https://community.cloudera.com/t5/Support-Questions/how-to-create-new-keytab-if-my-previous-keytab-is-expired/m-p/289054#M214008 <P><a href="https://community.cloudera.com/t5/user/viewprofilepage/user-id/70779">@OmThakare</a>&nbsp;<BR /><EM><STRONG>Are you managing keytabs/kerberos using Ambari?</STRONG></EM></P><P>If yes, then you can regenerate keytabs from Ambari UI. Ambari allows to either regenerate all keytabs or only for specific components on specific hosts.</P><P>&nbsp;</P><LI-CODE lang="markup">Regenerating keytabs for all hosts in the cluster is a disruptive operation, and requires all components to be restarted. Optionally, keytabs can be regenerated only for missing hosts and components, and this operation requires selectively restarting those affected hosts and services.</LI-CODE><P>&nbsp;</P><P><A href="https://docs.cloudera.com/HDPDocuments/Ambari-2.7.4.0/managing-and-monitoring-ambari/content/amb_regenerate_kerberos_keytabs_from_ambari_web.html" target="_blank" rel="noopener">https://docs.cloudera.com/HDPDocuments/Ambari-2.7.4.0/managing-and-monitoring-ambari/content/amb_regenerate_kerberos_keytabs_from_ambari_web.html</A></P><P>.</P><P><EM><STRONG>If you are not not using Ambari to manage kerberos </STRONG></EM>then&nbsp;&nbsp;<SPAN>Following link describes&nbsp;</SPAN><SPAN>How to create service principals and keytab files</SPAN></P><P><A href="https://docs.cloudera.com/HDPDocuments/HDP3/HDP-3.1.5/security-reference/content/kerberos_nonambari_creating_service_principals_and_keytab_files_for_hdp.html" target="_blank" rel="noopener">https://docs.cloudera.com/HDPDocuments/HDP3/HDP-3.1.5/security-reference/content/kerberos_nonambari_creating_service_principals_and_keytab_files_for_hdp.html</A></P><P>&nbsp;</P> Tue, 04 Feb 2020 10:27:41 GMT jsensharma 2020-02-04T10:27:41Z https://community.cloudera.com/t5/Support-Questions/how-to-create-new-keytab-if-my-previous-keytab-is-expired/m-p/289050#M214005 <P>how to create new keytab if my previous keytab is expired?</P> Tue, 04 Feb 2020 14:14:10 GMT https://community.cloudera.com/t5/Support-Questions/how-to-create-new-keytab-if-my-previous-keytab-is-expired/m-p/289050#M214005 OmThakare 2020-02-04T14:14:10Z https://community.cloudera.com/t5/Support-Questions/how-to-create-new-keytab-if-my-previous-keytab-is-expired/m-p/289054#M214008 <P><a href="https://community.cloudera.com/t5/user/viewprofilepage/user-id/70779">@OmThakare</a>&nbsp;<BR /><EM><STRONG>Are you managing keytabs/kerberos using Ambari?</STRONG></EM></P><P>If yes, then you can regenerate keytabs from Ambari UI. Ambari allows to either regenerate all keytabs or only for specific components on specific hosts.</P><P>&nbsp;</P><LI-CODE lang="markup">Regenerating keytabs for all hosts in the cluster is a disruptive operation, and requires all components to be restarted. Optionally, keytabs can be regenerated only for missing hosts and components, and this operation requires selectively restarting those affected hosts and services.</LI-CODE><P>&nbsp;</P><P><A href="https://docs.cloudera.com/HDPDocuments/Ambari-2.7.4.0/managing-and-monitoring-ambari/content/amb_regenerate_kerberos_keytabs_from_ambari_web.html" target="_blank" rel="noopener">https://docs.cloudera.com/HDPDocuments/Ambari-2.7.4.0/managing-and-monitoring-ambari/content/amb_regenerate_kerberos_keytabs_from_ambari_web.html</A></P><P>.</P><P><EM><STRONG>If you are not not using Ambari to manage kerberos </STRONG></EM>then&nbsp;&nbsp;<SPAN>Following link describes&nbsp;</SPAN><SPAN>How to create service principals and keytab files</SPAN></P><P><A href="https://docs.cloudera.com/HDPDocuments/HDP3/HDP-3.1.5/security-reference/content/kerberos_nonambari_creating_service_principals_and_keytab_files_for_hdp.html" target="_blank" rel="noopener">https://docs.cloudera.com/HDPDocuments/HDP3/HDP-3.1.5/security-reference/content/kerberos_nonambari_creating_service_principals_and_keytab_files_for_hdp.html</A></P><P>&nbsp;</P> Tue, 04 Feb 2020 10:27:41 GMT https://community.cloudera.com/t5/Support-Questions/how-to-create-new-keytab-if-my-previous-keytab-is-expired/m-p/289054#M214008 jsensharma 2020-02-04T10:27:41Z https://community.cloudera.com/t5/Support-Questions/how-to-create-new-keytab-if-my-previous-keytab-is-expired/m-p/289059#M214013 <P>I am using Ad kerberus and sentry for security.</P> Tue, 04 Feb 2020 10:49:53 GMT https://community.cloudera.com/t5/Support-Questions/how-to-create-new-keytab-if-my-previous-keytab-is-expired/m-p/289059#M214013 OmThakare 2020-02-04T10:49:53Z https://community.cloudera.com/t5/Support-Questions/how-to-create-new-keytab-if-my-previous-keytab-is-expired/m-p/295054#M217565 <P>no I am using CDH 5.13.3</P> Wed, 29 Apr 2020 10:32:34 GMT https://community.cloudera.com/t5/Support-Questions/how-to-create-new-keytab-if-my-previous-keytab-is-expired/m-p/295054#M217565 OmThakare 2020-04-29T10:32:34Z