hadoop Cluster hortonworks Authentication with AD

[#1]

Dear Community

I used to configure Hadoop HortonWorks Cluster with Active directory : Samba and Winbind

I also configure Kerberos

Now when I add kerberos tickets for both root and AD users, t hey are getting expired after one day (24h) As configured in krb5.conf

I saw that in order to configure automatically tickets, I should use SSSD.

Coud this possible with winbind? If yes, is there any procedure to do it?

Many thanks in advance

[#2]

Hi @asmarz 

Thanks for your most recent question and the additional information (e.g., that you're using Winbind). As I understand your set of issues recently, they include:

• Configuring Kerberos
• Launching spark scripts from an edge node on a Kerberos-secured cluster
• Encountering errors upon executing jobs on YARN
• Adding users to edge nodes using samba + kerberos
• Losing principles from/on cluster nodes
• Addressing security issues on the Hadoop cluster after enabling Kerberos
• Enabling SPNEGO Authentication

…it seems like most of the issue here is the integration with third-party products, possibly Kerberos, and your site-specific infrastructure. While we welcome your all your questions, I think the assistance you require goes beyond that which can be provided via the Community.

If you’re a Cloudera Subscription Support customer, we can connect you with your Account team to explore a possible Professional Services engagement for your Kerberos configuration and integration. Let us know if you’re interested in this path, if you are we’ll private message you to collect more information.

This thread will remain open if other community peers want to contribute.