Support Questions

Find answers, ask questions, and share your expertise
Announcements
Celebrating as our community reaches 100,000 members! Thank you!

how to install Kerberos from Ambari ?

avatar
Super Collaborator

I think my problem for failing ranger KMS install was wrong Kerberos setup as you see from the attached screen its complaining about Kerberos being installed manually.

So how I do I install Kerberos "NOT manually" ?

10871-screen3.jpg

1 ACCEPTED SOLUTION

avatar
Super Collaborator

The steps are documented below:

https://docs.hortonworks.com/HDPDocuments/Ambari-2.1.2.1/bk_Ambari_Security_Guide/content/_installin...

I would not recommend uninstalling Kerberos once its been installed since it can potentially mess you OS installation. Rather if you can follow the route of regenerating the principals and the keytabs . The steps are documented in the link above.

If you want to manually generate the keytabs/principals then you can refer the link below:

https://docs.hortonworks.com/HDPDocuments/HDP2/HDP-2.3.2/bk_installing_manually_book/content/creatin...

View solution in original post

3 REPLIES 3

avatar
Super Collaborator

The steps are documented below:

https://docs.hortonworks.com/HDPDocuments/Ambari-2.1.2.1/bk_Ambari_Security_Guide/content/_installin...

I would not recommend uninstalling Kerberos once its been installed since it can potentially mess you OS installation. Rather if you can follow the route of regenerating the principals and the keytabs . The steps are documented in the link above.

If you want to manually generate the keytabs/principals then you can refer the link below:

https://docs.hortonworks.com/HDPDocuments/HDP2/HDP-2.3.2/bk_installing_manually_book/content/creatin...

avatar
Super Collaborator

which of the three options I should choose for non-manual setup ? obviously the last one is out , and I don't have LDAP so should I be choosing "Exisiting MIT KDC" ? but I also don't have this setup , so I am totally lost

Use an Existing MIT KDC
Use an Existing Active Directory
Use Manual Kerberos Setup

avatar
Super Collaborator

Do you have the MIT KDC set up ? If not then please install it as documented below:

https://docs.hortonworks.com/HDPDocuments/Ambari-2.1.2.1/bk_Ambari_Security_Guide/content/_optional_...

Once done choose the option "Use an Existing MIT KDC"