question Kerberos / Active Directory in the cloud in Archives of Support Questions (Read Only)

Kerberos / Active Directory in the cloud

RyanCicak — Sun, 18 Aug 2019 11:09:00 GMT

If I want to configure multiple clusters in public cloud offerings (AWS, Azure, GCP) using Cloudbreak and my on premise cluster is using Kerberos / Active Directory - do I need to have my Kerberos / Active directory servers on premise and have the cloud communicate back and forth? Will the Kerberos/Active Directory credentials be cached in the cloud? If so, which components will hold the cache? Cloudbreak / Ambari?

Re: Kerberos / Active Directory in the cloud

RyanCicak — Thu, 02 Jun 2016 02:43:37 GMT

Since there have been no responses to this question for over a week, I've done research.

Cloud providers have solutions to active directory in their offering:

Azure: Azure Active Directory

AWS: AWS Directory Service

Both cloud providers have a way to sync your on-premise Active Directory with their cloud-based service (Azure Active Directory or AWS Directory Service). These solutions both include Kerberos authentication support.