Support Questions
Find answers, ask questions, and share your expertise

How to enable kerberos for lily indexer in cloudera 5.9

How to enable kerberos for lily indexer in cloudera 5.9

Explorer

Hi Team,

We are enabling kerberos for lily indexer in cloudera 5.9 but have confiusion in one of the steps i.e

on jaas.conf file whether we need to chnage the parameter or not in this file.

As we have already hbase.keytab generated by GUI.

As cloudera is using the keytab from /var/run/cloudera-scm-agent/process so whether we need to giv the keytab file location or not? if yes then how to edit this file on which server i.e on hbase master instead of command line can we edit using GUI?? can you give the steps how to edit this file using gui.

current conf

Client {

  com.sun.security.auth.module.Krb5LoginModule required

  useKeyTab=false----------after enabling kerberos should we give the path of keytab?? or using cache it should work?

  useTicketCache=true;

};

 

 

 

as per cloudera doc

 

Client { com.sun.security.auth.module.Krb5LoginModule required useKeyTab=true useTicketCache=false keyTab="/etc/hbase/conf/hbase.keytab" principal="hbase/fully.qualified.domain.name@<YOUR-REALM>"; }