmod 440 /etc/security/http_secret

- It's path depends on the property "hadoop.http.authentication.signature.secret.file"

.

Re: NameNode and Yarn and Storm and HBase UI Cannot Accessed.

Contributor

I do it as you talk. But the NameNode UI cannot be accessed, so I don't know why.

Re: NameNode and Yarn and Storm and HBase UI Cannot Accessed.

Contributor

And when I want to browse HDFS, it responses "Authentication failed when trying to open /webhdfs/v1/?op=LISTSTATUS: Unauthorized.".

Don't have an account?
Coming from Hortonworks? Activate your account here