The Apache Knox gateway provides a single point of authentication and access for Apache
Hadoop services in a cluster. Use this task to secure Big Match
through the Knox Gateway.
Procedure
-
Install Hortonworks Data Platform or IBM Open Platform with Knox Gateway.
-
Install Big Match
and make sure that you do not alter the default setting of true for the
bigmatch.knox property.
-
After the Big Match
installation finishes, run the
/usr/ibmpacks/current/bigmatch/bin/import_bigmatch_cert.sh script as sudo from
the node where the Knox server is running.
-
Restart Knox for the Big Match
certificate to be trusted.
-
Make sure that the LDAP server that is associated with Knox is started.
-
If you enabled Kerberos and are accessing Big Match
user interfaces from behind the Know gateway, make sure that system level accounts exist for the
LDAP accounts that you are authenticating as.
-
Access the Big Match
UIs using the following exact addresses.
https://<knox-gateway-server>:<knox-port>/gateway/default/bigmatch/bmconfig/
https://<knox-gateway-server>:<knox-port>/gateway/default/bigmatch/bmcservices/
https://<knox-gateway-server>:<knox-port>/gateway/default/bigmatch/pme/
