question Re: I've enabled Kerberos in my Sandbox. Once i get a valid token i can connect to any service with in cluster. I think this is because of SPNEGO. Is there any way to disable SPNEGO to all users and let service/batch accounts use it? in Archives of Support Questions (Read Only) https://community.cloudera.com/t5/Archives-of-Support-Questions/I-ve-enabled-Kerberos-in-my-Sandbox-Once-i-get-a-valid-token/m-p/134114#M35030 <P>thank you, this gives me a good idea. let me play with ranger and see what i can accomplish</P> Wed, 20 Jul 2016 23:52:37 GMT chrsvarma 2016-07-20T23:52:37Z I've enabled Kerberos in my Sandbox. Once i get a valid token i can connect to any service with in cluster. I think this is because of SPNEGO. Is there any way to disable SPNEGO to all users and let service/batch accounts use it? https://community.cloudera.com/t5/Archives-of-Support-Questions/I-ve-enabled-Kerberos-in-my-Sandbox-Once-i-get-a-valid-token/m-p/134112#M35028 Fri, 16 Sep 2022 10:30:20 GMT https://community.cloudera.com/t5/Archives-of-Support-Questions/I-ve-enabled-Kerberos-in-my-Sandbox-Once-i-get-a-valid-token/m-p/134112#M35028 chrsvarma 2022-09-16T10:30:20Z Re: I've enabled Kerberos in my Sandbox. Once i get a valid token i can connect to any service with in cluster. I think this is because of SPNEGO. Is there any way to disable SPNEGO to all users and let service/batch accounts use it? https://community.cloudera.com/t5/Archives-of-Support-Questions/I-ve-enabled-Kerberos-in-my-Sandbox-Once-i-get-a-valid-token/m-p/134113#M35029 <A rel="user" href="https://community.cloudera.com/users/968/chrsvarma.html" nodeid="968">@Raja Sekhar Chintalapati</A><P>It's not because of SPNEGO, its because, once you get authenticated to KDC, you get initial ticket called TGT, using TGT further authentication happens to get Service level ticket. </P><P>If you want to decide which user can access what then probably you are looking for authorization and Rager is the solution for you.</P><P>Note - <B>SPNEGO</B> provides a mechanism for extending Kerberos to Web applications through the standard HTTP protocol.</P><P>Please do let me know if you need any further help.</P> Wed, 20 Jul 2016 03:24:14 GMT https://community.cloudera.com/t5/Archives-of-Support-Questions/I-ve-enabled-Kerberos-in-my-Sandbox-Once-i-get-a-valid-token/m-p/134113#M35029 KuldeepK 2016-07-20T03:24:14Z Re: I've enabled Kerberos in my Sandbox. Once i get a valid token i can connect to any service with in cluster. I think this is because of SPNEGO. Is there any way to disable SPNEGO to all users and let service/batch accounts use it? https://community.cloudera.com/t5/Archives-of-Support-Questions/I-ve-enabled-Kerberos-in-my-Sandbox-Once-i-get-a-valid-token/m-p/134114#M35030 <P>thank you, this gives me a good idea. let me play with ranger and see what i can accomplish</P> Wed, 20 Jul 2016 23:52:37 GMT https://community.cloudera.com/t5/Archives-of-Support-Questions/I-ve-enabled-Kerberos-in-my-Sandbox-Once-i-get-a-valid-token/m-p/134114#M35030 chrsvarma 2016-07-20T23:52:37Z Re: I've enabled Kerberos in my Sandbox. Once i get a valid token i can connect to any service with in cluster. I think this is because of SPNEGO. Is there any way to disable SPNEGO to all users and let service/batch accounts use it? https://community.cloudera.com/t5/Archives-of-Support-Questions/I-ve-enabled-Kerberos-in-my-Sandbox-Once-i-get-a-valid-token/m-p/134115#M35031 <P> <A rel="user" href="https://community.cloudera.com/users/504/kkulkarni.html" nodeid="504">@Kuldeep Kulkarni</A> great stuff. I find myself getting this confused as well.</P> Thu, 21 Jul 2016 01:09:28 GMT https://community.cloudera.com/t5/Archives-of-Support-Questions/I-ve-enabled-Kerberos-in-my-Sandbox-Once-i-get-a-valid-token/m-p/134115#M35031 sunile_manjee 2016-07-21T01:09:28Z