how to create new keytab if my previous keytab is expired?
Created 02-04-2020 02:27 AM
@OmThakare
Are you managing keytabs/kerberos using Ambari?
If yes, then you can regenerate keytabs from Ambari UI. Ambari allows to either regenerate all keytabs or only for specific components on specific hosts.
Regenerating keytabs for all hosts in the cluster is a disruptive operation, and requires all components to be restarted. Optionally, keytabs can be regenerated only for missing hosts and components, and this operation requires selectively restarting those affected hosts and services.
.
If you are not not using Ambari to manage kerberos then Following link describes How to create service principals and keytab files
Created 02-04-2020 02:27 AM
@OmThakare
Are you managing keytabs/kerberos using Ambari?
If yes, then you can regenerate keytabs from Ambari UI. Ambari allows to either regenerate all keytabs or only for specific components on specific hosts.
Regenerating keytabs for all hosts in the cluster is a disruptive operation, and requires all components to be restarted. Optionally, keytabs can be regenerated only for missing hosts and components, and this operation requires selectively restarting those affected hosts and services.
.
If you are not not using Ambari to manage kerberos then Following link describes How to create service principals and keytab files
Created 02-04-2020 02:49 AM
I am using Ad kerberus and sentry for security.
Created 04-29-2020 03:32 AM
no I am using CDH 5.13.3