Support Questions
Find answers, ask questions, and share your expertise
Announcements
Alert: Welcome to the Unified Cloudera Community. Former HCC members be sure to read and learn how to activate your account here.

Which is a better client authentication mechanism for securing client access to HAWQ - LDAP with SSL or Kerberos Authentication?

Solved Go to solution
Highlighted

Which is a better client authentication mechanism for securing client access to HAWQ - LDAP with SSL or Kerberos Authentication?

New Contributor
 
1 ACCEPTED SOLUTION

Accepted Solutions

Re: Which is a better client authentication mechanism for securing client access to HAWQ - LDAP with SSL or Kerberos Authentication?

New Contributor

Kerberos and ssl are both protocols, Kerberos is an authentication protocol, but SSL is an encryption protocol.Having said that if you really want to secure your data at motion ,you may need to consider SSL option and for better authentication of clients kerberos would be the best .Also you can have both (ssl & kerberos ) set it up for hawq .

3 REPLIES 3

Re: Which is a better client authentication mechanism for securing client access to HAWQ - LDAP with SSL or Kerberos Authentication?

New Contributor

Kerberos and ssl are both protocols, Kerberos is an authentication protocol, but SSL is an encryption protocol.Having said that if you really want to secure your data at motion ,you may need to consider SSL option and for better authentication of clients kerberos would be the best .Also you can have both (ssl & kerberos ) set it up for hawq .

Re: Which is a better client authentication mechanism for securing client access to HAWQ - LDAP with SSL or Kerberos Authentication?

New Contributor

Could you please suggest some documentation which I can refer for setting up ssl and kerberos for HAWQ cluster. Thanks for your quick turnaround...:)

Re: Which is a better client authentication mechanism for securing client access to HAWQ - LDAP with SSL or Kerberos Authentication?

New Contributor
Don't have an account?
Coming from Hortonworks? Activate your account here