Hi Team,
We are enabling kerberos for lily indexer in cloudera 5.9 but have confiusion in one of the steps i.e
on jaas.conf file whether we need to chnage the parameter or not in this file.
As we have already hbase.keytab generated by GUI.
As cloudera is using the keytab from /var/run/cloudera-scm-agent/process so whether we need to giv the keytab file location or not? if yes then how to edit this file on which server i.e on hbase master instead of command line can we edit using GUI?? can you give the steps how to edit this file using gui.
current conf
Client {
com.sun.security.auth.module.Krb5LoginModule required
useKeyTab=false----------after enabling kerberos should we give the path of keytab?? or using cache it should work?
useTicketCache=true;
};
as per cloudera doc
Client { com.sun.security.auth.module.Krb5LoginModule required useKeyTab=true useTicketCache=false keyTab="/etc/hbase/conf/hbase.keytab" principal="hbase/fully.qualified.domain.name@<YOUR-REALM>"; }
