Reply
Explorer
Posts: 23
Registered: ‎04-26-2016

What is the proper way when any changes are being applied we are planning to replace winbind

What is the proper way, when any changes are being applied, we are planning to replace winbind with SSSD kerberos.

 

When the change process takes place, what is the proper way, do i need to stop all services for all hosts on the cluster?

 

the change process will take close to 3 hours.

 

Thanks a lot for the helpful info.

 

 

Highlighted
Posts: 614
Topics: 3
Kudos: 93
Solutions: 61
Registered: ‎08-16-2016

Re: What is the proper way when any changes are being applied we are planning to replace winbind

Please read the Cloudera docs on implementing Kerberos. This is just using the wizard but use the menu on the left to read through the command line version so you have a clear idea on what is needed and happening.

https://www.cloudera.com/documentation/enterprise/5-6-x/topics/cm_sg_intro_kerb.html

Cloudera doesn't have any docs specifically on SSSD. Look to the OS vendors docs to get that.

I could possible all be done in 3 hours, depending on the size of your cluster. There are other factors in play was well on usage. As users accessing it via JDBC or ODBC will need to make client side changes, apps will need to be updated to authenticate, and automated process will need service accounts with keytab files.
Announcements