ranger-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Qiang Zhang <zhangqia...@zte.com.cn>
Subject Re: Review Request 66509: RANGER-2060 : Knox proxy with knox-sso is not working for ranger
Date Wed, 11 Apr 2018 01:19:27 GMT

-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/66509/#review200863
-----------------------------------------------------------


Ship it!




Ship It!

- Qiang Zhang


On April 9, 2018, 2:33 p.m., Vishal Suvagia wrote:
> 
> -----------------------------------------------------------
> This is an automatically generated e-mail. To reply, visit:
> https://reviews.apache.org/r/66509/
> -----------------------------------------------------------
> 
> (Updated April 9, 2018, 2:33 p.m.)
> 
> 
> Review request for ranger, Ankita Sinha, bhavik patel, Gautam Borad, Abhay Kulkarni,
Madhan Neethiraj, Mehul Parikh, Pradeep Agrawal, Sailaja Polavarapu, and Velmurugan Periasamy.
> 
> 
> Bugs: RANGER-2060
>     https://issues.apache.org/jira/browse/RANGER-2060
> 
> 
> Repository: ranger
> 
> 
> Description
> -------
> 
> Knox proxy with Knox-SSO is not working in a case when HA is enabled for both Ranger
and Knox.
> 
> If Ranger-HA url is rangerha.abc.com:6080 with individual Ranger hosts as ranger1.abc.com:6080
and ranger2.abc.com:6080 with Knox hosted on  knoxha.abc.com:8443 and individual knox hosts
as knox1.abc.com and knox2.abc.com.
> 
> If Ranger load-balancer URL is used in the knox topology for knox-proxy ui.xml, redirected
url gets corrupted as:
> knoxha.abc.com:8443/gateway/....?originalUrl=https://knoxha.abc.com:8443,%20knox1.abc.com:8443/gateway/<topology>/ranger
> 
> Additionally: Individually enabling Knox-SSO gives 401-Unauthorized error for Ranger
to login.
> 
> 
> Diffs
> -----
> 
>   security-admin/src/main/java/org/apache/ranger/security/web/filter/RangerKRBAuthenticationFilter.java
ec6d78d 
>   security-admin/src/main/java/org/apache/ranger/security/web/filter/RangerSSOAuthenticationFilter.java
22ba524 
> 
> 
> Diff: https://reviews.apache.org/r/66509/diff/1/
> 
> 
> Testing
> -------
> 
> Verified Knox-SSO and Knox-Proxy authentication to be working for Ranger-Admin in simple
and kerberos enabled environments.
> 
> 
> Thanks,
> 
> Vishal Suvagia
> 
>


Mime
  • Unnamed multipart/alternative (inline, None, 0 bytes)
View raw message