Enabling SPNEGO authentication for Hue and Browser agent settings

After we secured cluster with kerberos authentication we also configured SPNEGO authentication backend for hue ,So that all Active directory authenticated users can access the Hue console directly.

Enabling SPNEGO authentication is straight forward just following cloudera documentation it will work.

But for us it didn't work, it was prompting for basic authentication and in hue logs we got below exception.

After we googled we found some suggestion to add the websites into the Internet explore Intranet zone or in Trusted Sites zone.

Once we added the site into Trusted sites, we were able to access hue console without providing username and password.

----------------------------------------------------------------------------

[13/Oct/2017 19:44:56 -0700] middleware   ERROR    Unexpected error when authenticating against KDC
Traceback (most recent call last):
  File "/opt/cloudera/parcels/CDH-5.12.1-1.cdh5.12.1.p0.3/lib/hue/desktop/core/src/desktop/middleware.py", line 598, in process_request
    r=kerberos.authGSSServerStep(context,authstr)
GSSError: (('Unspecified GSS failure.  Minor code may provide more information', 851968), ('Ticket not yet valid', -1765328351))
[13/Oct/2017 19:44:56 -0700] access       DEBUG    192.168.100.10 -anon- - "HEAD /desktop/debug/is_alive HTTP/1.1"