Description
Ambari URL:-
http://hostname:8080/#/main/views/HIVE/2.0.0/AUTO_HIVE20_INSTANCE
Knox proxy enabled for Ambari:-
https://hostname:8443/gateway/ui/ambari/#/main/views/HIVE/2.0.0/AUTO_HIVE20_INSTANCE
steps to reproduce:-
1- Configure Knox Proxy for Ambari.
create ui.xml in /usr/hdp/current/knox-server/conf/topologies
Note:- I have already deployed ui.xml topology in this path. There is no Knox restart required.
below is the sample ui.xml
2- Invoke Ambari through knox proxy
https://hostname:8443/gateway/ui/ambari/#/login
3- Click on hive2.0 view
Notice all the service checks failed messages. Attached is screenshot
Note:- If you go through Ambari URL then you will be able to access HIVE2.0 view.
http://hostname:8080/#/main/views/HIVE/2.0.0/AUTO_HIVE20_INSTANCE
ui.xml:-
<topology>
<gateway>
<provider>
<role>authentication</role>
<name>ShiroProvider</name>
<enabled>true</enabled>
<param>
<name>sessionTimeout</name>
<value>30</value>
</param>
<param>
<name>main.ldapRealm</name>
<value>org.apache.hadoop.gateway.shirorealm.KnoxLdapRealm</value>
</param>
<param>
<name>main.ldapRealm.userDnTemplate</name>
<value>uid=
,ou=people,dc=hadoop,dc=apache,dc=org</value>
</param>
<param>
<name>main.ldapRealm.contextFactory.url</name>
<value>ldap://<ldapinstance>:<ldapport></value>
</param>
<param>
<name>main.ldapRealm.contextFactory.authenticationMechanism</name>
<value>simple</value>
</param>
<param>
<name>urls./**</name>
<value>authcBasic</value>
</param>
</provider>
<provider>
<role>identity-assertion</role>
<name>Default</name>
<enabled>true</enabled>
</provider>
</gateway>
<service>
<role>AMBARI</role>
<url>http://hostname:8080</url>
</service>
<service>
<role>AMBARIUI</role>
<url>http://hostname:8080</url>
</service>
</topology>