[jira] [Commented] (AMBARI-14384) Ambari Metrics doesn't use SPNEGO to authenticate

["Siddharth Wagle (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/AMBARI-14384?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15282963#comment-15282963 ] 

Siddharth Wagle commented on AMBARI-14384:
------------------------------------------

[~wardviaene] AMS does not support authentication presently. I have changed this to an improvement and made it a part of the Epic.

*Note*: AMS API is used by Ambari and Grafana and both these endpoints support authentication and https.
HTTPS support was recently added for AMS API as well.

The workaround to guard the API is to only make the Collector ip visible internally to the Hadoop cluster so that the sinks can talk to the collector and Ambari and Grafana can read from it.

> Ambari Metrics doesn't use SPNEGO to authenticate
> -------------------------------------------------
>
>                 Key: AMBARI-14384
>                 URL: https://issues.apache.org/jira/browse/AMBARI-14384
>             Project: Ambari
>          Issue Type: Improvement
>          Components: ambari-metrics
>    Affects Versions: 2.1.2
>            Reporter: Ward Viaene
>
> * Kerberos enabled cluster
> * SPNEGO enabled on hadoop APIs
> /var/log/ambari-metrics-monitor/ambari-metrics-monitor.out:
> 2015-12-15 13:26:30,663 [INFO] emitter.py:101 - server: http://metrics-collector:6188/ws/v1/timeline/metrics
> 2015-12-15 13:26:30,671 [WARNING] emitter.py:84 - Error sending metrics to server. HTTP Error 401: Authentication required
> 2015-12-15 13:26:30,671 [WARNING] emitter.py:90 - Retrying after 5 ...
> The same problem appears to be happening on the sinks:
> * ambari/ambari-metrics/ambari-metrics-common/src/main/java/org/apache/hadoop/metrics2/sink/timeline/AbstractTimelineMetricsSink.java
> ** No SPNEGO support



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)