Yes, there is a plan to fully automate Kerberos setup including installation of Kerberos server/clients, generation of principals and keytabs, etc. The current semi-manual approach is painful and error prone. Also, it's not easy to add host components to existing hosts or new hosts to the cluster as principals and keytabs have to be generated and distributed manually. Ambari should perform these tasks automatically.
Yusaku On Wed, Oct 9, 2013 at 9:05 AM, ADAMOS LOIZOU <[email protected]> wrote: > Hello again, > > In my team we have been exploring the semi-automated option of enabling > cluster security with Kerberos though Ambari, as described in the guide and > indicated by the Security wizard. > > I noticed that in the code base the option for enabling Kerberos has the > default value of MANUALLY_SET_KERBEROS. > > Are there any plans for fully automating kerberos security with Ambari (i.e. > installing Kerberos server, clients, generating principals and keys, etc)? > > Thank you. > > Kind Regards, > Adamos > > ________________________________ > > Este mensaje se dirige exclusivamente a su destinatario. Puede consultar > nuestra política de envío y recepción de correo electrónico en el enlace > situado más abajo. > This message is intended exclusively for its addressee. We only send and > receive email on the basis of the terms set out at: > http://www.tid.es/ES/PAGINAS/disclaimer.aspx -- CONFIDENTIALITY NOTICE NOTICE: This message is intended for the use of the individual or entity to which it is addressed and may contain information that is confidential, privileged and exempt from disclosure under applicable law. If the reader of this message is not the intended recipient, you are hereby notified that any printing, copying, dissemination, distribution, disclosure or forwarding of this communication is strictly prohibited. If you have received this communication in error, please contact the sender immediately and delete it from your system. Thank You.
