Downloading Client Configuration Files

This topic describes how to download client configuration files for various cluster services using Cloudera Manager. It also provides specific instructions for resolving HTTP 500 errors when downloading configurations through an Apache Knox gateway.

Log into Cloudera Manager as an Administrator.
On the Cloudera Manager home page, navigate to the Status tab, click to the right of the cluster name and select View Client Configuration URLs from the list view.
Click a link or save the link URL and download the file using wget or curl.

Downloading through Apache Knox

When you use a gateway like Apache Knox to download client configurations for services with dependencies (such as HBase, Sentry, or MapReduce), the request might fail with an HTTP 500 error. This occurs if Cloudera Manager does not force authentication for these requests.

Resolution

To ensure successful downloads through Knox, enable the client_config_auth parameter in Cloudera Manager. This setting forces Knox to establish a Kerberos session through SPNEGO, which provides the necessary permissions for Cloudera Manager to resolve service dependencies.

To enable this setting through the Cloudera Manager API, run the following curl command (replace placeholders with your environment details):

curl -u <admin_user>:<admin_pass> -X PUT \
"https://<cm-host>:7183/api/v43/cm/config" \
-H "Content-Type: application/json" \
-d '{
  "items": [
    {
      "name": "client_config_auth",
      "value": "true"
    }
  ]
}'

Table 1. Troubleshooting Knox Downloads
Error	Cause and Solution
HTTP 500	This typically indicates `client_config_auth` is set to `false`, causing an anonymous context failure during dependency resolution. Set the parameter to `true`.
HTTP 401	This is expected behavior when `client_config_auth` is `true`. Knox should handle this by providing a Kerberos ticket. Ensure the Knox service user has a valid keytab and the `gateway.dispatch.whitelist` allows communication with the Cloudera Manager host.