question Kerberos Install on HDP cluster after Ranger/Ranger KMS setup in Support Questions

Kerberos Install on HDP cluster after Ranger/Ranger KMS setup

munnyrahul — Tue, 02 May 2017 12:23:01 GMT

I have installed Ranger/Ranger KMS on HDP 2.5 cluster using Ambari.Just wanted to check if we can setup kerberos on HDP 2.5 after Ranger/Ranger KMS have been installed on cluster? Or do we need to delete Ranger/Ranger KMS first for installation of kerberos?

Thanks

Re: Kerberos Install on HDP cluster after Ranger/Ranger KMS setup

VR46 — Tue, 02 May 2017 23:31:50 GMT

Hello @rahul gulati,

There is no need to remove Ranger / Ranger KMS before enabling Kerberos on your cluster. I'd recommend to use Ambari Kerberos Wizard to enable Kerberos (just as you do normally) and Ambari should be able to handle all the installed components.

Hope this helps !

Re: Kerberos Install on HDP cluster after Ranger/Ranger KMS setup

munnyrahul — Wed, 03 May 2017 00:14:08 GMT

Hello @Vipin Rathor

That's great. I have a 6 node cluster(1 Edge Node, 1 Primary NN, 1 Secondary NN and 2 Slave Nodes). Just wanted to confirm that Shall i setup up new MIT KDC on my Ambari Server Node(Master Node1) and then go for Ambari Automated Kerberos Security setup?

I assume above mentioned approach should be the best in my case as i need to setup MIT KDC as well.

I am following below mentioned Hortonworks docs for kerberos setup.

http://docs.hortonworks.com/HDPDocuments/HDF2/HDF-2.1.2/bk_dataflow-security/content/_optional_install_a_new_mit_kdc.html

Thanks in Advance!!

Re: Kerberos Install on HDP cluster after Ranger/Ranger KMS setup

VR46 — Sat, 06 May 2017 00:28:41 GMT

@rahul gulati Yes, it's okay to install MIT KDC on Ambari server node. But in the real production cluster, we should clearly separate these two roles on two different nodes.

Hope this helps !