Created on 02-21-2017 01:48 AM - edited 09-16-2022 04:07 AM
I found this article in HW, but i want to configure it to authenticate against AD instead of local KDC.. Any suggestions?
Created 02-21-2017 03:18 AM
Have a look at the attached document it should help you and please let me know when it does!
Created 02-21-2017 09:51 AM
The documentation you mention is not specific to a MIT KDC. It is also perfectly valid when using an active directory. You just need to set hadoop.http.authentication.kerberos.principal and hadoop.http.authentication.cookie.domain according to your specific settings.
The parameters are used to allow SPNEGO authentication when accessing some UIs of your cluster. Note that, in some cases, configuration on your browser might be required to use the tickets of your workstation. Example:
Hope this helps.