question Re: BDR Replication between secure and non secure cluster in Support Questions

BDR Replication between secure and non secure cluster

sebin.john — Fri, 16 Sep 2022 09:37:04 GMT

Hello,

I am not sure if this is the right board to post this question.

I have two clusters and one of them is secured with Kerberos.

The requirement is to configure replication between these two cluster using BDR.

Source : Unsecure cluster

Targent: Secure Cluster

Is it possible to set this up successfully?

Thanks in advance

Re: BDR Replication between secure and non secure cluster

GautamG — Thu, 06 Aug 2015 06:49:00 GMT

Hi Sebin, From what I read in the documentation this is not possible

Important: To use HDFS replication, both the target and source HDFS services must use Kerberos authentication, or both the target and source HDFS services must not use Kerberos authentication.

ref: http://www.cloudera.com/content/cloudera/en/documentation/core/latest/topics/cm_bdr_replication_intro.html

Re: BDR Replication between secure and non secure cluster

sebin.john — Thu, 06 Aug 2015 06:56:26 GMT

Thanks Gautam

Re: BDR Replication between secure and non secure cluster

MikeJones — Wed, 26 Jul 2017 21:51:19 GMT

Sorry to Resurrect this from 2 years ago, but does this have to do with the credential being used or the fact that kerberos is enabled at all?

Example, if I had a non-kerberized superuser on the source(kerberized) cluster, could I then use BDR to replicate the data? The situation I am in is such that even if I did have kerberos available to me, my destination would not be in the same realm, so if possible I would prefer to bypass kerberos as its less important that the destination be kerberized (It's isolated by firewall rules at a perimeter), I just want the cluster's data mirrored.

Re: BDR Replication between secure and non secure cluster

bgooley — Wed, 26 Jul 2017 22:22:44 GMT

Hi @MikeJones,

I'm not sure what you are saying. Either you have Kerberos authentication enabled in a cluster or you don't. In order to use BDR HDFS replication, you need to have Kerberos enabled on both clusters or not enabled in both clusters.

For information about how BDR replication supports replicating between clusters in different realms, see:

https://www.cloudera.com/documentation/enterprise/latest/topics/cm_bdr_replication_and_kerberos.html

-Ben