[
https://issues.apache.org/jira/browse/AMBARI-14384?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15282963#comment-15282963
]
Siddharth Wagle commented on AMBARI-14384:
------------------------------------------
[~wardviaene] AMS does not support authentication presently. I have changed
this to an improvement and made it a part of the Epic.
*Note*: AMS API is used by Ambari and Grafana and both these endpoints support
authentication and https.
HTTPS support was recently added for AMS API as well.
The workaround to guard the API is to only make the Collector ip visible
internally to the Hadoop cluster so that the sinks can talk to the collector
and Ambari and Grafana can read from it.
> Ambari Metrics doesn't use SPNEGO to authenticate
> -------------------------------------------------
>
> Key: AMBARI-14384
> URL: https://issues.apache.org/jira/browse/AMBARI-14384
> Project: Ambari
> Issue Type: Improvement
> Components: ambari-metrics
> Affects Versions: 2.1.2
> Reporter: Ward Viaene
>
> * Kerberos enabled cluster
> * SPNEGO enabled on hadoop APIs
> /var/log/ambari-metrics-monitor/ambari-metrics-monitor.out:
> 2015-12-15 13:26:30,663 [INFO] emitter.py:101 - server:
> http://metrics-collector:6188/ws/v1/timeline/metrics
> 2015-12-15 13:26:30,671 [WARNING] emitter.py:84 - Error sending metrics to
> server. HTTP Error 401: Authentication required
> 2015-12-15 13:26:30,671 [WARNING] emitter.py:90 - Retrying after 5 ...
> The same problem appears to be happening on the sinks:
> *
> ambari/ambari-metrics/ambari-metrics-common/src/main/java/org/apache/hadoop/metrics2/sink/timeline/AbstractTimelineMetricsSink.java
> ** No SPNEGO support
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
