https://community.cloudera.com/t5/Archives-of-Support-Questions/Kerberos-client-for-Windows-workstations/m-p/94487#M7811 <P>Once you setup one way trust and windows workstation is in domain, you don't need a separate kerberos client requesting tickets. </P><P>You can refer to <A href="http://hortonworks.com/blog/enabling-kerberos-hdp-active-directory-integration/" target="_blank">http://hortonworks.com/blog/enabling-kerberos-hdp-active-directory-integration/</A> (slightly older but should work)</P> Tue, 29 Sep 2015 21:59:40 GMT ravi1 2015-09-29T21:59:40Z https://community.cloudera.com/t5/Archives-of-Support-Questions/Kerberos-client-for-Windows-workstations/m-p/94486#M7810 <P>I am working with a Kerberized HDP 2.3 cluster that uses AD with Kerberos for strong authentication via Knox. Does the end user need to have a local Kerberos client installed on their Windows workstations to request the ticket? Or is it possible to enable SSO such that Kerberos ticket is issues as part of Windows domain login?</P> Tue, 29 Sep 2015 21:13:58 GMT https://community.cloudera.com/t5/Archives-of-Support-Questions/Kerberos-client-for-Windows-workstations/m-p/94486#M7810 dbaev 2015-09-29T21:13:58Z https://community.cloudera.com/t5/Archives-of-Support-Questions/Kerberos-client-for-Windows-workstations/m-p/94487#M7811 <P>Once you setup one way trust and windows workstation is in domain, you don't need a separate kerberos client requesting tickets. </P><P>You can refer to <A href="http://hortonworks.com/blog/enabling-kerberos-hdp-active-directory-integration/" target="_blank">http://hortonworks.com/blog/enabling-kerberos-hdp-active-directory-integration/</A> (slightly older but should work)</P> Tue, 29 Sep 2015 21:59:40 GMT https://community.cloudera.com/t5/Archives-of-Support-Questions/Kerberos-client-for-Windows-workstations/m-p/94487#M7811 ravi1 2015-09-29T21:59:40Z