Exactly what I am looking for. thank you ... View more

@Bernhard Walter @Kevin Minder Thanks for sharing this. Works Great. But the livy job is getting submitted as "knox". I did looked into the section rewrite rule definition, and I have everything like that in my rewrite.xml, but still its getting submitted as "knox". Is there any additional things needed to be done at the knox side to submit livy job as user who submits the job not as "knox" ? ... View more

@mliem: We are using AD. This issue we are facing in our new HDP 2.5 build. We have this one working with no issues in our previous cluster which is HDP2.3.2 version(using same AD server). I suspect its something to do with the configs. I could find the same error reported in hbase (http://gethue.com/hbase-browsing-with-doas-impersonation-and-kerberos/) search for Caused by: org.apache.hadoop.hbase.thrift.HttpAuthenticationException: Authorization header received from the client is empty. ... View more

I couldn't enable ssl in ranger. ... View more

Hi Kevin Minder- I am at a similar situation right now. Trying to enable SSL in ranger (Version 0.5). I could see some some config props in Ambari ranger, so i am guess SSL enabling is possible and changed following props, - ranger.service.https.attrib.ssl.enabled : true - ranger.service.https.port :6182 - HTTP enabled :false - External URL : https://hostname:6182 After trying out above steps to enable ssl for ranger i end up getting an alert connection refused error to the url https://hostname:6182 and the ranger UI doesn't show up. I wonder if enabling SSL is possible for ranger UI Ver 0.5 ( https://issues.apache.org/jira/browse/RANGER-795) or is there any other configs that I missed ? ... View more