Archives of Support Questions (Read Only)

This is an archived board for historical reference. Information and links may no longer be available or relevant
Announcements
This board is archived and read-only for historical reference. To ask a new question, please post a new topic on the appropriate active board.

how to install Kerberos from Ambari ?

avatar
Super Collaborator

I think my problem for failing ranger KMS install was wrong Kerberos setup as you see from the attached screen its complaining about Kerberos being installed manually.

So how I do I install Kerberos "NOT manually" ?

10871-screen3.jpg

1 ACCEPTED SOLUTION

avatar
Super Collaborator

The steps are documented below:

https://docs.hortonworks.com/HDPDocuments/Ambari-2.1.2.1/bk_Ambari_Security_Guide/content/_installin...

I would not recommend uninstalling Kerberos once its been installed since it can potentially mess you OS installation. Rather if you can follow the route of regenerating the principals and the keytabs . The steps are documented in the link above.

If you want to manually generate the keytabs/principals then you can refer the link below:

https://docs.hortonworks.com/HDPDocuments/HDP2/HDP-2.3.2/bk_installing_manually_book/content/creatin...

View solution in original post

3 REPLIES 3

avatar
Super Collaborator

The steps are documented below:

https://docs.hortonworks.com/HDPDocuments/Ambari-2.1.2.1/bk_Ambari_Security_Guide/content/_installin...

I would not recommend uninstalling Kerberos once its been installed since it can potentially mess you OS installation. Rather if you can follow the route of regenerating the principals and the keytabs . The steps are documented in the link above.

If you want to manually generate the keytabs/principals then you can refer the link below:

https://docs.hortonworks.com/HDPDocuments/HDP2/HDP-2.3.2/bk_installing_manually_book/content/creatin...

avatar
Super Collaborator

which of the three options I should choose for non-manual setup ? obviously the last one is out , and I don't have LDAP so should I be choosing "Exisiting MIT KDC" ? but I also don't have this setup , so I am totally lost

Use an Existing MIT KDC
Use an Existing Active Directory
Use Manual Kerberos Setup

avatar
Super Collaborator

Do you have the MIT KDC set up ? If not then please install it as documented below:

https://docs.hortonworks.com/HDPDocuments/Ambari-2.1.2.1/bk_Ambari_Security_Guide/content/_optional_...

Once done choose the option "Use an Existing MIT KDC"