1. Test HDP Security Administration Server URL

In order to connect to the HDP Security Administration server, both the HTTP (default 6080) and to uploads/pulls information using the repository named in the connection URL.

Use telnet to test the connection:

  1. Check the URL for the portal in the agent configuration file, xasecure-$service-name-security.xml. This file is located in the configuration directory of the Hadoop service (/etc/$servicename/conf).

    For example:

    more /etc/hbase/conf/xasecure-hbase-security.xml
    ......
    <property>
       <name>xasecure.hbase.policymgr.url</name>
       <value>http://policymgr:6080/service/assets/policyList/sandbox_2_hbase</value>
       <description>
    	Location where XASecure Role Based Authorization Info is
    	located.
       </description>
    </property>
    .......
  2. Telnet to the HTTP port from the agent host to the HDP Security Administration server:

    telnet policymgr 6080
    Trying 192.168.56.101...
    Connected to policymgr.
    Escape character is '^]'.
    [Note]Note

    If either of the connections fail, then check your firewall and SELinux settings.

  3. If you are able to connect, verify the repository name matches on the server and agent:

    1. Sign in to the HDP Security Administration Web UI.

    2. Click Policy Manager > Manage Repository. The name of the repository in the UI must match the name shown at the end of the xasecure.hbase.policymgr.url.

      For example, this agent sends information to the HBase repository named sandbox_2_hbase:

      <value>http://policymgr:6080/service/assets/policyList/sandbox_2_hbase</value>


loading table of contents...