You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@ambari.apache.org by Andrew Onischuk <ao...@hortonworks.com> on 2015/02/06 16:58:16 UTC

Review Request 30732: Ambari job view does not load with HTTPS ATS setup

-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/30732/
-----------------------------------------------------------

Review request for Ambari and Alejandro Fernandez.


Bugs: AMBARI-9520
    https://issues.apache.org/jira/browse/AMBARI-9520


Repository: ambari


Description
-------

PROBLEM:

HDP 2.2.0, Ambari 1.7.0, kerberos cluster, HTTPS enabled.  
ambari-server setup-security has run to enable ambari JAAS. Also I have tried
disable ATS http authentication but it doesn't help. A similar cluster without
HTTPS does not have this problem.

In HTTPS ATS set up, yarn.http.policy=HTTPS_ONLY, ambari job view does not
load. The url generated by Ambari

<http://hdpsecd01.secd.hwxsup.com:8080/views/JOBS/1.0.0/hdpsecd/proxy?url=http
s://hdpsecd02.secd.hwxsup.com:8190/ws/v1/timeline/HIVE_QUERY_ID>

does not load

<http://hdpsecd01.secd.hwxsup.com:8080/proxy?url=https://hdpsecd02.secd.hwxsup
.com:8190/ws/v1/timeline/HIVE_QUERY_ID>

gives error "cannot connect"

meanwhile, the ATS url works fine

<https://hdpsecd02.secd.hwxsup.com:8190/ws/v1/timeline/HIVE_QUERY_ID>


Diffs
-----

  ambari-server/src/main/java/org/apache/ambari/server/view/HttpImpersonatorImpl.java ed5ef3c 

Diff: https://reviews.apache.org/r/30732/diff/


Testing
-------

mvn clean test


Thanks,

Andrew Onischuk


Re: Review Request 30732: Ambari job view does not load with HTTPS ATS setup

Posted by Alejandro Fernandez <af...@hortonworks.com>.
-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/30732/#review71454
-----------------------------------------------------------

Ship it!


Ship It!

- Alejandro Fernandez


On Feb. 6, 2015, 3:58 p.m., Andrew Onischuk wrote:
> 
> -----------------------------------------------------------
> This is an automatically generated e-mail. To reply, visit:
> https://reviews.apache.org/r/30732/
> -----------------------------------------------------------
> 
> (Updated Feb. 6, 2015, 3:58 p.m.)
> 
> 
> Review request for Ambari and Alejandro Fernandez.
> 
> 
> Bugs: AMBARI-9520
>     https://issues.apache.org/jira/browse/AMBARI-9520
> 
> 
> Repository: ambari
> 
> 
> Description
> -------
> 
> PROBLEM:
> 
> HDP 2.2.0, Ambari 1.7.0, kerberos cluster, HTTPS enabled.  
> ambari-server setup-security has run to enable ambari JAAS. Also I have tried
> disable ATS http authentication but it doesn't help. A similar cluster without
> HTTPS does not have this problem.
> 
> In HTTPS ATS set up, yarn.http.policy=HTTPS_ONLY, ambari job view does not
> load. The url generated by Ambari
> 
> <http://hdpsecd01.secd.hwxsup.com:8080/views/JOBS/1.0.0/hdpsecd/proxy?url=http
> s://hdpsecd02.secd.hwxsup.com:8190/ws/v1/timeline/HIVE_QUERY_ID>
> 
> does not load
> 
> <http://hdpsecd01.secd.hwxsup.com:8080/proxy?url=https://hdpsecd02.secd.hwxsup
> .com:8190/ws/v1/timeline/HIVE_QUERY_ID>
> 
> gives error "cannot connect"
> 
> meanwhile, the ATS url works fine
> 
> <https://hdpsecd02.secd.hwxsup.com:8190/ws/v1/timeline/HIVE_QUERY_ID>
> 
> 
> Diffs
> -----
> 
>   ambari-server/src/main/java/org/apache/ambari/server/view/HttpImpersonatorImpl.java ed5ef3c 
> 
> Diff: https://reviews.apache.org/r/30732/diff/
> 
> 
> Testing
> -------
> 
> mvn clean test
> 
> 
> Thanks,
> 
> Andrew Onischuk
> 
>