Hello all,
I'm trying to monitorize an hadoop cluster and the CDH is configured with Kerberos Authentication via keytab.
So, to reach the context path /jmx and the /cluster i need to have an authentication with a user and a keytab.
I configured the Zabbix 5.4.2 per the documentation, created a zabbix user on the kerberos realm, created the keytab, tested in the container with the curl -v --negotiate -u : http://example.com and it's working as expected.
After that i tried to configure the Hadoop HTTP Agent built-in on the Zabbix 5.4.2 but it was unsuccessful.
The NameNode and ResourceManager host and port are correct because the status are UP(1) but the rest of the monitorization is giving me 401 Unauthorized and i can't find why.
Some things i tried but didn't work:
- enabled the home directory for user zabbix in zabbix-server container, copied the keytab, krb5.conf and added a .bashrc with the "kinit -kt <keytab> <user>"
- tried the kinit with user root, user zabbix, different permissions and files in /etc/apache2/ or /etc/
Someone has some advice or might know what it can be?
Attached are some print's with my tests/configuration.
Thanks,
André.
I'm trying to monitorize an hadoop cluster and the CDH is configured with Kerberos Authentication via keytab.
So, to reach the context path /jmx and the /cluster i need to have an authentication with a user and a keytab.
I configured the Zabbix 5.4.2 per the documentation, created a zabbix user on the kerberos realm, created the keytab, tested in the container with the curl -v --negotiate -u : http://example.com and it's working as expected.
After that i tried to configure the Hadoop HTTP Agent built-in on the Zabbix 5.4.2 but it was unsuccessful.
The NameNode and ResourceManager host and port are correct because the status are UP(1) but the rest of the monitorization is giving me 401 Unauthorized and i can't find why.
Some things i tried but didn't work:
- enabled the home directory for user zabbix in zabbix-server container, copied the keytab, krb5.conf and added a .bashrc with the "kinit -kt <keytab> <user>"
- tried the kinit with user root, user zabbix, different permissions and files in /etc/apache2/ or /etc/
Someone has some advice or might know what it can be?
Attached are some print's with my tests/configuration.
Thanks,
André.
Attached Files
Comment