Support Questions

Find answers, ask questions, and share your expertise
Announcements
Celebrating as our community reaches 100,000 members! Thank you!

How does Ambari create Principals and keytabs on AD as kerberos

avatar
Super Collaborator

Hi,

How does Ambari create keytabs and principals when AD KDC is being used since kadmin command does not work?

is it programatically or through a script similar to kerberos_setup.py in ambari resources directory?

1 ACCEPTED SOLUTION

avatar
hide-solution

This problem has been solved!

Want to get a detailed solution you have to login/registered on the community

Register/Login
3 REPLIES 3

avatar
Super Guru

@Pranay Vyas Pls check this - http://hortonworks.com/blog/enabling-kerberos-hdp-active-directory-integration/

This is internally manager within script by ambari. You can check the process details on what command it executes when ambari tries to create principals for services.

avatar

@Pranay Vyas

Are you looking out for the following java codes?

https://github.com/apache/ambari/tree/trunk/ambari-server/src/main/java/org/apache/ambari/server/ser...

Like:

https://github.com/apache/ambari/blob/trunk/ambari-server/src/main/java/org/apache/ambari/server/ser...

and

https://github.com/apache/ambari/blob/trunk/ambari-server/src/main/java/org/apache/ambari/server/ser...

From Python side you can look at the following Script (Some functions like "def create_keytab_file(principal, path, auth_identity=None)"

/var/lib/ambari-server/resources/common-services/KERBEROS/1.10.3-10/package/scripts/kerberos_common.py

avatar
hide-solution

This problem has been solved!

Want to get a detailed solution you have to login/registered on the community

Register/Login