Support Questions

Find answers, ask questions, and share your expertise
Announcements
Check out our newest addition to the community, the Cloudera Data Analytics (CDA) group hub.

Two child domains for Keberos under HDP cluster

Explorer

Hi, is it possible to achieve?
I want to be able to authenticate against test1.example.com (where ambari created service principles) and test2.example.com where I have also some other users. I use Active Directory.

3 REPLIES 3

Mentor

@Jakub Igla

Yes, that is possible with a cross-realm trust. See this walkthrough you will need to create a KDC definition in AD then create a trust and some configs and you are done and this documentation KDC-AD trust

HTH

Mentor

@Jakub Igla

Any updates on this ?

Explorer

Hi @Geoffrey Shelton Okot

Today I r an access to corp DC, so I will be testing this. I will update you as soon as I learn more about that.

Many thanks though!

Take a Tour of the Community
Don't have an account?
Your experience may be limited. Sign in to explore more.