question Re: kerberos High Availability in Support Questions

question Re: kerberos High Availability in Support Questions https://community.cloudera.com/t5/Support-Questions/kerberos-High-Availability/m-p/46990#M41157 Hi Azim, Are you using Cloudera Manager to manage the krb5.conf for the hosts in your cluster? If so, you can add a secondary KDC host with the following steps: <HR />Step 1.) Within Cloudera Manager, under the Administration > Security > Configuration page, add the following to the "Advanced Configuration Snippet (Safety Valve) for the Default Realm in krb.conf": <PRE>kdc = $secondary_host admin_server = $secondary_host</PRE> Step 2.) Click "Save Changes" at the top of the page. Step 3.) Execute a STOP (not restart) of the cluster services. Step 4.) From the Cloudera Manager dashboard under the Actions dropdown, select "Deploy Kerberos Configuration". Step 5.) Restart cluster services.<HR /> If you are not using Cloudera Manager to manage the krb5.conf for your hosts, you will need to manually update the krb5.conf and add the "kdc" and "admin_server" for the secondary KDC under the "Default Realms" section. If you have any questions about this process or continue to encounter difficulties, please let us know. Thanks, Katelynn Thu, 03 Nov 2016 16:14:45 GMT k8mnstr 2016-11-03T16:14:45Z