Support Questions
Find answers, ask questions, and share your expertise
Announcements
Alert: Welcome to the Unified Cloudera Community. Former HCC members be sure to read and learn how to activate your account here.

How do you get a kerberos delegation token in high availability cluster?

Solved Go to solution

How do you get a kerberos delegation token in high availability cluster?

New Contributor

The following curl command gives the token (but uses the name node directly).

$ curl -s --negotiate -u : "http://<active-namenode-hostname>:50070/webhdfs/v1/?op=GETDELEGATIONTOKEN"

Is it possible to use dfs.nameservices property to get the token instead.

1 ACCEPTED SOLUTION

Accepted Solutions

Re: How do you get a kerberos delegation token in high availability cluster?

Unfortunately, this is not possible. You have to use the active Namenode or deploy Httpfs, which is used as a central webhdfs access point in a HDFS HA environment.

Regarding httpfs, see this https://community.hortonworks.com/articles/804/httpfs-configure-and-run-with-hdp-224x.html

1 REPLY 1

Re: How do you get a kerberos delegation token in high availability cluster?

Unfortunately, this is not possible. You have to use the active Namenode or deploy Httpfs, which is used as a central webhdfs access point in a HDFS HA environment.

Regarding httpfs, see this https://community.hortonworks.com/articles/804/httpfs-configure-and-run-with-hdp-224x.html