Member since
03-04-2016
165
Posts
35
Kudos Received
7
Solutions
My Accepted Solutions
Title | Views | Posted |
---|---|---|
1755 | 06-20-2017 03:08 PM | |
9003 | 05-11-2017 09:59 AM | |
8978 | 01-12-2017 01:50 PM | |
1337 | 10-26-2016 03:02 PM | |
5465 | 09-06-2016 07:40 AM |
06-03-2016
11:25 AM
The problem was that I had WEBHDFS in topology in format hdfs:// instead of http://
... View more
06-03-2016
10:36 AM
EDIT: It is worth to notice that I am using https for Ambari, instead of http. When I try to access Hbase I got a WARN that connection is refused, it is trying to connect using http instead of https. Here is my knox gateway-audit.log 16/06/03
12:31:29
||2ebbd434-8238-402e-9979-7e7233669d27|audit|WEBHDFS||||access|uri|/gateway/default/webhdfs/v1/?op=LISTSTATUS|unavailable|
16/06/03 12:31:29
||2ebbd434-8238-402e-9979-7e7233669d27|audit|WEBHDFS|my_user|||authentication|uri|/gateway/default/webhdfs/v1/?op=LISTSTATUS|success|
16/06/03 12:31:29
||2ebbd434-8238-402e-9979-7e7233669d27|audit|WEBHDFS|my_user|||authentication|uri|/gateway/default/webhdfs/v1/?op=LISTSTATUS|success|Groups:
[my_group]
16/06/03 12:31:29
||2ebbd434-8238-402e-9979-7e7233669d27|audit|WEBHDFS|my_user|||dispatch|uri|hdfs://my_host:50070/webhdfs/v1/?op=LISTSTATUS&user.name=my_user|failure|
16/06/03 12:31:29
||2ebbd434-8238-402e-9979-7e7233669d27|audit|WEBHDFS|my_user|||dispatch|uri|hdfs://my_host:50070/webhdfs/v1/?op=LISTSTATUS&user.name=my_user|unavailable|
16/06/03 12:31:29
||2ebbd434-8238-402e-9979-7e7233669d27|audit|WEBHDFS|my_user|||access|uri|/gateway/default/webhdfs/v1/?op=LISTSTATUS|failure|
... View more
06-03-2016
09:49 AM
Hi guys, I have a problem with Knox. I am using HDP 2.3.2 with Ambari 2.1.1. I connected Knox to LDAP/AD successfully. I get 403 Forbidden when I do not grant access via policies in Ranger or 401 Unauthorized when I provid invalid credentials. My user and group search base is specified only to one user and one group because of ldap sizelimit exceeded (I only want to test that it is working). I am pretty sure that it can be a permissions problem. Below I described my error. Please find enclosed full gateway.log. Thank you in advance gateway.txt When I try to run a command: curl -iku user:pass -X GET 'https://localhost:8443/gateway/default/webhdfs/v1/?op=LISTSTATUS' I got an error: ERROR hadoop.gateway (AbstractGatewayFilter.java:doFilter(66)) - Failed to execute filter: javax.servlet.ServletException: org.apache.shiro.subject.ExecutionException: java.security.PrivilegedActionException: java.io.IOException: Service connectivity error. 2016-06-03 11:33:30,070 ERROR hadoop.gateway (GatewayFilter.java:doFilter(135)) - Gateway processing failed: javax.servlet.ServletException: org.apache.shiro.subject.ExecutionException: java.security.PrivilegedActionException: java.io.IOException: Service connectivity error. at java.security.AccessController.doPrivileged(Native Method)
at javax.security.auth.Subject.doAs(Subject.java:422)
... View more
Labels:
- Labels:
-
Apache Knox
06-03-2016
09:18 AM
Thank you guys! I have got the limit up to 1000.
... View more
06-02-2016
05:07 PM
It is a fresh installation with one additional Ranger Admin installed and configured with nginx to redirect to the working one.
... View more
06-02-2016
05:06 PM
@Jitendra Yadav I am using HDP 2.3.2 with Ambari 2.1.1 @bhagan But why this limit restricts to Knox only. I have the same search bases in beeline and Ranger and it works. Thank you for answers
... View more
06-02-2016
03:25 PM
1 Kudo
Hi, I got an error that sizelimit of my search base in Knox exceeded. Is there any possibility to expand the limit? I use the same LDAP searchbase for Ranger and everything is ok, so it is a Knox problem, not AD/LDAP (I read that I need to expand it in LDAP Admin). Thank you in advance! 🙂
... View more
Labels:
- Labels:
-
Apache Knox
06-02-2016
02:28 PM
1 Kudo
@Sagar Shimpi I found the solution. All I had to do is change ranger.plugin.knox.policy.rest.url from {{policy_mgr_url}} to address one of those two hosts where Ranger Admin is installed
... View more
06-02-2016
02:13 PM
@Sagar Shimpi 2.1.1
... View more
06-02-2016
01:13 PM
@Sagar Shimpi thank you for quick response. I already had that box checked and restarted both services. xa.portal.log shows no errors or warns
... View more