question Integrating HDP with A/D without writing anything to A/D? How? in Archives of Support Questions (Read Only)

Integrating HDP with A/D without writing anything to A/D? How?

smartninja723 — Fri, 16 Sep 2022 10:06:34 GMT

Hi Guys,

I am trying to Kerberizing the cluster and want to integrate with A/D for user authentication. Earlier I've done it using MIT KDC in the HDP cluster and setting bi-directional trust with A/D. But as I remember, the previous step adds couple of entries in the A/D. However, customer does not want to give write access to the A/D. How to proceed in this scenario?

Thanks,

SS.

Re: Integrating HDP with A/D without writing anything to A/D? How?

nsabharwal — Tue, 01 Mar 2016 22:12:57 GMT

@Smart Solutions

You can have KDC in HDP cluster and build one way trust as you mentioned. You still need access to enterprise KDC as you have mentioned it already

https://docs.hortonworks.com/HDPDocuments/HDP2/HDP-2.3.0/bk_installing_manually_book/content/ref-cdbb335b-b1af-4e3e-a536-efb0243f9ef9.1.html