Hi @roshanbi , How is the keytab generated? The keytabs can be generated using ktutil command. can you please explain the flow of authentication using Ranger? Ranger is used for authorization and not authentication. This happens through plugins such as, HDFS plugin, Hive Plugin, YARN plugin, Kafka Plugin, etc. e.g. for HDFS, the high level flow is something like this: Whenever an HDFS operation is received from an HDFS client, it is first authenticated with Kerberos to check whether the kerberos principal holds a valid ticket. After successful authentication, the request is forwarded to Ranger HDFS plugin to check whether there is a policy existing in Ranger to allow this principal to access the resource being requested. After the authorization is successful, namenode performs the requested operation. The role of Principal,tickets and authentication key? The principal is equivalent to a user Tickets are issued for a period of 8 hours so that users do not have to authenticate using a password for each individual request. Not sure what you mean by authentication key in this context. Thanks, Megh
... View more
