Configuring HTTP Authentication for HDFS, YARN, MapReduce2, HBase, Oozie, Falcon and Storm

[#1]

I found this article in HW, but i want to configure it to authenticate against AD instead of local KDC.. Any suggestions?

https://docs.hortonworks.com/HDPDocuments/HDP2/HDP-2.5.3/bk_security/content/_configuring_http_authe...

[#2]

@Raja Sekhar Chintalapati

Have a look at the attached document it should help you and please let me know when it does!

[#3]

Hi @Raja Sekhar Chintalapati,

The documentation you mention is not specific to a MIT KDC. It is also perfectly valid when using an active directory. You just need to set hadoop.http.authentication.kerberos.principal and hadoop.http.authentication.cookie.domain according to your specific settings.

The parameters are used to allow SPNEGO authentication when accessing some UIs of your cluster. Note that, in some cases, configuration on your browser might be required to use the tickets of your workstation. Example:

https://community.hortonworks.com/articles/28537/user-authentication-from-windows-workstation-to-hd....

https://community.hortonworks.com/articles/76873/configure-mac-and-firefox-to-access-hdphdf-spnego.h...

Hope this helps.