[ 
https://issues.apache.org/jira/browse/METRON-1389?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16319711#comment-16319711
 ] 

ASF GitHub Bot commented on METRON-1389:
----------------------------------------

Github user anandsubbu commented on a diff in the pull request:

    https://github.com/apache/metron/pull/888#discussion_r160591890
  
    --- Diff: 
metron-deployment/packaging/ambari/metron-mpack/src/main/resources/common-services/METRON/CURRENT/package/scripts/indexing_master.py
 ---
    @@ -150,12 +151,36 @@ def zeppelin_notebook_import(self, env):
             env.set_params(params)
     
             Logger.info(ambari_format('Searching for Zeppelin Notebooks in 
{metron_config_zeppelin_path}'))
    +
    +        # With Ambari 2.5+, Zeppelin server is enabled to work with Shiro 
authentication, which requires user/password
    +        # for authentication (see 
https://zeppelin.apache.org/docs/0.6.0/security/shiroauthentication.html for 
details).
    +        ses = requests.session()
    +
    +        # Check if authentication is enabled on the Zeppelin server
    +        try:
    +            conn = 
ses.get(ambari_format('http://{zeppelin_server_url}/api/login'))
    +
    +            # Establish connection if authentication is enabled
    +            try:
    +                # The following credentials are created at install time by 
Ambari at /etc/zeppelin/conf/shiro.ini
    +                # when Shiro auth is enabled on the Zeppelin server
    +                zeppelin_payload = {'userName': 'admin', 'password' : 
'admin'}
    --- End diff --
    
    Hi @cestella , thanks for taking a look. The Zeppelin auth credentials are 
not related to ambari credentials. They are as defined in 
`/etc/zeppelin/conf/shiro.ini` on the Zeppelin host, which is set up by default 
during stack deploy time.
    
    Here's a snippet:
    ```
    [root@hcpca-1 ~]# cat /etc/zeppelin/conf/shiro.ini
    
    [users]
    # List of users with their password allowed to access Zeppelin.
    # To use a different strategy (LDAP / Database / ...) check the shiro doc 
at http://shiro.apache.org/configuration.html#Configuration-INISections
    admin = admin, admin
    <snip>
    ```
    
    When I created the pull request, I considered the option of reading 
`shiro.ini` file and parsing for the credentials. I did not pursue that further 
since I wanted to address the immediate need of ability to import notebook on 
an out-of-the-box Metron cluster. I understand that a thorough way would be to 
handle the [different INI 
settings](http://shiro.apache.org/configuration.html#Configuration-INISections) 
provided by shiro, and could potentially be the scope of another pull request. 
    
    Please let me know if it makes sense.


> Zeppelin notebook import does not work with Ambari 2.6
> ------------------------------------------------------
>
>                 Key: METRON-1389
>                 URL: https://issues.apache.org/jira/browse/METRON-1389
>             Project: Metron
>          Issue Type: Bug
>    Affects Versions: 0.4.2
>            Reporter: Anand Subramanian
>            Assignee: Anand Subramanian
>             Fix For: Next + 1
>
>
> This issue is seen with Ambari 2.6.0.0.
> Doing 'Metron -> Service Actions -> Zeppelin Notebook Import' shows that the 
> notebooks have been imported, but when I go to the Zeppelin dashboard, I 
> cannot find any of the notebooks.
> In recent versions of Ambari, [Shiro 
> Authentication|https://zeppelin.apache.org/docs/0.6.0/security/shiroauthentication.html]
>  is enabled which requires a user/password authentication in order to 
> interact with Zeppelin. We need to incorporate this in order to be able to 
> import metron Zeppelin notebooks.



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)

Reply via email to