using Kadmin for connectiong to AD KDC

[#1]

Have anyone tried kadmin (connecting to AD KDC) after kerberising the hadoop cluster using Ambari?

I am using the same credentials and it is saying “Required KADM5 principal missing while initializing kadmin interface”. What is the recommended best way to AD KDC connection? Thanks for help

[#2]

@Vishal Gupta You might not have added principals for kadmin/fqdn@DOMAIN as well as the legacy fallback kadmin/admin@DOMAIN. You can add them using kadmin.local

https://web.mit.edu/kerberos/krb5-1.13/doc/admin/admin_commands/kadmin_local.html

[#3 · Accepted solution]

@Vishal Gupta

You cannot use the MIT Kerberos package's kadmin tool to manage an Active Directory - you need to use Active Directory-specific tools, or for creating accounts, a tool that can communicate to the AD using LDAP.

For an LDAP approach, see this article posted by @dvillarreal: How to create AD principal accounts using OpenLdap utilities and adding it to a keytab.

[#4]

Thanks Robert and bhatt. This is helpful