In this tutorial I will show you how to kerberize Sqoop installation. Before you begin ensure you have installed Sqoop.
This assumes your hostname is “hadoop”
Create Kerberos Principals
- cd /etc/security/keytabs
- sudo kadmin.local
- addprinc -randkey sqoop/hadoop@REALM.CA
- xst -kt sqoop.service.keytab sqoop/hadoop@REALM.CA
- addprinc -randkey sqoopHTTP/hadoop@REALM.CA
- xst -kt sqoopHTTP.service.keytab sqoopHTTP/hadoop@REALM.CA
- q
Set Keytab Permissions/Ownership
- sudo chown root:hadoopuser /etc/security/keytabs/*
- sudo chmod 750 /etc/security/keytabs/*
Configuration
Configure Kerberos with Sqoop
- cd /usr/local/sqoop/conf/
- nano sqoop.properties
- #uncomment the following
- org.apache.sqoop.security.authentication.type=KERBEROS
- org.apache.sqoop.security.authentication.handler=org.apache.sqoop.security.authentication.KerberosAuthenticationHandler
- #update to the following
- org.apache.sqoop.security.authentication.kerberos.principal=sqoop/hadoop@GAUDREAULT_KDC.CA
- org.apache.sqoop.security.authentication.kerberos.keytab=/etc/security/keytabs/sqoop.service.keytab
You must be logged in to post a comment.