question Re: Location of keytab files in Archives of Support Questions (Read Only)

Location of keytab files

AMishra — Fri, 16 Sep 2022 09:47:34 GMT

Hi,

I have enabled kerberos in my cloudera cluster using Cloudera Manager.

Kerberized cluster is running fine. But I'm unable to get the location of keytab files (eg. hdfs.keytab, yarn.keytab etc).

The keytab location property is also missing from the *-site.xml files.

Where can I get the location of those keytab files.

Regards,

Amit

Re: Location of keytab files

MSharma — Fri, 18 Mar 2016 01:57:10 GMT

keytab files are managed by cloudera manager . you can find them in /var/run/cloudera-scm-agent/process

Re: Location of keytab files

obar101 — Wed, 25 Dec 2019 10:22:33 GMT

export dirname=/var/run/cloudera-scm-agent/process/ sudo find $dirname -not -empty `-ls -l` | grep keytab

Re: Location of keytab files

mugdha — Thu, 25 Mar 2021 04:20:27 GMT

They will be in the process directory for the component. For example:

hive.keytab is in: /var/run/cloudera-scm-agent/process/*-hive_on_tez-HIVESERVER2

Re: Location of keytab files

Kartik_Agarwal — Thu, 23 Sep 2021 13:59:35 GMT

The keytabs are pushed from a database to a runtime location at startup of services, what you are describing as a configuration is not really viable from what I understand. You will see /var/run/cloudera-scm-agent/process/ but this is ephemeral, next restart will have another locaiton. You could experiment with trying to provide the manual keytabs through safety valve to the necessary services.