Configure Knox SSO for Data Analytics Studio

Update the Knox SSO settings under DAS Configuration in Ambari.

1. SSH in to the Knox gateway host with a root or a knoxuser user.
2. Export the Knox certificate by running the following command:

   /usr/hdp/current/knox-server/bin/knoxcli.sh export-cert --type PEM

   If the export is successfully, the following message is displayed:

   Certificate gateway-identity has been successfully exported to: /usr/$REPO/$VERSION/knox/data/security/keystores/gateway-identity.pem

   Note the location where you save the gateway-identity.pem file.
3. Enable the Knox SSO topology settings:
   1. From Ambari > Data Analytics Studio > Configs > Advanced data_analytics_studio-security-site, check to select knox_sso_enabled.
   2. Set knox_sso_url value as https://<knox-host>:8443/gateway/knoxsso/api/v1/websso.
   3. Copy the contents of the PEM file exported in Step 1 to knox_publickey. Make sure the certificate headers are not copied.
   4. Click Save and click through the confirmation pop-ups.
   5. Restart Data Analytics Studio webapp.
   6. Select Actions > Restart All Required to restart all other services that require a restart.