Support Questions
Find answers, ask questions, and share your expertise
Announcements
Alert: Welcome to the Unified Cloudera Community. Former HCC members be sure to read and learn how to activate your account here.

Does Cloudera Manager 5.4.0 Python Client API support Kerberos Keytab authentication?

Solved Go to solution

Does Cloudera Manager 5.4.0 Python Client API support Kerberos Keytab authentication?

Contributor

Our team has implemented an Oozie custom action and want to deploy it using our internal frameworks (rpm based).We have implemented deployment scripts using the Cloudera Manager Python Client API (see http://cloudera.github.io/cm_api/epydoc/5.4.0/index.html), which seems to require knowing the authentication credentials that is the plaintext user name and password of the cloudera manager server at install time to construct the ApiResource (which has only one constructor), in particular, the documentation reads as follows:

 

__init__(selfserver_hostserver_port=Noneusername='admin'password='admin'use_tls=Falseversion=10) 
(Constructor)
source code 

Creates a Resource object that provides API endpoints.

Parameters:
  • server_host - The hostname of the Cloudera Manager server.
  • server_port - The port of the server. Defaults to 7180 (http) or 7183 (https).
  • username - Login name.
  • password - Login password.
  • use_tls - Whether to use tls (https).
  • version - API version.
Returns: Resource object referring to the root. Overrides: object.__init__

Our local security team has suggested using Kerberos Keytabs for authentication (and I'm not expert at Kerberos yet).  Can that approach work with the python client interface, if so how?

 

 

 

2 ACCEPTED SOLUTIONS

Accepted Solutions

Re: Does Cloudera Manager 5.4.0 Python Client API support Kerberos Keytab authentication?

Contributor

The Cloudeara Manager Python Client API does not currently support Kerberos Authentication.

Highlighted

Re: Does Cloudera Manager 5.4.0 Python Client API support Kerberos Keytab authentication?

Cloudera Employee
This support is currently planned for C6 timeframe which is early 2016.
3 REPLIES 3

Re: Does Cloudera Manager 5.4.0 Python Client API support Kerberos Keytab authentication?

Contributor

The Cloudeara Manager Python Client API does not currently support Kerberos Authentication.

Re: Does Cloudera Manager 5.4.0 Python Client API support Kerberos Keytab authentication?

Community Manager

Thank you Bill for sharing the information in case anyone else has the same question. 



Cy Jervis, Community Manager

Was your question answered? Make sure to mark the answer as the accepted solution.
If you find a reply useful, say thanks by clicking on the thumbs up button.

Learn more about the Cloudera Community:
Community Guidelines
How to use the forum
Highlighted

Re: Does Cloudera Manager 5.4.0 Python Client API support Kerberos Keytab authentication?

Cloudera Employee
This support is currently planned for C6 timeframe which is early 2016.