Reply
Explorer
Posts: 27
Registered: ‎05-15-2015
Accepted Solution

Does Cloudera Manager 5.4.0 Python Client API support Kerberos Keytab authentication?

Our team has implemented an Oozie custom action and want to deploy it using our internal frameworks (rpm based).We have implemented deployment scripts using the Cloudera Manager Python Client API (see http://cloudera.github.io/cm_api/epydoc/5.4.0/index.html), which seems to require knowing the authentication credentials that is the plaintext user name and password of the cloudera manager server at install time to construct the ApiResource (which has only one constructor), in particular, the documentation reads as follows:

 

__init__(selfserver_hostserver_port=Noneusername='admin'password='admin'use_tls=Falseversion=10) 
(Constructor)
source code 

Creates a Resource object that provides API endpoints.

Parameters:
  • server_host - The hostname of the Cloudera Manager server.
  • server_port - The port of the server. Defaults to 7180 (http) or 7183 (https).
  • username - Login name.
  • password - Login password.
  • use_tls - Whether to use tls (https).
  • version - API version.
Returns: Resource object referring to the root. Overrides: object.__init__

Our local security team has suggested using Kerberos Keytabs for authentication (and I'm not expert at Kerberos yet).  Can that approach work with the python client interface, if so how?

 

 

 

Explorer
Posts: 27
Registered: ‎05-15-2015

Re: Does Cloudera Manager 5.4.0 Python Client API support Kerberos Keytab authentication?

[ Edited ]

The Cloudeara Manager Python Client API does not currently support Kerberos Authentication.

Posts: 964
Kudos: 114
Solutions: 61
Registered: ‎04-06-2015

Re: Does Cloudera Manager 5.4.0 Python Client API support Kerberos Keytab authentication?

Thank you Bill for sharing the information in case anyone else has the same question. 



Cy Jervis, Community Manager


Was your question answered? Make sure to mark the answer as the accepted solution.
If you find a reply useful, say thanks by clicking on the thumbs up button.

Learn more about the Cloudera Community:

Terms of Service

Community Guidelines

How to use the forum

Cloudera Employee
Posts: 14
Registered: ‎05-27-2014

Re: Does Cloudera Manager 5.4.0 Python Client API support Kerberos Keytab authentication?

This support is currently planned for C6 timeframe which is early 2016.
Announcements