Troubleshooting Unauthorized Access Error in DataHub GMS Server

ingestion
1

Original Slack Thread

<@U06TM7M40RK> Getting below error. Datahub is deployed in eks cluster and i am trying to run code from local system by port forwarding to gms server
datahub.configuration.common.OperationalError: (‘Unable to emit metadata to DataHub GMS’, {‘message’: '401 Client Error: Unauthorized for url: http://localhost:8080/aspects?action=ingestProposalhttp://localhost:808/aspects?action=ingestProposal’}|'})

2

The 401 Client Error: Unauthorized error indicates that your request to the DataHub GMS server is not authenticated. This typically happens when the required authentication token is missing or incorrect.

To resolve this issue, you need to ensure that you are using a valid Personal Access Token (PAT) in your request headers. Here are the steps to generate and use a PAT:

  1. Generate a Personal Access Token:

    • Navigate to ‘Settings’ > ‘Access Tokens’ in the DataHub UI.
    • Click on ‘Generate new token’ and fill out the required information.
    • Save the generated token securely.

  2. Use the Access Token in Your Requests:

    • Include the generated token in the Authorization header of your HTTP requests as follows:
      Authorization: Bearer &lt;your-personal-access-token&gt;

  3. Update Your Configuration:

    • Ensure that your configuration file includes the token. Here is an example configuration for the datahub-rest sink:
source:
  # source configs
sink:
  type: "datahub-rest"
  config:
    server: "<http://localhost:8080>"
    token: "&lt;your-personal-access-token&gt;"

According to the <https://datahubproject.io/docs/0.13.1/authentication/personal-access-tokens|DataHub documentation on Personal Access Tokens>, you can find more details on generating and using these tokens.

If you are unable to disable metadata_service_authentication, you can still generate a token programmatically using the GraphQL API. However, you need to ensure that you have the necessary permissions and that the metadata_service_authentication is configured correctly. More details on configuring and using authentication can be found in the <Metadata Service Authentication | DataHub documentation on Metadata Service Authentication>.

Would you like more detailed steps or assistance with a specific part of this process?

Sources:

3

Hey there! :wave: Make sure your message includes the following information if relevant, so we can help more effectively!

  1. Are you using UI or CLI for ingestion?
  2. Which DataHub version are you using? (e.g. 0.12.0)
  3. What data source(s) are you integrating with DataHub? (e.g. BigQuery)

<@U06TM7M40RK> Can you help with the questions in this thread?

:information_source: We’re experimenting with a new AI assistant for questions in the <#CUMUWQU66> channel to help you track down helpful resources more quickly. Keep in mind that responses may not always be spot-on; feel free to ask it follow-up questions and don’t forget to provide its responses a :thumbsup: or :thumbsdown: so other folks in the Community know if you’re still looking for help on the topic!

4

I’m not able to find any data sources to answer your question. Could you provide more details about the specific issue or question you have regarding DataHub? If this doesn’t help, please reach out to the DataHub support team for further assistance. :+1: 0 button :-1: 0 button :bulb: Hint: Mention @runllm in the thread for followups.