Hi ,
We were trying with knox gateway to access hadoop cluster which is
secured(kerborized). But Using Kerberos authentication we couldn’t access the
cluster. Same kerberos key we could access the data using httpFs. Can anybody
Help-us for right configuration for Knox with kerberos.
====-sh-4.1$ /usr/bin/curl -ik --negotiate -u : -X GET
'https://hera-phx-zk-3.vip.ebay.com:8443/gateway/hera/webhdfs/v1/?op=LISTSTATUS'HTTP/1.1
401 Authentication requiredWWW-Authenticate: NegotiateSet-Cookie:
hadoop.auth=; Path=/export/home/b_knox/knox/conf; Domain=ebay.com; Expires=Thu,
01-Jan-1970 00:00:00 GMT; Secure; HttpOnlyContent-Type:
text/html;charset=ISO-8859-1Cache-Control:
must-revalidate,no-cache,no-storeContent-Length: 1417Server:
Jetty(8.1.14.v20131031)
HTTP/1.1 500 Server ErrorSet-Cookie:
hadoop.auth=u=b_knox&[email protected]&t=kerberos&e=1449829226535&s=yuiBjLQqkWagz2ISmzQGmRqrXjE=;
Path=/export/home/b_knox/knox/conf; Domain=ebay.com; Expires=Fri, 11-Dec-2015
10:20:26 GMT; Secure; HttpOnlyContent-Type:
text/html;charset=ISO-8859-1Cache-Control:
must-revalidate,no-cache,no-storeContent-Length: 1395Server:
Jetty(8.1.14.v20131031)
<html><head><meta http-equiv="Content-Type" content="text/html;
charset=ISO-8859-1"/><title>Error 500 Server Error</title></head><body><h2>HTTP
ERROR 500</h2><p>Problem accessing /gateway/hera/webhdfs/v1/. Reason:<pre>
Server Error</pre></p><hr /><i><small>Powered by Jetty://</small></i><br/><br/>
----- httpFs----Worked with same kerberos-----sh-4.1$ curl -i -vvv --negotiate
-u : "http://hera-phx-nn-2.vip.ebay.com:14000/webhdfs/v1/hbase/?op=liststatus";
> User-Agent: curl/7.19.7 (x86_64-redhat-linux-gnu) libcurl/7.19.7 NSS/3.13.1.0
> zlib/1.2.3 libidn/1.18 libssh2/1.2.2> Host: hera-phx-nn-2.vip.ebay.com:14000>
> Accept: */*>< HTTP/1.1 200 OKHTTP/1.1 200 OK< Server:
> Apache-Coyote/1.1Server: Apache-Coyote/1.1< Set-Cookie:
> hadoop.auth=u=b_knox&[email protected]&t=composite&e=1449863459356&s=df8H1d7PwSqHVC7T62+yXNYq7i4=;
> Path=/; Expires=Fri, 11-Dec-2015 19:50:59 GMT; HttpOnlySet-Cookie:
> hadoop.auth=u=b_knox&[email protected]&t=composite&e=1449863459356&s=df8H1d7PwSqHVC7T62+yXNYq7i4=;
> Path=/; Expires=Fri, 11-Dec-2015 19:50:59 GMT; HttpOnly< Content-Type:
> application/jsonContent-Type: application/json< Transfer-Encoding:
> chunkedTransfer-Encoding: chunked< Date: Fri, 11 Dec 2015 09:51:03 GMTDate:
> Fri, 11 Dec 2015 09:51:03 GMT
< \Rajesh
