logging in to cloudera manager Admin Console without password (kerberos)

Question

Is it possible to use Kerberos ticket to login into Cloudera Manager Admin Console?

I can only see the instruction for enabling http web-console for Hadoop roles but not for admin console:

https://www.cloudera.com/documentation/enterprise/6/latest/topics/cm_sg_web_auth.html

Step 9: (Optional) Enable Authentication for HTTP Web Consoles for Hadoop Roles

Authentication for access to the HDFS, MapReduce, and YARN roles' web consoles can be enabled using a configuration option for the appropriate service. To enable this authentication:

From the Clusters tab, select the service (HDFS, MapReduce, or YARN) for which you want to enable authentication.
Click the Configuration tab.
Select Scope > service name Service-Wide.
Select Category > Security.
Type Enable Kerberos in the Search box.
Select Enable Kerberos Authentication for HTTP Web-Consoles.
Enter a Reason for change, and then click Save Changes to commit the changes.
When the command finishes, restart all roles of that service.

bgooley · Accepted Answer

@Kevin_Z , Current releases of Cloudera Manager do not support Kerberos authentication for access to the CM UI and API.We have added that feature, though, and it is targeted for future releases.

Consult · Answer

Hello @Kevin_Z,

I haven't come across such scenario or documentation. Most of the documentation talks about login credential while logging on to the CM. And till now, I don't see a any drawback or issue to use it login credential way.

It will be very kind of you to please share a particular business case that you would want to use kerberos to login on CM?

Sign up

Please use your Cloudera account.

Login to the community

Please use your Cloudera account.