Support Questions
Find answers, ask questions, and share your expertise

One-way trust from MIT KDC to AD, then what can you do from Windows side?

Highlighted

One-way trust from MIT KDC to AD, then what can you do from Windows side?

New Contributor

After one-way trust is set up, what does it able you to do from Windows side?

For example,

a) can you do "hdfs dfs -put ..." directly from the command prompt?

b) Will SPNEGO set up for broswer still be needed to browse directories in the IE, Chrome, or FF?

c) Will python library "HdfsCli" work from Windows side to communicate with kerberorized webHDFS?

I have not been able to browse hdfs in the browser from Windows side after following SPNEGO setup for browsers instruction.

On my *Mac*, I'm running fully kerberorized Sandbox HDP in a docker container and I've been trying to access it from the Windows VM (and this Windows VM also run on my *Mac*). MIT Keberos client in Windows can talk to MIT KDC running in a docker container.

My ultimate goal is to talk to kerberorized webHDFS from python code in Windows.

Any guide is appreciated.

2 REPLIES 2

Re: One-way trust from MIT KDC to AD, then what can you do from Windows side?

Hi @Kyunam Kim,

I am not sure of your full requirements, but why not use webhdfs through the knox gateway? It may make things much easier for you.

https://knox.apache.org/books/knox-1-0-0/user-guide.html#WebHDFS

Best regards,

David

Highlighted

Re: One-way trust from MIT KDC to AD, then what can you do from Windows side?

New Contributor

Thanks David.

Oh yeah, Knox was way easy.

But I still wanted to suffer and figure out how things actually work in kerberos ticket level between Windows and Linux.

Regards,

Kyunam