Does Cloudera Manager 5.4.0 Python Client API support Kerberos Keytab authentication?

BillM. — Fri, 16 Sep 2022 09:36:55 GMT

Our team has implemented an Oozie custom action and want to deploy it using our internal frameworks (rpm based).We have implemented deployment scripts using the Cloudera Manager Python Client API (see http://cloudera.github.io/cm_api/epydoc/5.4.0/index.html), which seems to require knowing the authentication credentials that is the plaintext user name and password of the cloudera manager server at install time to construct the ApiResource (which has only one constructor), in particular, the documentation reads as follows:

__init__(self, server_host, server_port=None, username='admin', password='admin', use_tls=False, version=10)
(Constructor)

source code

Creates a Resource object that provides API endpoints.

Parameters:

server_host - The hostname of the Cloudera Manager server.
server_port - The port of the server. Defaults to 7180 (http) or 7183 (https).
username - Login name.
password - Login password.
use_tls - Whether to use tls (https).
version - API version.

Returns: Resource object referring to the root. Overrides: object.__init__

Our local security team has suggested using Kerberos Keytabs for authentication (and I'm not expert at Kerberos yet). Can that approach work with the python client interface, if so how?

Re: Does Cloudera Manager 5.4.0 Python Client API support Kerberos Keytab authentication?

BillM. — Tue, 11 Aug 2015 20:43:33 GMT

The Cloudeara Manager Python Client API does not currently support Kerberos Authentication.

Re: Does Cloudera Manager 5.4.0 Python Client API support Kerberos Keytab authentication?

cjervis — Wed, 12 Aug 2015 12:38:29 GMT

Thank you Bill for sharing the information in case anyone else has the same question.

Re: Does Cloudera Manager 5.4.0 Python Client API support Kerberos Keytab authentication?

Dat Pham — Wed, 12 Aug 2015 15:50:25 GMT

This support is currently planned for C6 timeframe which is early 2016.

question Re: Does Cloudera Manager 5.4.0 Python Client API support Kerberos Keytab authentication? in Archives of Support Questions (Read Only)

Does Cloudera Manager 5.4.0 Python Client API support Kerberos Keytab authentication?

Re: Does Cloudera Manager 5.4.0 Python Client API support Kerberos Keytab authentication?

Re: Does Cloudera Manager 5.4.0 Python Client API support Kerberos Keytab authentication?

Re: Does Cloudera Manager 5.4.0 Python Client API support Kerberos Keytab authentication?