Note - For this tutorial I assume that you already have HDP cluster kerberized. If you want to configure automated kerberos then please refer to https://community.hortonworks.com/articles/29203/automated-kerberos-installation-and-configuration.html. . First you need to configure your Ambari Server for Kerberos configuration, without configuring Ambari for Kerberos, views will not work. . Use below commands to configure Ambari for Kerberos: . 1 Login to kadmin and create principal for Ambari Server
Note - Please replace your REALM in REALM.COM addprinc -randkey ambari-server@REALM.COM . 2 Extract principal created in above step to keytab file xst -k ambari.server.keytab ambari-server@REALM.COM . 3 Above command should generate keytab file in current working directory, copy keytab file to /etc/security/keytabs/ location cp ambari.server.keytab /etc/security/keytabs/ambari.server.keytab Note - Please make sure that, user running ambari server daemon should have read access to ambari.server.keytab . 4 Stop Ambari server daemon and setup security using below command. service ambari-server stop
ambari-server setup-security . 5 Select 3 for Setup Ambari kerberos JAAS configuration.
Enter the Kerberos principal name for the Ambari Server you set up in step 1.1. Enter the path to the keytab for the Ambari principal.
Restart Ambari Server. ambari-server restart . 6. Add below properties in yarn-site.xml using Ambari UI. yarn.timeline-service.http-authentication.proxyuser.ambari-server.hosts=*
yarn.timeline-service.http-authentication.proxyuser.ambari-server.users=*
yarn.timeline-service.http-authentication.proxyuser.ambari-server.groups=* . 7. Add below properties in core-site.xml hadoop.proxyuser.ambari-server.hosts=*
hadoop.proxyuser.ambari-server.groups=*
hadoop.proxyuser.admin.hosts=*
hadoop.proxyuser.admin.groups=* Your TEZ view should be accessible now! . . Happy Hadooping!! 🙂
... View more
