Which is a better client authentication mechanism for securing client access to HAWQ - LDAP with SSL or Kerberos Authentication?

[#1 · Accepted solution]

Kerberos and ssl are both protocols, Kerberos is an authentication protocol, but SSL is an encryption protocol.Having said that if you really want to secure your data at motion ,you may need to consider SSL option and for better authentication of clients kerberos would be the best .Also you can have both (ssl & kerberos ) set it up for hawq .

[#2]

Could you please suggest some documentation which I can refer for setting up ssl and kerberos for HAWQ cluster. Thanks for your quick turnaround...:)

[#3]

Here is the requested info

http://hdb.docs.pivotal.io/210/hawq/clientaccess/ldap.html

http://hdb.docs.pivotal.io/210/hawq/clientaccess/kerberos.html