@mjarnold,
I posted this somewhere else earlier and I think it will help answer your question:
Workaround to revert to pre-CDH 5.10 behavior:
- Edit Hue Service Advanced Configuration Snippet (Safety Valve) for hue_safety_valve.ini
- add allowed_hosts in the [desktop] section like so:
NOTE: The goal in changing the default to something more restrictive was to improve security. Now that we are aware of the security measure, if desired, restriction can be added via a comma-separated list of hosts and IPs like this:
See the following on how to configure if you choose that route:
https://docs.djangoproject.com/en/1.10/ref/settings/#allowed-hosts
To round out the above explanation, before CDH 5.10, "allowed_hosts=*" was the default. We tried changing the default to help promote security as outlined in the above Django page.
Since our change to allowed_hosts to help enhance security had unanticipated negative experiences for existing users, we are reverting the CDH default to "allowed_hosts=*". We'll opt to document it better and also build in validation warnings in Cloudera Manager to strongly recommend not leaving "allowed_hosts=*" unless that is the desired configuration.
The security risk is described in the django documentation (see the link above).
Ben
