[AMBARI-24536] Ambari SPNEGO breaks SSO redirect

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.6.0
• Fix Version/s: 2.7.3
• Component/s: ambari-server, security
• Labels: kerberos pull-request-available security spnego sso
• Assignee: Robert Levas
• Reporter: Sean Roberts
• Created: 24/Aug/18 12:03
• Updated: 22/Oct/18 21:00
• Resolved: 30/Aug/18 20:20

Description

When SPNEGO is enabled (`ambari-server setup-kerberos`), the SSO (`ambari-server setup-sso`) redirect no longer works.

How to reproduce:

1. Enable SSO `ambari-server setup-sso`
2. `ambari-server restart`
3. Visit Ambari and notice that you are redirected to the SSO system (i.e. Knox)
4. Enable SPNEGO `ambari-server setup-kerberos`
5. `ambari-server restart`
6. Visit Ambari and notice that you are NOT redirected to the SSO system (i.e. Knox)

Issue Links

• links to: GitHub Pull Request #2190
• links to: GitHub Pull Request #2191