Archives of Support Questions (Read Only)

This is an archived board for historical reference. Information and links may no longer be available or relevant
Announcements
This board is archived and read-only for historical reference. To ask a new question, please post a new topic on the appropriate active board.

configuration Nifi to work with kerberized Hadoop

avatar
New Member

I want nifi to use kerberos principal while running the Hive script in Hadoop with Kerbores set up.

Is there a way to automate renew Kerbores ticket? Nifi executestream process group stopped working after the Kerbores ticket expired. The process continue after executing command "kinit <username>".

current nifi.properties file:

nifi.kerberos.krb5.file=/etc/krb5.conf

nifi.kerberos.service.principal=<username>

nifi.kerberos.keytab.location=/home/username.keytab

nifi.kerberos.authetication.expiration=12 hours

1 ACCEPTED SOLUTION

avatar
Master Guru

Some of these properties are a little bit mis-leading and were renamed in 1.0 to make it clearer:

https://nifi.apache.org/docs/nifi-docs/html/administration-guide.html#kerberos_properties

I think if you are calling an external script you would need to handle renewing the kerberos tickets yourself. You could just setup a GenerateFlowFile on a timer schedule that went to an ExecuteStreamCommand and just did a kinit every couple of hours.

View solution in original post

1 REPLY 1

avatar
Master Guru

Some of these properties are a little bit mis-leading and were renamed in 1.0 to make it clearer:

https://nifi.apache.org/docs/nifi-docs/html/administration-guide.html#kerberos_properties

I think if you are calling an external script you would need to handle renewing the kerberos tickets yourself. You could just setup a GenerateFlowFile on a timer schedule that went to an ExecuteStreamCommand and just did a kinit every couple of hours.