- Subscribe to RSS Feed
- Mark Question as New
- Mark Question as Read
- Float this Question for Current User
- Bookmark
- Subscribe
- Mute
- Printer Friendly Page
Kerberos Install on HDP cluster after Ranger/Ranger KMS setup
- Labels:
-
Apache Ranger
Created 05-02-2017 05:23 AM
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I have installed Ranger/Ranger KMS on HDP 2.5 cluster using Ambari.Just wanted to check if we can setup kerberos on HDP 2.5 after Ranger/Ranger KMS have been installed on cluster? Or do we need to delete Ranger/Ranger KMS first for installation of kerberos?
Thanks
Created 05-02-2017 04:31 PM
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hello @rahul gulati,
There is no need to remove Ranger / Ranger KMS before enabling Kerberos on your cluster. I'd recommend to use Ambari Kerberos Wizard to enable Kerberos (just as you do normally) and Ambari should be able to handle all the installed components.
Hope this helps !
Created 05-02-2017 04:31 PM
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hello @rahul gulati,
There is no need to remove Ranger / Ranger KMS before enabling Kerberos on your cluster. I'd recommend to use Ambari Kerberos Wizard to enable Kerberos (just as you do normally) and Ambari should be able to handle all the installed components.
Hope this helps !
Created 05-02-2017 05:14 PM
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hello @Vipin Rathor
That's great. I have a 6 node cluster(1 Edge Node, 1 Primary NN, 1 Secondary NN and 2 Slave Nodes). Just wanted to confirm that Shall i setup up new MIT KDC on my Ambari Server Node(Master Node1) and then go for Ambari Automated Kerberos Security setup?
I assume above mentioned approach should be the best in my case as i need to setup MIT KDC as well.
I am following below mentioned Hortonworks docs for kerberos setup.
Thanks in Advance!!
Created 05-05-2017 05:28 PM
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
@rahul gulati Yes, it's okay to install MIT KDC on Ambari server node. But in the real production cluster, we should clearly separate these two roles on two different nodes.
Hope this helps !
