Re: socket.io in knox

2018-05-11 Thread Sandeep Moré
Hello, I am not very familiar with socket.io apps, so you might have to fill me in about what you are trying to do. Looks like you are having issue rewriting Websocket url. What version of Knox are you using ? Knox 0.13.0 and up supports better URL rewriting, see KNOX-776

Re: Knox failing to match path

2018-05-22 Thread Sandeep Moré
Hello Rajat, Can you clear your deployments folder and restart Knox and try again, sometimes I have seen they don't get properly updated. Also, can you turn on DEBUG logging for Knox, and check if you can see that the service defs are properly added, you will see them in the logs like 2017-10-19

Re: accessing zeppelin via knox returns empty page

2018-06-11 Thread Sandeep Moré
Also, can you try adding forward slash to your url, i.e. https://test-namenode.subnet1.hadoop.oraclevcn.com:8443/gateway/ui/zeppelin/ Best, Sandeep On Mon, Jun 11, 2018 at 9:32 PM larry mccay wrote: > Hi Lian - > > If the same response is coming back from curl going both direct and > through

Re: socket.io in knox

2018-06-18 Thread Sandeep Moré
ry is the same as PNDACONSOLE except it uses the >>> ws:// protocol specifier. This didn't work at all, and in fact at that >>> point, nothing got through and everything fell through to the default >>> rewrite rule. >>> >>> I've attached the gateway log

Re: Exclude/skip paths in route or filter?

2018-06-15 Thread Sandeep Moré
"AMBARI/ambari/context_path/outbound"/> > > > > > > Thoughts on pre-empting it for a specific path? > > > > -- > > Sean Roberts > > > > *From: *Sandeep Moré > *Reply-To: *"user@knox.apache.org" > *Date: *Friday, 1

Re: Exclude/skip paths in route or filter?

2018-06-15 Thread Sandeep Moré
paths. > > > > -- > > Sean Roberts > > > > *From: *Sandeep Moré > *Reply-To: *"user@knox.apache.org" > *Date: *Friday, 15 June 2018 at 16:01 > *To: *"user@knox.apache.org" > *Subject: *Re: Exclude/skip paths in route or filter? > > > > Ah, s

Re: Exclude/skip paths in route or filter?

2018-06-15 Thread Sandeep Moré
Hello Sean It is a bit tricky to exclude a path ( I am assuming you want to do this in some specific scenario ). There are few options I can think of: Option 1. You can try to make the rules more specific so it can apply only to the URLs we want, the downside is, since we are narrowing the rule

Re: socket.io in knox

2018-06-19 Thread Sandeep Moré
g (a) and > (d) would help in the longer term. > > Hope this makes sense and I haven't completely missed the point :-) It > does explain the behaviour I'm seeing. How would you like to proceed here? > > Cheers, > /ailuropod4 > > > > > On Mon, Jun 18, 2018 at

Re: knox OS auth does not work if /tmp has noexec

2018-07-03 Thread Sandeep Moré
Hello Lian, What errors do you see in the PAM logs (/var/log/secure, /var/log/messages) for this login attempt ? Best, Sandeep On Tue, Jul 3, 2018 at 1:25 AM Lian Jiang wrote: > Thanks Larry. > > Setting "-Djava.io.tmpdir={other_tmp_folder} > -D*jna*.tmpdir={other_tmp_folder}" > in knoxcli.sh

Re: Memory leak in Knox gateway process

2018-02-06 Thread Sandeep Moré
Hello Vaibhav, Did you try setting memory options for Knox ? i.e. setting APP_MEM_OPTS in gateway.sh. Sometimes, in cases of large memory GC does not run as frequently as it should. Best Sandeep On Tue, Feb 6, 2018 at 6:49 AM, Vaibhav Kulkarni wrote: > Hi, > > > I am using

Re: KNOX Pac4j Azure AD Open ID

2018-02-20 Thread Sandeep Moré
t;> unchartered waters here. >>>>>> >>>>>> @Jerome - any insights? >>>>>> >>>>>> On Mon, Feb 19, 2018 at 2:04 AM, Nisha Menon <nisha.meno...@gmail.com >>>>>> > wrote: >>>>>> >&g

Re: [DISCUSS] Planning for Apache Knox 1.1.0 Release

2018-02-24 Thread Sandeep Moré
Thanks for starting the discussion Larry. I can take care of the Logout of KnoxSSO KIP, been thinking about it a lot lately, I will start a KIP and kickoff a discussion. The cloud KIP sounds great, we can finally iron out the Azure AD integration with this one. I haven't looked at the Jiras but

Re: KNOX Pac4j Azure AD Open ID

2018-02-16 Thread Sandeep Moré
Hello Nisha, Can you share details of "mycluster" topology ? also, can you turn up the logs to debug and share them along with the audit log that would help us to understand the problem better. Best, Sandeep On Fri, Feb 16, 2018 at 3:16 AM, Nisha Menon wrote: > Hello,

Re: socket.io in knox

2018-06-20 Thread Sandeep Moré
the order in which this handler is added. Best, Sandeep On Wed, Jun 20, 2018 at 1:13 AM Sandeep Moré wrote: > Hello ailuropod4, > > Excellent analysis ! > you are right about (a), (b), (c) and (d). > (a) and (b) can be easily fixed, we should have caught this earlier :( we > do need

Re: Websockets to Ambari 2.7 through Knox 1.1

2018-08-01 Thread Sandeep Moré
nds to the wire exchange that I > posted. > > It doesn't seem to be causing an obvious functional problem as it falls > back to some kind of polling. Perhaps others are experiencing this but not > noticing? > > Cheers, > /ailuropod4 > > > On Tue, Jul 31, 2018 at 2:43 PM

Re: Knox: how to create a custom dispatch class

2018-08-01 Thread Sandeep Moré
ch with Knox: > https://issues.apache.org/jira/browse/KNOX-1400 > > > Le mer. 1 août 2018 à 01:15, Sandeep Moré a > écrit : > >> Great ! >> If you stumbled across bugs in logsearch, file a JIRA and a patch if you >> got it to work, that would be really helpful for th

Re: Knox and Zeppelin UI is not working properly.

2018-08-03 Thread Sandeep Moré
Hello Dhruv, What version of zeppelin are you testing with ? You will need to enable websockets or Zeppelin UI to work, make sure you have websocket turned on in gateway-site.xml. Can you share gateway.log failure logs as well so we know where exactly Knox is failing. Best, Sandeep On Fri, Aug

Re: Knox and Zeppelin UI is not working properly.

2018-08-03 Thread Sandeep Moré
ispatch response > status: 405 > 2018-08-03 14:41:18,569 DEBUG hadoop.gateway > (DefaultDispatch.java:getInboundResponseContentType(203)) - Using explicit > character set ISO-8859-1 for entity of type text/html > 2018-08-03 14:41:18,569 DEBUG hadoop.gateway > (DefaultDispatch.j

Re: Knox and Zeppelin UI is not working properly.

2018-08-03 Thread Sandeep Moré
we were using : > /** = authc > In zeppelin shiro > > > Thanks & Regards > Dhruv Goyal > > On 03-Aug-2018, at 10:21 PM, Sandeep Moré wrote: > > never encountered 405 > > >

Re: logsearch with knox 0.12.0: errors without the trailing /

2018-07-28 Thread Sandeep Moré
valent to a redirect HTTP (302) ? > Because the script uses location.href.lastIndexOf("/") so this is the url > of the browser. > > > Le sam. 28 juil. 2018 à 16:06, Sandeep Moré a > écrit : > >> If this is for a request going in then you can create a rewrite rule that >&g

Re: Link between service.xml and rewrite.xml

2018-07-30 Thread Sandeep Moré
Hello David, This is most likely because of the behavior of Knox where if it does not find any specific rewrite rules it tries to match the best one. Now, for simple use cases this will work. This will also work if you have a blanked /** in your service.xml file. Where service.xml comes in handy

Re: [VOTE] Release Apache Knox 1.1.0 RC 3

2018-07-29 Thread Sandeep Moré
release and contributing to the > Apache Knox community! > > > On Thu, Jul 26, 2018 at 12:51 PM, Sandeep Moré > wrote: > >> >> +1 >> >> * Downloaded and built from source >> * Checked LICENSE and NOTICE files >> * Verified GPG/MD5/SHA signatures for Knox so

Re: Knox: how to create a custom dispatch class

2018-07-26 Thread Sandeep Moré
Hello David, This should have worked, if you turn the debug log on you can see what dispatch Knox is trying to use. Also, if the changes are in service.xml then we need to touch the topology file so that Knox reloads it, I am thinking this could be an issue. If it still does not work, try

Re: Knox: how to create a custom dispatch class

2018-07-26 Thread Sandeep Moré
d restart > knox. > In fact my Xml files are well taken into account. > But my problem is more related to the fact that I face to the double > urlencode and my custom dispatch class seems to be ignored. > > > Le jeu. 26 juil. 2018 à 19:59, Sandeep Moré a > écrit : > &g

Re: [VOTE] Release Apache Knox 1.1.0 RC 3

2018-07-26 Thread Sandeep Moré
+1 * Downloaded and built from source * Checked LICENSE and NOTICE files * Verified GPG/MD5/SHA signatures for Knox source, Knox and Knoxshell release packages (zip files) * Installed pseudo-distributed instance (Mac OS X ) * Ran through knox tests * Checked websocket functionality * Checked

Re: Complicated Javascript Rewrite

2018-07-26 Thread Sandeep Moré
Hello Billy, You can use the variable $infix instead of $frontend. for e.g. {$infix[return,url,jobs]} Best, Sandeep On Thu, Jul 26, 2018 at

Re: Knox: how to create a custom dispatch class

2018-07-26 Thread Sandeep Moré
d twice in grafana as well, I tried using > “PassAllHeadersNoEncodingDispatch” > But it didnt worked for me. We will have to write a custom dispatch class. > > Regards > Dhruv > > On Thu, 26 Jul 2018 at 11:51 PM, Sandeep Moré > wrote: > >> That's weird, if Knox is n

Re: Knox: how to create a custom dispatch class

2018-07-26 Thread Sandeep Moré
Great, thanks ! On Thu, Jul 26, 2018 at 2:33 PM Dhruv Goyal <777.dh...@gmail.com> wrote: > Yes, I will do that and share here. > > On Fri, 27 Jul 2018 at 12:01 AM, Sandeep Moré > wrote: > >> Hello Dhruv, >> >> Can you open a JIRA for this issue, le

Re: Websockets to Ambari 2.7 through Knox 1.1

2018-07-31 Thread Sandeep Moré
Your topology file looks good, I don't see we do anything with authentication in the websocket layer. Do you get any errors on Knox side ? or in Ambari logs ? Best, Sandeep On Tue, Jul 31, 2018 at 3:32 PM T Smith wrote: > Hi all, > > I'm using Ambari 2.7 and Knox 1.1. For the websocket

Re: Knox: how to create a custom dispatch class

2018-07-31 Thread Sandeep Moré
gt; Le jeu. 26 juil. 2018 à 21:47, David Morin a > écrit : > >> Yes, I tried PassAllHeadersNoEncodingDispatch but it didn't work for me >> too. >> In waiting a patch or a workaround, if you have a jar with an example of >> Dispatch class it would be great. >> Thank

Re: Websockets to Ambari 2.7 through Knox 1.1

2018-08-02 Thread Sandeep Moré
ust btw we're installing Knox from the Apache project, not from > Ambari/HDP. > > Cheers, > /ailuropod4 > > > > On Wed, Aug 1, 2018 at 8:50 AM, Sandeep Moré > wrote: > >> Hello ailuropod4, >> >> Tested with Ambari 2.7.1 and websockets seems to be working fi

Re: Rewrite problem

2018-08-02 Thread Sandeep Moré
Looks like you are missing the ' which is part of ng-include So in your filter try If this does not work try escaping the ', hopefully it should work. Best, Sandeep On Wed, Aug 1, 2018 at 4:20 PM Benoit Moisan wrote: > > hello, > > i need some help on a rewrite rule. I have a html file with

Re: Possible to rewrite query parameter value?

2018-07-27 Thread Sandeep Moré
It should be possible using parameterized rewrite variables, this is an example from Spark History rewrite rules or in the above example Best, Sandeep On Fri, Jul 27, 2018 at 1:03 PM Christopher Jackson < jackson.christopher@gmail.com> wrote: > Hi All, > >

Re: Possible to rewrite query parameter value?

2018-07-27 Thread Sandeep Moré
gards, > Christopher Jackson > > > On Jul 27, 2018, at 2:16 PM, Sandeep Moré wrote: > > It should be possible using parameterized rewrite variables, this is an > example from Spark History rewrite rules > > > name="SPARKHISTORYUI/sparkhistory/outbound/headers/locat

Re: [VOTE] Release Apache Knox 1.1.0 RC 2

2018-07-25 Thread Sandeep Moré
Thanks Larry ! +1 * Downloaded and built from source (with Java 1.8.0_101) * Checked LICENSE and NOTICE files * Verified GPG/MD5/SHA signatures for Knox source, Knox and Knoxshell release packages (zip files) * Installed pseudo-distributed instance (Mac OS X ) * Ran through knox tests * Checked

Re: Supporting Hal+JSON rewrites

2018-07-25 Thread Sandeep Moré
Hello Billy, I don't think Knox supports application/hal+json content-type (seems to me that way). I don't know much about application/hal+json, but structurally it looks like JSON, you can try adding it [1] to the supported content types for JsonUrlRewriteStreamFilter. Best, Sandeep [1]

Re: Supporting Hal+JSON rewrites

2018-07-25 Thread Sandeep Moré
gt; > > > > *Billy Watson* > > > > > > *From: *Sandeep Moré > *Reply-To: *"user@knox.apache.org" > *Date: *Wednesday, July 25, 2018 at 3:54 PM > *To: *"user@knox.apache.org" > *Subject: *Re: Supporting Hal+JSON rewrites > > > &g

Re: Oozie workflow view in Ambari 2.7

2018-08-08 Thread Sandeep Moré
This should not be the case, this should work, especially with Ambari 2.7, I am assuming this is Knox 1.1.0 right ? Best, Sandeep On Wed, Aug 8, 2018 at 8:39 PM T Smith wrote: > Hi all, > > It seems like the Oozie workflow manager view Job URL link points to an > internal cluster node rather

Re: Knox and Zeppelin UI is not working properly.

2018-08-07 Thread Sandeep Moré
gy XML for review. I had also faced similar issue > while proxing. > > > > Nixon > > > > > > On Fri, Aug 3, 2018, 11:28 PM Sandeep Moré wrote: > > Nice ! > > > > On Fri, Aug 3, 2018 at 1:17 PM Dhruv Goyal <777.dh...@gmail.com&g

Re: Need help on rewrite rules

2018-08-16 Thread Sandeep Moré
Hello Priyanka, Sometimes the content types do not match, can you check if the response type you are getting back is indeed "application/javascript" ? Also, try using a broader rule on service.xml for testing something like / Do you see any failures in gateway.log, i.e. failure to apply rules

Re: Dispatcher class for Grafana

2018-08-16 Thread Sandeep Moré
Hello Divya, Looking at the URL you posted looks like you are using the wrong dispatch class, URLDecodingDispatch is used for URLs that are already encoded, looking at your example URL it looks like it is partially encoded (e.g. the query params &), in-fact looks like it is not properly encoded.

Re: Knox Integration with CDAP UI

2018-08-16 Thread Sandeep Moré
Hello Priyanka, I am not aware of CDAP UI support for Knox, we would be glad if you could contribute ! About the filters they can be a bit tricky, try to turn on the debug log and see what rewrite rules are failing that can narrow down a lot of errors. For JS filters you can use regex to rewrite

Re: Need help in Websocket request rewrite rules

2018-08-28 Thread Sandeep Moré
Hello Priyanka, So, other than this error in the logs you do not see any other issues and everything works, right ? just making sure I understand. You can enable DEBUG log, which is very verbose, that should tell us more about the error. Best, Sandeep On Tue, Aug 28, 2018 at 2:41 AM Priyanka

Re: Facing Unknown SSL protocol error when calling Knox

2018-07-20 Thread Sandeep Moré
Perhaps the SSL keys have expired ? I have not seen this one. You can turn on SSL debugging on Knox and see what details you get, that should help in debugging. Best, Sandeep On Fri, Jul 20, 2018 at 12:44 AM Guang Yang wrote: > Hi guys, > > Our Knox service was running well for a long time,

Re: Facing Unknown SSL protocol error when calling Knox

2018-07-20 Thread Sandeep Moré
a while - knock on wood. >> >> Usually a reboot helps me locally but I recall seeing this in system >> tests where it was never resolved - afaik. >> >> On Fri, Jul 20, 2018 at 9:38 AM, Sandeep Moré >> wrote: >> >>> Perhaps the SSL keys have expired

Re: Issue while accessing URIs containing '%'

2018-07-18 Thread Sandeep Moré
Hello Rajat, I am not well aware of Grafana UI so I do not know how the URL should look like so I am assuming you need % to be in the url right ? Can you try using the following dispatches 1. *PassAllHeadersNoEncodingDispatch* 2. *URLDecodingDispatch* Hopefully one of them should work.

Re: Need help in enabling SAML auth in Apache Knox

2018-07-16 Thread Sandeep Moré
Hello Praveen, I am not familiar with PING Federate Identity provider but looks like your target url could be wrong. Can you try using https://%3Cdnsname%3E:8446/gateway/knoxsso/api/v1/websso?pac4jCallback=trueclient_name=SAML2Client as Target Url (basically entity id as target url), I am

Re: Need help in enabling SAML auth in Apache Knox

2018-07-16 Thread Sandeep Moré
Hello Praveen, Following are some of the blogs that talk about Knox SAML integration https://cwiki.apache.org/confluence/display/KNOX/KnoxSSO+and+Okta https://cwiki.apache.org/confluence/display/KNOX/Configuring+Apache+Knox+SSO+with+Ipsilon+using+SAML2 Knox user guide also has some information

Re: Issue in writing a rule containing %.

2018-07-24 Thread Sandeep Moré
Hello Dhruv, In your service definition you might want to use the PassAllHeadersNoEncodingDispatch dispatch. We

Re: Knox rules applied randomly

2018-08-30 Thread Sandeep Moré
Divya, I think this is because of the "path" rule is more open than the "queryv" rule. Can you try reordering the rules, putting "path" rule below "queryv" and see what you get. Also, I would suggest be more specific about the rules to avoid these issues. Best, Sandeep On Thu, Aug 30, 2018

Re: zeppelin via knox in HDP3 does not work for SQL

2018-08-31 Thread Sandeep Moré
Knox master has patch for this issue https://issues.apache.org/jira/browse/KNOX-1424 You can try applying the patch it should fix the issue. Best, Sandeep On Fri, Aug 31, 2018 at 12:18 PM Lian Jiang wrote: > I am using HDP3.0 (having zeppelin 0.8.0). > > Below queries do not show any result,

Re: zeppelin via knox in HDP3 does not work for SQL

2018-09-01 Thread Sandeep Moré
ata-3.0.0.0-1634/services/zeppelinui/0.6.0 on the knox host. >>> None of below makes zeppelin sql interpreter work: >>> >>> 1. Put the new rewrite.xml and service.xml into new created 0.8.0 folder >>> and restart knox >>> 2. Replace these two files unde

Re: Knox wrong query param encoding help

2018-09-04 Thread Sandeep Moré
You can try using "org.apache.knox.gateway.dispatch.URLDecodingDispatch" dispatch in service.xml ( Knox 1.1.0) Best, Sandeep On Tue, Sep 4, 2018 at 2:09 PM Theyaa Matti wrote: > I am having issues with Knox encoding the following URL when parsing html > content. > >

Re: Knox wrong query param encoding help

2018-09-06 Thread Sandeep Moré
t; >>> On Tue, Sep 4, 2018 at 2:30 PM Theyaa Matti >>> wrote: >>> >>>> I am using Knox 1.12.0 >>>> >>>> On Tue, Sep 4, 2018 at 2:28 PM Sandeep Moré >>>> wrote: >>>> >>>>> You can try >>>

Re: Knox wrong query param encoding help

2018-09-06 Thread Sandeep Moré
, > > Theyaa. > > > On Thu, Sep 6, 2018 at 2:24 PM Sandeep Moré wrote: > >> Are you using HA setup ? in which case org.apache. >> hadoop.gateway.rm.dispatch.RMUIHaDispatch dispatch will be used. >> >> On Thu, Sep 6, 2018 at 2:19 PM Theyaa Matti >> w

Re: Knox wrong query param encoding help

2018-09-06 Thread Sandeep Moré
started knox. > > > I do not see any changes in the behavior and do not see that class being > called. Do you please know what I am missing? > > > Regards, > > > > > > > On Thu, Sep 6, 2018 at 9:38 AM Sandeep Moré wrote: > >> URLDecodingDispatch ext

Re: NPE from HttpServletRequest in Dispatch when query string contains special characters.

2018-09-10 Thread Sandeep Moré
Do you have a stack trace for the NPE ? On Mon, Sep 10, 2018 at 10:21 AM Theyaa Matti wrote: > Anyone has any idea how to resolve this please? > > On Fri, Sep 7, 2018 at 1:24 PM Theyaa Matti wrote: > >> I am using custom Dispatch class in my service.xml to handle html >> entities and I am

Re: how to handle hdfs UI redirect in knox

2018-07-09 Thread Sandeep Moré
There were a bunch of fixes that went into Knox 1.1.0 (currently in the process of releasing) that fixes a bunch of issues with HDFSUI. We also added new service defs [1] that has those fixes. If you are using older version of knox, try adding these to your hdfsui service folder

Re: how to handle hdfs UI redirect in knox

2018-07-10 Thread Sandeep Moré
I > http://{DOMAIN}:50070 > > to: > > HDFSUI > http://{DOMAIN}:50070/*2.7.0/* > > > Thanks for clarification. > > On Mon, Jul 9, 2018 at 3:35 PM, Sandeep Moré > wrote: > >> There were a bunch of fixes that went into Knox

Re: how to handle hdfs UI redirect in knox

2018-07-10 Thread Sandeep Moré
d > log. Any idea regarding debugging? > > On Tue, Jul 10, 2018 at 11:08 AM, Sandeep Moré > wrote: > >> Sorry, I wasn't clear. >> You can do that (download an replace service and rewrite xmls) and keep >> your existing service definition intact i.e. >>

Re: KnoxSSO with NiFi error: PKIX path building failed...

2018-03-07 Thread Sandeep Moré
Hello Ryan, Looks like you need to provision NiFi public cert into Knox keystore that should do it. On Wed, Mar 7, 2018 at 7:12 PM, Ryan H wrote: > Hi All, > > I seem to be having a really tough time getting Knox to work with a secure > NiFi cluster set up. I

Re: KnoxSSO with NiFi error: PKIX path building failed...

2018-03-08 Thread Sandeep Moré
know > which one of the files should have the public cert? > > Thanks in Advance, > > -Ryan > > On Wed, Mar 7, 2018 at 8:03 PM, Sandeep Moré <moresand...@gmail.com> > wrote: > >> Hello Ryan, >> >> Looks like you need to provision NiFi public cert into

Re: webhdfs commands fails randomly with Failed to rewrite URL

2018-03-01 Thread Sandeep Moré
Hello Ashok, What version of Knox are you using ? I remember we had a bug with older Knox version where it would fail to properly rewrite when there was a special character in the url. Looking at your failed url https://:8443/gateway/default/ *webhdfs/data/v1/webhdfs/v1/user/*

Re: KnoxSSO with NiFi error: PKIX path building failed...

2018-03-08 Thread Sandeep Moré
chine cacerts truststore. >>> >>> I am explicitly adding @jeff here as well since he is the Nifi >>> integration guru. >>> >>> On Thu, Mar 8, 2018 at 11:09 AM, Ryan H <ryan.howell.development@gmail >>> .com> wrote: >>> >>>

Re: idleTimeout values are getting reset

2018-04-19 Thread Sandeep Moré
Hello Ashok, This is interesting, Knox opens up two connections for Websockets, one on the client side (browser/client etc.) and other on the backend (service host). The timeouts you are seeing are for the two 1. First debug line - WebSocketServerConnection - opens up websocket connection to the

Re: idleTimeout values are getting reset

2018-04-23 Thread Sandeep Moré
ck, 6th Floor > IBM India Software Labs, > Mail-Id : ashoj...@in.ibm.com > > > > > - Original message - > From: "Sandeep Moré" <moresand...@gmail.com> > To: user@knox.apache.org > Cc: > Subject: Re: idleTimeout values are getting rese

Re: Job history ui rewrite rule in yarnui

2018-04-19 Thread Sandeep Moré
ly, but the >>> webpage is just stuck there, no redirect happens. >>> >>> The result in html is >> content="https://host:port/something;>, which however, should be >> http-equiv="refresh" content="*1; url=*https://host:port/something;>

Re: NodeJS App through Knox

2018-03-18 Thread Sandeep Moré
Hello Mike, You can find the information about configuring Websockets in the docs - https://knox.apache.org/books/knox-1-0-0/user-guide.html#Websocket+Support It also has an example rewrite.xml and service.xml rule. Let us know how it goes. Best, Sandeep On Sun, Mar 18, 2018 at 5:47 PM, Mike

Re: KnoxSSO OpenID Error: Unable to renew the session. The session store may not support this feature

2018-03-04 Thread Sandeep Moré
Hello Ryan, Can you check the value of the State parameter ? you should see it in the request and response. The state attribute is stored in the session so if is not getting properly passed we might have an issue there (KNOX-1190 is tracking this), the current implementation of SessionStore for

Re: KnoxSSO OpenID Error: Unable to renew the session. The session store may not support this feature

2018-03-04 Thread Sandeep Moré
d directly with Apache NiFi. I would like to use Apache Knox > though as our gateway though for many reasons. I will follow up once I try > with the 1.1.0 build of Knox. > > Cheers, > > Ryan > > On Sun, Mar 4, 2018 at 6:21 PM, Sandeep Moré <moresand...@gmail.com> >

Re: KnoxSSO OpenID Error: Unable to renew the session. The session store may not support this feature

2018-03-05 Thread Sandeep Moré
pplied patch and rebuilding. I will follow up with the >> verdict. >> >> -Ryan >> >> On Mon, Mar 5, 2018 at 9:45 AM, Sandeep Moré <moresand...@gmail.com> >> wrote: >> >>> Ok, sorry, I thought the change that pick up the property " >>>

Re: KnoxSSO OpenID Error: Unable to renew the session. The session store may not support this feature

2018-03-05 Thread Sandeep Moré
t; knoxauth > > > > KNOXSSO > > knoxsso.cookie.secure.only > false > > > knoxsso.cookie.max.age > session > > > knoxsso.token.ttl > 3 > > >knoxsso.redirect.whitelist.reg

Re: KNOX Pac4j Azure AD Open ID

2018-02-26 Thread Sandeep Moré
gt;>>>>> >>>>>> IP address and hostnames are mapped, else the *basic auth* also >>>>>> would have failed. >>>>>> My issue is only when I use pac4j with Oidc client and Azure AD. >>>>>> >>>>>

Re: [DISCUSS] KIP-10 KnoxSSO Logout Flow

2018-02-26 Thread Sandeep Moré
's more or less > in progress. > > Just let me know if you need more explanations. > > Thanks. > Best regards, > Jérôme > > > > On Sun, Feb 25, 2018 at 5:12 PM, Sandeep Moré <moresand...@gmail.com> > wrote: > >> Hello All, >> >>

[DISCUSS] KIP-10 KnoxSSO Logout Flow

2018-02-25 Thread Sandeep Moré
Hello All, I am kickstarting a discussion about KnoxSSO logout flow, I created a KIP page for it https://cwiki.apache.org/confluence/display/KNOX/KIP-10+KnoxSSO+Logout+Flow In the coming week I am planning on adding more sections for CAS, OpenID connect etc. as I research them more. In the mean

Re: Job history ui rewrite rule in yarnui

2018-03-02 Thread Sandeep Moré
Hello Guang, This does look like a bug, after some digging it appears it was as a result of KNOX-973. Have you tried using I am curious to see what you get. Best, Sandeep On Thu, Mar 1, 2018 at 4:30 PM, Guang Yang wrote: > Hi, > > I'm currently working on the Map Reduce

Re: idleTimeout values are getting reset

2018-04-26 Thread Sandeep Moré
gt; > Thanks & Regards, > Ashok Jose > > ** > > BigInsights Quality > EGL C Block, 6th Floor > IBM India Software Labs, > Mail-Id : ashoj...@in.ibm.com > > > > > - Original message - > From: "Sandeep

Re: url rewrite does not work when adding a new service

2018-09-12 Thread Sandeep Moré
ect timed out > at java.net.PlainSocketImpl.socketConnect(Native Method) > at > java.net.AbstractPlainSocketImpl.doConnect(AbstractPlainSocketImpl.java:350) > at > java.net.AbstractPlainSocketImpl.connectToAddress(AbstractPlainSocketImpl.java:206) > at > java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:188)

Re: url rewrite does not work when adding a new service

2018-09-12 Thread Sandeep Moré
l for jupyter? I believe this should be a common > requirement to expose Jupyter via Knox. Thanks a lot for any hint! > > > On Wed, Sep 12, 2018 at 11:31 AM Sandeep Moré > wrote: > >> No idea why Knox is redirecting back to itself, perhaps turning on Debug >> logging will help

Re: url rewrite does not work when adding a new service

2018-09-12 Thread Sandeep Moré
Hello Lian, What do you see in gateway.log ? Knox replacing knox_load_balancer.com:80 with http://yahoo.com/ might be the log output of rewritten URL which is expected given WEATHER http://yahoo.com/ On Wed, Sep 12, 2018 at 2:22 AM Lian

Re: x-ndjson via Knox

2018-09-21 Thread Sandeep Moré
Hello Rab, Interesting, do you have the debug logs for this ? they will tell us exactly what is happening. Best, Sandeep On Fri, Sep 21, 2018 at 9:56 AM rabii lamriq wrote: > Hi All, > > From Grafana, I Post multisearch query to Elasticsearch using the bulk API > with the newline delimited

Re: x-ndjson via Knox

2018-09-21 Thread Sandeep Moré
entity content type: application/json; charset=UTF-8 > 2018-09-18 17:23:54,519 DEBUG hadoop.gateway > (GatewayFilter.java:doFilter(116)) - Received request: POST > /es5//_msearch > 2018-09-18 17:23:54,521 INFO hadoop.gateway > (AclsAuthorizationFilter.java:doFilter(85)) - Access Gra