Created 11-05-2024 12:30 AM
Hi,
I wanted to know if it is possible to disable kerberos once it has enabled in cloudera. I couldn't find any option to for kerberos in he configuration in cloudera.
Created 11-06-2024 02:00 AM
@Bhavs, Welcome to our community! To help you get the best possible answer, I have tagged our Hive experts @ggangadharan @RAGHUY who may be able to assist you further.
Please feel free to provide any additional information or details about your query, and we hope that you will find a satisfactory solution to your question.
Regards,
Vidya Sargur,Created 11-06-2024 02:06 AM
@Bhavs Disabling Kerberos for a specific service in Hive isn’t directly supported, as Kerberos is typically enabled cluster-wide for enhanced security. If your cluster setup allows, you can configure a separate instance of HiveServer2 without Kerberos. This setup would require an additional HiveServer2 instance configured with authentication set toNONE, and it would run separately from the kerberized services.
If you use a combination of LDAP or custom authentication alongside Kerberos. If you only need to bypass Kerberos for certain users, setting up LDAP authentication with Ranger might help.
Created 11-06-2024 02:58 AM
It's not recommended to disable kerberos . At the same time it's not direct way to disable kerberos.
You can try to follow the below community post to check if that helps.
https://community.cloudera.com/t5/Support-Questions/Disabling-Kerberos/m-p/19934#M38077
https://community.cloudera.com/t5/Customer/How-to-Revert-Kerberos-Configuration-from-a-Cloudera-Mana...
Created 11-07-2024 08:36 AM
To disable Kerberos in Cloudera, it’s important to know that there is no direct option to turn it off entirely once enabled, as Kerberos is typically applied cluster-wide.
It's generally not recommended to disable Kerberos once enabled due to security implications.
Created 11-17-2024 09:22 PM
@Bhavs, Did the response help resolve your query? If it did, kindly mark the relevant reply as the solution, as it will aid others in locating the answer more easily in the future.
Regards,
Vidya Sargur,