[RANGER-2060] Knox proxy with knox-sso is not working for ranger

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.0.0
• Fix Version/s: 1.1.0, 1.0.1
• Component/s: Ranger
• Assignee: Vishal Suvagia
• Reporter: Deepak Sharma
• Created: 07/Apr/18 05:42
• Updated: 26/Sep/18 22:42
• Resolved: 11/Apr/18 10:21

Description

Knox proxy with Knox-SSO is not working in a case when HA is enabled for both Ranger and Knox.

If Ranger-HA url is rangerha.abc.com:6080 with individual Ranger hosts as ranger1.abc.com:6080 and ranger2.abc.com:6080 with Knox hosted on  knoxha.abc.com:8443 and individual knox hosts as knox1.abc.com and knox2.abc.com.

If Ranger load-balancer URL is used in the knox topology for knox-proxy ui.xml, redirected url gets corrupted as:
knoxha.abc.com:8443/gateway/....?originalUrl=https://knoxha.abc.com:8443,%20knox1.abc.com:8443/gateway/<topology>/ranger

Additionally: Individually enabling Knox-SSO gives 401-Unauthorized error for Ranger to login.

Issue Links

• links to: Apache Review Request 66509