Member since
01-21-2019
122
Posts
12
Kudos Received
10
Solutions
My Accepted Solutions
| Title | Views | Posted |
|---|---|---|
| 8911 | 02-12-2019 04:26 AM |
02-12-2019
06:12 PM
@Nixon Rodrigues I have tried adding ranger policies for atlas service however there is something I am doing wrong, probably I will ask as a different question. Thanks a lot and appreciate your help. Dhieru
... View more
11-20-2017
10:45 PM
4 Kudos
The steps to set up Atlas with Ldaps (ssl) are below. Download the AD CA certificate on Atlas instance
echo -n | openssl s_client -connect ad.xx.xx.com:636 | sed -ne '/-BEGIN CERTIFICATE-/,/-END CERTIFICATE-/p' > /root/ldaps-ca.cert
View the certificate
openssl x509 -noout -text -in /root/ldaps-ca.cert
Import the AD CA certificate to trust-store in Atlas instance.
$JAVA_HOME/bin/keytool -import -alias AD -keystore /home/nixon/ad-truststore -file /root/ldaps-ca.cert
#remember the password used while importing into trust-store Verify the certificate added to trust-store.
$JAVA_HOME/bin/keytool -list -alias AD -keystore /etc/atlas/conf/ad-truststore
Change ownership of trust-store if needed
chown atlas:hadoop /etc/atlas/conf/ad-truststore
Add the following config to Atlas Advanced atlas-env metadata_opts via Ambari, so that ATLAS_OPTS is set within atlas-env.sh -Djavax.net.ssl.trustStore=/etc/atlas/conf/ad-truststore -Djavax.net.ssl.trustStorePassword=<password> Or can be added as env variable in atlas_start.py for atlas java process.
... View more
Labels: