No problem and glad you figured it out!

On Thu, Feb 22, 2018 at 4:49 PM, David McGinnis <mcginn...@avalonconsult.com
> wrote:

> I figured out the issue here. I had not changed the owner of the table to
> metron, so despite the fact that metron had permissions to see the tables
> in the metronrest database, I guess PostgreSQL was not giving permission
> for metron to read the tables themselves. Changing the owner over to metron
> made everything work properly. Thank you for the help!
>
> On Thu, Feb 22, 2018 at 2:25 PM, David McGinnis <
> mcginn...@avalonconsult.com> wrote:
>
>> I'm attaching the logs to this email from starting the REST service and
>> then trying to log in, but I didn't see anything. Just indicating it has
>> the correct parameters, and then a bunch of warnings/errors about log4j,
>> which shouldn't have any effect.
>>
>> This is not on a production system, but it is on an Azure cluster, as
>> preparation for installation onto a production system, so any fix we do
>> here should be able to be done on a production system, in case the same
>> issue comes up.
>>
>> On Wed, Feb 21, 2018 at 6:29 PM, Ryan Merriman <merrim...@gmail.com>
>> wrote:
>>
>>> Anything in the rest logs?  Is this a production install?
>>>
>>> On Feb 21, 2018, at 5:53 PM, David McGinnis <mcginn...@avalonconsult.com>
>>> wrote:
>>>
>>> OK, did this, added a simple username/password combo, as well as an
>>> entry in authorities with ROLE_USER, and restarted the two UIs as well as
>>> the REST. I am still not able to log in using these credentials with a
>>> "login failed" error.
>>>
>>> On Wed, Feb 21, 2018 at 5:24 PM, Ryan Merriman <merrim...@gmail.com>
>>> wrote:
>>>
>>>> Ah I see.  Yes the tables only get created automatically for MySQL.
>>>> You will have to create them yourself in postgres.  Here is the create
>>>> statement for mysql that you should be able to map to postgres:
>>>> https://github.com/apache/metron/blob/master/metr
>>>> on-interface/metron-rest/src/main/resources/schema-mysql.sql.
>>>>
>>>> On Wed, Feb 21, 2018 at 5:15 PM, David McGinnis <
>>>> mcginn...@avalonconsult.com> wrote:
>>>>
>>>>> I had originally created a database named metron and pointed the JDBC
>>>>> connection string to that. I have created a new database named metronrest,
>>>>> and pointed the JDBC connection string to use this. After restarting, the
>>>>> only table in the database is the alertprofile table mentioned before, 
>>>>> with
>>>>> no rows. I have verified that as the metron user I can log into psql,
>>>>> create tables in the database, insert data, select it, and then drop the
>>>>> table.
>>>>>
>>>>> Note I'm using postgres and not mysql (which seem to be the default
>>>>> for Metron). Is there a chance this could be causing an issue?
>>>>>
>>>>> On Wed, Feb 21, 2018 at 1:49 PM, Ryan Merriman <merrim...@gmail.com>
>>>>> wrote:
>>>>>
>>>>>> Did you create the metronrest database and permission it?  The tables
>>>>>> should get created automatically when you start REST.
>>>>>>
>>>>>> On Wed, Feb 21, 2018 at 1:46 PM, David McGinnis <
>>>>>> mcginn...@avalonconsult.com> wrote:
>>>>>>
>>>>>>> OK, that makes sense, thanks Ryan. I followed the steps mentioned
>>>>>>> above, but no table has been created for users or authorities. The only
>>>>>>> table I see in the metron database is 'alertprofile'. Do you have a 
>>>>>>> schema
>>>>>>> somewhere documented which those tables should have that I should use to
>>>>>>> create the tables, or is something supposed to automatically create 
>>>>>>> those
>>>>>>> tables and just currently isn't?
>>>>>>>
>>>>>>> On Wed, Feb 21, 2018 at 1:37 PM, Ryan Merriman <merrim...@gmail.com>
>>>>>>> wrote:
>>>>>>>
>>>>>>>> David,
>>>>>>>>
>>>>>>>> Authentication in our UIs is not as seamless as it should be yet.
>>>>>>>> Kerberos authentication is on the road map.  For now you need to load 
>>>>>>>> your
>>>>>>>> credentials into the appropriate security RDMBS tables.  Instructions 
>>>>>>>> are
>>>>>>>> in the REST README:  https://github.com/ap
>>>>>>>> ache/metron/tree/master/metron-interface/metron-rest#metron-rest.
>>>>>>>> Specifically, these are the steps you should follow:
>>>>>>>>
>>>>>>>>    1. Either identify or setup a new SQL database for REST:
>>>>>>>>    https://github.com/apache/metron/tree/master/metron-i
>>>>>>>>    nterface/metron-rest#manual-install
>>>>>>>>    
>>>>>>>> <https://github.com/apache/metron/tree/master/metron-interface/metron-rest#manual-install>
>>>>>>>>    2. For steps 4 through 6 of those instructions, you should use
>>>>>>>>    Ambari instead to configure the JDBC parameters and start REST
>>>>>>>>    3.  Add users to the appropriate tables as described in
>>>>>>>>    https://github.com/apache/metron/tree/master/metron-inter
>>>>>>>>    face/metron-rest#authentication
>>>>>>>>    
>>>>>>>> <https://github.com/apache/metron/tree/master/metron-interface/metron-rest#authentication>
>>>>>>>>
>>>>>>>> Let us know if you hit any issues.
>>>>>>>>
>>>>>>>> On Wed, Feb 21, 2018 at 9:44 AM, David McGinnis <
>>>>>>>> mcginn...@avalonconsult.com> wrote:
>>>>>>>>
>>>>>>>>> All,
>>>>>>>>>
>>>>>>>>> I have a kerberized HDP 2.6.3 cluster which I have installed
>>>>>>>>> Metron on through an MPack. I am using code straight from the master 
>>>>>>>>> branch
>>>>>>>>> of the github as of last week.
>>>>>>>>>
>>>>>>>>> When I try to log into the Alerts UI or the Management UI, I seem
>>>>>>>>> to be unable to do so. I have tried using Kerberos credentials, local 
>>>>>>>>> host
>>>>>>>>> credentials (mostly the same thanks to SSSD) and the test accounts
>>>>>>>>> mentioned in some documentation (admin/password and user/password in
>>>>>>>>> particular). I also examined the backing database (Postgres in my 
>>>>>>>>> case) to
>>>>>>>>> see if there might be some users there that have been configured, but 
>>>>>>>>> no
>>>>>>>>> table has been created there. No errors have appeared in the logs for
>>>>>>>>> either UI as far as I can tell. My assumption was that my kerberos
>>>>>>>>> principal would work here, but it doesn't seem to.
>>>>>>>>>
>>>>>>>>> Any ideas on where to look for errors that might be occurring, or
>>>>>>>>> configurations that need to be set in order to allow for log into the
>>>>>>>>> system properly?
>>>>>>>>>
>>>>>>>>> --
>>>>>>>>> David McGinnis
>>>>>>>>> Staff Hadoop Consultant | Avalon Consulting, LLC
>>>>>>>>> <http://www.avalonconsult.com/>M: (513) 439-0082
>>>>>>>>> LinkedIn <http://www.linkedin.com/company/avalon-consulting-llc>
>>>>>>>>>  | Google+ <http://www.google.com/+AvalonConsultingLLC> | Twitter
>>>>>>>>> <https://twitter.com/avalonconsult>
>>>>>>>>> ------------------------------------------------------------
>>>>>>>>> -------------------------------------------------
>>>>>>>>> This message (including any attachments) contains confidential
>>>>>>>>> information
>>>>>>>>> intended for a specific individual and purpose, and is protected
>>>>>>>>> by law. If
>>>>>>>>> you are not the intended recipient, you should delete this
>>>>>>>>> message. Any
>>>>>>>>> disclosure, copying, or distribution of this message, or the
>>>>>>>>> taking of any
>>>>>>>>> action based on it, is strictly prohibited.
>>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>> --
>>>>>>> David McGinnis
>>>>>>> Staff Hadoop Consultant | Avalon Consulting, LLC
>>>>>>> <http://www.avalonconsult.com/>M: (513) 439-0082
>>>>>>> LinkedIn <http://www.linkedin.com/company/avalon-consulting-llc> |
>>>>>>> Google+ <http://www.google.com/+AvalonConsultingLLC> | Twitter
>>>>>>> <https://twitter.com/avalonconsult>
>>>>>>> ------------------------------------------------------------
>>>>>>> -------------------------------------------------
>>>>>>> This message (including any attachments) contains confidential
>>>>>>> information
>>>>>>> intended for a specific individual and purpose, and is protected by
>>>>>>> law. If
>>>>>>> you are not the intended recipient, you should delete this message.
>>>>>>> Any
>>>>>>> disclosure, copying, or distribution of this message, or the taking
>>>>>>> of any
>>>>>>> action based on it, is strictly prohibited.
>>>>>>>
>>>>>>
>>>>>>
>>>>>
>>>>>
>>>>> --
>>>>> David McGinnis
>>>>> Staff Hadoop Consultant | Avalon Consulting, LLC
>>>>> <http://www.avalonconsult.com/>M: (513) 439-0082
>>>>> LinkedIn <http://www.linkedin.com/company/avalon-consulting-llc> |
>>>>> Google+ <http://www.google.com/+AvalonConsultingLLC> | Twitter
>>>>> <https://twitter.com/avalonconsult>
>>>>> ------------------------------------------------------------
>>>>> -------------------------------------------------
>>>>> This message (including any attachments) contains confidential
>>>>> information
>>>>> intended for a specific individual and purpose, and is protected by
>>>>> law. If
>>>>> you are not the intended recipient, you should delete this message.
>>>>> Any
>>>>> disclosure, copying, or distribution of this message, or the taking of
>>>>> any
>>>>> action based on it, is strictly prohibited.
>>>>>
>>>>
>>>>
>>>
>>>
>>> --
>>> David McGinnis
>>> Staff Hadoop Consultant | Avalon Consulting, LLC
>>> <http://www.avalonconsult.com/>M: (513) 439-0082
>>> LinkedIn <http://www.linkedin.com/company/avalon-consulting-llc> |
>>> Google+ <http://www.google.com/+AvalonConsultingLLC> | Twitter
>>> <https://twitter.com/avalonconsult>
>>> ------------------------------------------------------------
>>> -------------------------------------------------
>>> This message (including any attachments) contains confidential
>>> information
>>> intended for a specific individual and purpose, and is protected by law.
>>> If
>>> you are not the intended recipient, you should delete this message. Any
>>> disclosure, copying, or distribution of this message, or the taking of
>>> any
>>> action based on it, is strictly prohibited.
>>>
>>>
>>
>>
>> --
>> David McGinnis
>> Staff Hadoop Consultant | Avalon Consulting, LLC
>> <http://www.avalonconsult.com/>M: (513) 439-0082
>> LinkedIn <http://www.linkedin.com/company/avalon-consulting-llc> |
>> Google+ <http://www.google.com/+AvalonConsultingLLC> | Twitter
>> <https://twitter.com/avalonconsult>
>> ------------------------------------------------------------
>> -------------------------------------------------
>> This message (including any attachments) contains confidential
>> information
>> intended for a specific individual and purpose, and is protected by law.
>> If
>> you are not the intended recipient, you should delete this message. Any
>> disclosure, copying, or distribution of this message, or the taking of
>> any
>> action based on it, is strictly prohibited.
>>
>
>
>
> --
> David McGinnis
> Staff Hadoop Consultant | Avalon Consulting, LLC
> <http://www.avalonconsult.com/>M: (513) 439-0082
> LinkedIn <http://www.linkedin.com/company/avalon-consulting-llc> | Google+
> <http://www.google.com/+AvalonConsultingLLC> | Twitter
> <https://twitter.com/avalonconsult>
> ------------------------------------------------------------
> -------------------------------------------------
> This message (including any attachments) contains confidential information
> intended for a specific individual and purpose, and is protected by law.
> If
> you are not the intended recipient, you should delete this message. Any
> disclosure, copying, or distribution of this message, or the taking of any
> action based on it, is strictly prohibited.
>

Reply via email to