Integrating HDP with A/D without writing anything to A/D? How?

[#1]

Hi Guys,

I am trying to Kerberizing the cluster and want to integrate with A/D for user authentication. Earlier I've done it using MIT KDC in the HDP cluster and setting bi-directional trust with A/D. But as I remember, the previous step adds couple of entries in the A/D. However, customer does not want to give write access to the A/D. How to proceed in this scenario?

Thanks,

SS.

[#2 · Accepted solution]

@Smart Solutions

You can have KDC in HDP cluster and build one way trust as you mentioned. You still need access to enterprise KDC as you have mentioned it already

https://docs.hortonworks.com/HDPDocuments/HDP2/HDP-2.3.0/bk_installing_manually_book/content/ref-cdb...