Unable to access Hue from Knox Gateway UI
If you are unable to access Hue from the Knox Gateway UI, then it is possible that the KnoxSpnegoDjangoBackend property is not configured for Hue. Cloudera Manager does not set the Authentication Backend to KnoxSpnegoDjangoBackend by default even though Knox is enabled on your cluster.
- Sign in to Cloudera Manager as an Administrator.
- Go to Authentication Backend field. and search for the
Select desktop.auth.backend.KnoxSpnegoDjangoBackend from
Go to Hue Service Advanced Configuration Snippet (Safety Valve) for
hue_safety_valve.ini) and comment or remove any SAML-specific
configurations, if present.
- Click Save Changes.
and note down the hostnames of the Knox Gateways.You must provide these details in the next step.If you have set up Knox in High-Availablity (HA) mode, then you can see more than one Knox Gateways listed on the Instances tab.
- Go back to Knox Proxy Hosts field. and search for the
Enter the hostname of the Knox Gateway that you noted earlier.
If you have set up Knox HA, then click + to add another hostname.
- If you have deployed a Hue Load Balancer, then you must specify the Load Balancer hostname in the Knox Proxy Hosts field by clicking +.
Click Save Changes.
You would see the following warning:
Role is missing Kerberos keytab. Go to the Kerberos Credentials page and click the Generate Missing Credentials button.
- Click Administration on the Cloudera Manager left navigation panel and select Security.
Go to the Kerberos Credentials tab and click
Generate Missing Credentials.
A pop-up showing the status is displayed.
Go to Restart
next to Actions.
On the Stale Configurations page, click Restart
The Restart Stale Services wizard is displayed.
On the Review Changes page, select Redeploy
client configuration, and click Restart
The Command Details page shows the live status as the service restarts.When all the steps are complete, click Finish.
From the Hue service page, click
.The Knox Gateway UI is displayed.
On the General Proxy Information page, expand the CDP
Proxy topology by clicking + cdp-proxy under
The list of services that are configured with the cdp-proxy topology is displayed.
Click on the Hue logo.
You should be able to log in to the Hue web UI.You can also log into Hue using the following URL: