On BDA V4.3/CDH 5.4.7/CM 5.4.7 with TLS-Logging into Cloudera Navigator Raises "Access Denied You are not authorized to view the requested page"

(Doc ID 2109339.1)

Last updated on FEBRUARY 29, 2016

Applies to:

Big Data Appliance Integrated Software - Version 4.3.0 and later
Linux x86-64

Symptoms

1. On BDA V4.3/CDH 5.4.7/CM 5.4.7 with TLS enabled logging into Cloudera Navigator Raises:

Access Denied
You are not authorized to view the requested page
Logout

You will see:

 

2. The solution provided in the Cloudera Knowledge Base article: Error: "Access Denied you are not authorized to view the requested page" after configuring AD/LDAP Authentication for Navigator Metadata Server,  does not resolve the issue, although it looks like a similar problem.

 

3. After enabling Transport Layer Security (TLS) in the Cloudera Manager UI, the following error appears in Navigator Metadata Server log when attempting to log in to Navigator. This log is located in /var/log/cloudera-scm-navigator on the Navigator server, by default Node 3 of the BDA.

Caused by: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
at sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:385)
at sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:292)
at sun.security.validator.Validator.validate(Validator.java:260)
at sun.security.ssl.X509TrustManagerImpl.validate(X509TrustManagerImpl.java:326)
at sun.security.ssl.X509TrustManagerImpl.checkTrusted(X509TrustManagerImpl.java:231)
at sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:126)
at sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1323)
...
Caused by: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
at sun.security.provider.certpath.SunCertPathBuilder.engineBuild(SunCertPathBuilder.java:196)
at java.security.cert.CertPathBuilder.build(CertPathBuilder.java:268)
at sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:380)

 

 

Cause

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms