I have been checking this lately, and I have managed to make it work, but I'm having some issues when using HTTPS with Knox. When I run a curl command to Knox (with HTTP), that uses a topology with a Presto service, it works fine, but when I use Presto CLI, for some reason it adds HTTPS to the connection between Knox and Presto. At the moment I have user -> Knox -> Presto, and when using HTTP, the following happens: user --http--> Knox --http--> Presto, and that works fine, but when using HTTPS I was expecting to have user --https--> Knox --http--> Presto, so the first part between the user and Knox uses HTTPS and the next one, between Knox and Presto uses HTTP. But that's not the case, and I end having user --https--> Knox --https--> Presto so I get and error "Unsupported or unrecognized SSL message" that usually comes when trying to use HTTPS with a non HTTP.
I checked my service, and it's using serviceUrl[service] so it shouldn't be replacing the protocol for https. Any idea about what could be causing the issue? Thanks. On Fri, 26 Apr 2019 at 15:03, Odon Copon <odonco...@gmail.com> wrote: > One of the issues I'm facing is that per example with Hive I could use > httpPath to specify the knox path (gateway/topology, etc) but I don't know > if that's something from Hive specifically or something it can be > replicated with Presto. > Thanks > > On Thu, 25 Apr 2019, 18:22 Kevin Risden, <kris...@apache.org> wrote: > >> Another doubt regarding all this, would Knox be able to send to Presto >>> the credentials used when performing the authentication? >> >> >> There is a lot of flexibility here depending what needs to be done. Knox >> can pass through authentication or add things like doAs or do something >> completely custom with a custom dispatch. >> >> >> Kevin Risden >> >> >> On Mon, Apr 22, 2019 at 2:51 PM Odon Copon <odonco...@gmail.com> wrote: >> >>> Hi Kevin, >>> I haven't found much information about the Rest API, just the following, >>> https://github.com/prestodb/presto/tree/master/presto-docs/src/main/sphinx/rest >>> that >>> doesn't seem to contain anything useful and the Presto headers from the >>> code, >>> https://github.com/prestosql/presto/blob/master/presto-client/src/main/java/io/prestosql/client/PrestoHeaders.java >>> . >>> Also found some info about using jdbc to connect to Presto: >>> https://prestodb.github.io/docs/current/installation/jdbc.html. >>> >>> Another doubt regarding all this, would Knox be able to send to Presto >>> the credentials used when performing the authentication? >>> Thanks. >>> >>> On Mon, 22 Apr 2019 at 19:11, Kevin Risden <kris...@apache.org> wrote: >>> >>>> Not sure. I don't know what the endpoints for Presto are. From the link >>>> you provided it looks like it could be possible. There was a Knox Jira >>>> issue opened (and closed by that same user) about Presto [1]. So I would >>>> guess it works but there isn't anything included in Knox today. >>>> >>>> [1] https://issues.apache.org/jira/browse/KNOX-1163 >>>> >>>> Kevin Risden >>>> >>>> >>>> On Mon, Apr 22, 2019 at 2:07 PM Odon Copon <odonco...@gmail.com> wrote: >>>> >>>>> Hi, >>>>> Is there any way of making Knox work with Presto so it can authorize >>>>> the access to Presto or redirect LDAP credentials to Presto? >>>>> The only information I have seen is the following link: >>>>> https://github.com/prestodb/presto/issues/5643 >>>>> >>>>> Thanks >>>>> >>>>
