HortonWorks: Kerberize Ambari Server

This entry is part 7 of 7 in the series HortonWorks

HortonWorks
(Last Updated On: )

You may want to integrate Kerberos authentication into your Ambari Server implementation. If you do follow the next few steps. It’s that easy.

Step 1: Stop Ambari Server

  1. sudo ambari-server stop

Step 2: Create keytab file

  1. ktutil
  2.  
  3. addent -password -p ##USER##@##DOMAIN##.COM -k 1 -e RC4-HMAC
  4.  
  5. # Enter password
  6.  
  7. wkt ##USER##.keytab
  8. q
  9.  
  10. $ sudo mkdir /etc/security/keytabs
  11. $ mv ##USER##.keytab /etc/security/keytabs

Step 3: Test Keytab. You should see the ticket once you klist.

  1. kinit -kt /etc/security/keytabs/ambarisa.keytab -a ambarisa@AERYON.COM
  2. klist

Step 4: Run Ambari Server Kerberos Setup

  1. sudo ambari-server setup-kerberos

Follow the prompts. Say true to enabling kerberos. The keytab file will be the /etc/security/##USER##.keytab file. You should be able to leave the rest defaults. Save the settings and you are done.

Step 5: Remove the kinit ticket you created that way you can make sure you kerberos authentication is working correctly.

  1. kdestroy

Step 6: Start Ambari Server

  1. sudo ambari-server start

Step 7: Validate Kerberos. You should see your ticket get created and you should now be able to login with no issues.

  1. klist
Series Navigation<< HortonWorks: Install YARN/MR