yes. I do both pamtester and curl on the knox host. On Sat, Jun 30, 2018 at 6:36 AM, larry mccay <[email protected]> wrote:
> Are you on the Knox host when testing with Pam tester? The accounts will > need to be on the Knox host. > > > > On Sat, Jun 30, 2018, 2:22 AM Lian Jiang <[email protected]> wrote: > >> I am using OS auth for knox and have verified the username and password >> work: >> >> sudo pamtester -v knox guest authenticate >> pamtester: invoking pam_start(knox, guest, ...) >> pamtester: performing operation - authenticate >> Password: >> pamtester: successfully authenticated >> >> However, my curl command failed: >> >> curl -ik -u guest:"{PASSWORD}" http://test-namenode.subnet1. >> hadoop.oraclevcn.com:8443/gateway/ui/webhdfs/v1/user/?op=LISTSTATUS >> >> The error is: >> Jun 30 06:16:03 test-namenode unix_chkpwd[37385]: check pass; user unknown >> Jun 30 06:16:03 test-namenode unix_chkpwd[37385]: password check failed >> for user (guest) >> Jun 30 06:16:03 test-namenode java: pam_unix(knox:auth): authentication >> failure; logname= uid=2018 euid=2018 tty= ruser= rhost= user=guest >> >> >> Any idea how I can debug? Appreciate any help. >> >> >>
