Our Community is getting an upgrade! To get everything ready for the relaunch, we’ll be placing the site in read-only mode starting September 21st.
We really appreciate your understanding while we get things set up behind the scenes. Catch up on all the exciting details about the move here.
Need help or have questions? Drop us a line at [email protected]

Support Questions

Find answers, ask questions, and share your expertise
Announcements
Share your experience with Cloudera on G2 and get a $25 Amazon Gift card.
Hi, I'm CLEO! Something exciting is coming to the Community. Stay Tuned!

how to create new keytab if my previous keytab is expired?

avatar
Explorer

how to create new keytab if my previous keytab is expired?

1 ACCEPTED SOLUTION

avatar
Master Mentor

@OmThakare 
Are you managing keytabs/kerberos using Ambari?

If yes, then you can regenerate keytabs from Ambari UI. Ambari allows to either regenerate all keytabs or only for specific components on specific hosts.

 

Regenerating keytabs for all hosts in the cluster is a disruptive operation, and requires all components to be restarted. Optionally, keytabs can be regenerated only for missing hosts and components, and this operation requires selectively restarting those affected hosts and services.

 

https://docs.cloudera.com/HDPDocuments/Ambari-2.7.4.0/managing-and-monitoring-ambari/content/amb_reg...

.

If you are not not using Ambari to manage kerberos then  Following link describes How to create service principals and keytab files

https://docs.cloudera.com/HDPDocuments/HDP3/HDP-3.1.5/security-reference/content/kerberos_nonambari_...

 

View solution in original post

3 REPLIES 3

avatar
Master Mentor

@OmThakare 
Are you managing keytabs/kerberos using Ambari?

If yes, then you can regenerate keytabs from Ambari UI. Ambari allows to either regenerate all keytabs or only for specific components on specific hosts.

 

Regenerating keytabs for all hosts in the cluster is a disruptive operation, and requires all components to be restarted. Optionally, keytabs can be regenerated only for missing hosts and components, and this operation requires selectively restarting those affected hosts and services.

 

https://docs.cloudera.com/HDPDocuments/Ambari-2.7.4.0/managing-and-monitoring-ambari/content/amb_reg...

.

If you are not not using Ambari to manage kerberos then  Following link describes How to create service principals and keytab files

https://docs.cloudera.com/HDPDocuments/HDP3/HDP-3.1.5/security-reference/content/kerberos_nonambari_...

 

avatar
Explorer

I am using Ad kerberus and sentry for security.

avatar
Explorer

no I am using CDH 5.13.3