Member since
09-11-2015
115
Posts
126
Kudos Received
15
Solutions
My Accepted Solutions
Title | Views | Posted |
---|---|---|
3052 | 08-15-2016 05:48 PM | |
2864 | 05-31-2016 06:19 PM | |
2411 | 05-11-2016 03:10 PM | |
1862 | 05-10-2016 07:06 PM | |
4754 | 05-02-2016 06:25 PM |
01-21-2016
07:05 PM
1 Kudo
You are specifying a bind password but no bind user. Try adding the -D parameter with your bind DN (see manpage for details).
... View more
01-21-2016
03:58 PM
1 Kudo
This might be sufficient to keep honest people honest. For a user that has write access on the filesystem, it's trivial to override hive-env.sh
... View more
01-20-2016
04:02 PM
1 Kudo
This is correct. You can hide the standard binary from end users, but if they can create and execute arbitrary files on hosts with access to the cluster then there is no workaround that is 100% effective. You should restrict access to the entire cluster (via a firewall and/or other means), and users who need to access Hive should do so from through HiveServer2 behind a Knox gateway.
... View more
01-18-2016
07:14 PM
4 Kudos
When I forked structor to add Blueprints support, I just used the API call in a while loop: ProgressPercent=`curl -s --user admin:admin -H 'X-Requested-By:mycompany' -X GET http://<ambari-hostname>:8080/api/v1/clusters/<cluster-name>/requests/1 | grep progress_percent | awk '{print $3}' | cut -d . -f 1`
echo " Progress: $ProgressPercent"
while [[ `echo $ProgressPercent | grep -v 100` ]]; do
ProgressPercent=`curl -s --user admin:admin -H 'X-Requested-By:mycompany' -X GET http://<ambari-hostname>:8080/api/v1/clusters/<cluster-name>/requests/1 | grep progress_percent | awk '{print $3}' | cut -d . -f 1`
tput cuu1
echo " Progress: $ProgressPercent %"
sleep 2
done
echo "Cluster build is complete."
... View more
01-13-2016
04:42 PM
1 Kudo
I discovered an internal doc by @Chris Nauroth that provides best practices and troubleshooting tips. Perhaps he would like to share it as a KB when time permits.
... View more
12-18-2015
07:25 PM
Additional examples are available in the Apache Knox Users Guide under Authorization
... View more
12-16-2015
06:13 PM
2 Kudos
To remove the need for sslTrustStore & trustStorePassword you could also import the Knox SSL certificate as trusted into the cacerts truststore used by your java application, or use a CA-signed cert.
... View more
11-19-2015
03:34 AM
For a Knox repo that appears to be properly configured, auto-complete of the topology names is working as expected: The service names do not auto-complete. For example, WEBHDFS: Is there a way to make the service names auto-complete too, or is this a new feature request?
... View more
Labels:
- Labels:
-
Apache Knox
-
Apache Ranger
11-12-2015
11:16 PM
Hi @rxu@hortonworks.com, here is a KB on this topic that I posted yesterday: Control user access to Capacity Scheduler queues.
... View more
11-12-2015
04:03 PM
The openweathermap example in the Knox Dev Guide looks great as a reference for extending Knox yourself. Do you know where some existing community extensions, like the Falcon or NN/RM UIs, can be found? I checked the Hortonworks Gallery with no luck.
... View more