question Re: how to install Kerberos from Ambari ? in Archives of Support Questions (Read Only)

how to install Kerberos from Ambari ?

aliyesami — Sun, 18 Aug 2019 10:27:40 GMT

I think my problem for failing ranger KMS install was wrong Kerberos setup as you see from the attached screen its complaining about Kerberos being installed manually.

So how I do I install Kerberos "NOT manually" ?

Re: how to install Kerberos from Ambari ?

skurup — Wed, 28 Dec 2016 22:29:30 GMT

The steps are documented below:

https://docs.hortonworks.com/HDPDocuments/Ambari-2.1.2.1/bk_Ambari_Security_Guide/content/_installing_and_configuring_the_kdc.html

I would not recommend uninstalling Kerberos once its been installed since it can potentially mess you OS installation. Rather if you can follow the route of regenerating the principals and the keytabs . The steps are documented in the link above.

If you want to manually generate the keytabs/principals then you can refer the link below:

https://docs.hortonworks.com/HDPDocuments/HDP2/HDP-2.3.2/bk_installing_manually_book/content/creating_service_principals_and_keytab_files_for_hdp.html

Re: how to install Kerberos from Ambari ?

aliyesami — Wed, 28 Dec 2016 22:34:31 GMT

which of the three options I should choose for non-manual setup ? obviously the last one is out , and I don't have LDAP so should I be choosing "Exisiting MIT KDC" ? but I also don't have this setup , so I am totally lost

Use an Existing MIT KDC
Use an Existing Active Directory
Use Manual Kerberos Setup

Re: how to install Kerberos from Ambari ?

skurup — Thu, 29 Dec 2016 02:31:23 GMT

Do you have the MIT KDC set up ? If not then please install it as documented below:

https://docs.hortonworks.com/HDPDocuments/Ambari-2.1.2.1/bk_Ambari_Security_Guide/content/_optional_install_a_new_mit_kdc.html

Once done choose the option "Use an Existing MIT KDC"