Hortonworks.com
  • Explore
    • All Tags
    • All Questions
    • All Articles
    • All Ideas
    • All Repos
    • All SKB
    • All Users
    • All Badges
    • Leaderboard
  • Create
    • Ask a question
    • Create Article
    • Post Idea
    • Add Repo
  • Tracks
    • All Tracks
    • Community Help
    • Cloud & Operations
    • CyberSecurity
    • Data Ingestion & Streaming
    • Data Processing
    • Data Science & Advanced Analytics
    • Design & Architecture
    • Governance & Lifecycle
    • Hadoop Core
    • Sandbox & Learning
    • Security
    • Solutions
  • Login
HCC Hortonworks Community Connection
  • Home /
  • Security /
avatar image

Knox UI without internet

Question by Kirill Peskov Jan 24 at 09:34 AM Knox

We do have a HDP/HDF cluster running in the network segment, where neither servers nor clients have no access to the public internet. Initial setup (both manually via Ambari or using Blueprint) has worked well (with extra steps necessary to use local RPM repositories instead of public ones). Now cluster seems to be operational (with some workarounds due to hostnames in *.local domain and absence of proper SSL-certificates). The only major problem at the moment seems to be with Knox UI. Despite having all the necessary files locally at the Knox node (same machine as Ambari), Knox UI tries to pull CSS and JS files from external hosts, googleapis.com and bootstrapcdn.com respectfully. It is NOT about other component UIs, it is about Knox itself. I'm able to login with default username/password, but after a timeout I see an empty page with Knox logo. Switching on the Inspector/Debugger in the browser shows, that browser tries to pull bootstrap.min.css and jquery.min.js from their external hosts and (obviously) fails, because neither servers nor client machines have access to public Net.

Other UIs (including Ambari) are working fine, at the moment Knox is the only component which has problems running in the isolated environment.

Upd: Versions used:
Ambari: 2.7.1
Knox: 1.0.0

Comment
Matthias Pfenninger
Gerd Koenig
Christian Guegi
Laurent Hoss
Predrag Minovic

People who voted for this

5 Show 0
10 |6000 characters needed characters left characters exceeded
▼
  • Viewable by all users
  • Viewable by moderators
  • Viewable by moderators and the original poster
  • Advanced visibility
Viewable by all users

Up to 5 attachments (including images) can be used with a maximum of 524.3 kB each and 1.0 MB total.

2 Replies

· Add your reply
  • Sort: 
  • Votes
  • Created
  • Oldest
avatar image

Answer by Kirill Peskov · Feb 01 at 03:40 PM

Forgot to update. I solved the issue, implementing quick-n-dirty workaround: I directly edited index.html in application directory getting rid of external references and copying over bootstrap's and jquery's JS/CSS files to the sub-folder under the same directory. After that Knox service has to be *stopped and started*, 'restart' is not enough to pick up the changes.

Comment

People who voted for this

0 Show 0 · Share
10 |6000 characters needed characters left characters exceeded
▼
  • Viewable by all users
  • Viewable by moderators
  • Viewable by moderators and the original poster
  • Advanced visibility
Viewable by all users

Up to 5 attachments (including images) can be used with a maximum of 524.3 kB each and 1.0 MB total.

avatar image

Answer by Phil Zampino · Jan 24 at 02:35 PM

This issue has been addressed (KNOX-1731), but has not yet been released.

Comment

People who voted for this

0 Show 3 · Share
10 |6000 characters needed characters left characters exceeded
▼
  • Viewable by all users
  • Viewable by moderators
  • Viewable by moderators and the original poster
  • Advanced visibility
Viewable by all users

Up to 5 attachments (including images) can be used with a maximum of 524.3 kB each and 1.0 MB total.

avatar image Kirill Peskov · Jan 24 at 02:38 PM 0
Share

Looks like it is fixed in upstream not so long time ago, all the versions including latest official 1.2.0 have this issue. It has been fixed about 16 days ago, as I found in Knox sources.

avatar image Phil Zampino Kirill Peskov · Jan 24 at 03:26 PM 0
Share

Yes, as I had said, it has been fixed, but has not yet been released. It will be included in the 1.3.0 Apache release.

avatar image Kirill Peskov Phil Zampino · Jan 24 at 07:03 PM 0
Share

And how long will it take to bring the changes to HDP release? You're still packaging Knox 1.0.0 in HDP 3.1.0...

Your answer

Hint: You can notify a user about this post by typing @username

Up to 5 attachments (including images) can be used with a maximum of 524.3 kB each and 1.0 MB total.

52
Followers

Answers Answer & comments

This website uses cookies for analytics, personalisation and advertising. To learn more or change your cookie settings, please read our Cookie Policy. By continuing to browse, you agree to our use of cookies.

HCC Guidelines | HCC FAQs | HCC Privacy Policy | Privacy Policy | Terms of Service

© 2011-2019 Hortonworks Inc. All Rights Reserved.

Hadoop, Falcon, Atlas, Sqoop, Flume, Kafka, Pig, Hive, HBase, Accumulo, Storm, Solr, Spark, Ranger, Knox, Ambari, ZooKeeper, Oozie and the Hadoop elephant logo are trademarks of the Apache Software Foundation.

  • Anonymous
  • Login
  • Create
  • Ask a question
  • Create Article
  • Post Idea
  • Add Repo
  • Create SupportKB
  • Tracks
  • Community Help
  • Cloud & Operations
  • CyberSecurity
  • Data Ingestion & Streaming
  • Data Processing
  • Data Science & Advanced Analytics
  • Design & Architecture
  • Governance & Lifecycle
  • Hadoop Core
  • Sandbox & Learning
  • Security
  • Solutions
  • Explore
  • All Tags
  • All Questions
  • All Articles
  • All Ideas
  • All Repos
  • All SKB
  • All Users
  • Leaderboard
  • All Badges