rpatid10 edited a comment on issue #7134:
URL:
https://github.com/apache/incubator-pinot/issues/7134#issuecomment-877541179
Steps to enable Kerberos Authentication:
1. Create Your controller.conf,server.conf and broker.conf file
**controller.conf**
```
controller.zk.str=<ZOOKEEPER_HOST:ZOOKEEPER_PORT>
controller.enable.split.commit=true
controller.access.protocols.http.port=9000
controller.helix.cluster.name=PinotCluster
controller.vip.port=9000
controller.port=9000
pinot.set.instance.id.to.hostname=true
pinot.server.grpc.enable=true
```
**broker.conf**
```
pinot.set.instance.id.to.hostname=true
pinot.server.grpc.enable=true
```
**server.conf**
```
pinot.server.instance.enable.split.commit=true
pinot.set.instance.id.to.hostname=true
pinot.server.instance.dataDir=/path/in/local/filesystem/for/pinot/data/server/index
pinot.server.instance.segmentTarDir=/path/in/local/filesystem/for/pinot/data/server/segment
pinot.server.grpc.enable=true
pinot.server.grpc.port=8090
```
**You can refer below link and can add properties as per your
requirements(if you want to enable kerberos hdfs or deepstorage also).**
`https://docs.pinot.apache.org/basics/getting-started/hdfs-as-deepstorage`
**Do kinit and klist:**
```
kinit -kt <your_keytab_path/keytab_name> <principal_name>
klist
```
**Command to start components:**
**Start Controller :**
```
JAVA_OPTS="-Xms1G -Xmx4G -Dplugins.dir=plugins
-Djava.security.auth.login.config=<JAAS_File_Path/JAAS_File_NAME>"\
bin/pinot-admin.sh \
StartController \
-configFileName /home/dev/apache-pinot-incubating-0.7.1-bin/controller.conf
```
**Start broker :**
```
JAVA_OPTS="-Xms1G -Xmx4G -Dplugins.dir=plugins
-Djava.security.auth.login.config=<JAAS_File_Path/JAAS_File_NAME>" \
StartBroker \
-zkAddress <Zookeeper_Address> \
-clusterName PinotCluster \
-configFileName /home/dev/apache-pinot-incubating-0.7.1-bin/broker.conf
```
**Start Server :**
```
JAVA_OPTS="-Xms1G -Xmx4G -Dplugins.dir=plugins
-Djava.security.auth.login.config=<JAAS_File_Path/JAAS_File_NAME>" \
bin/pinot-admin.sh \
StartServer \
-zkAddress <Zookeeper_Address> \
-configFileName /home/dev/apache-pinot-incubating-0.7.1-bin/server.conf
```
**Add this Property in table config file:**
```
"streamConfigs": {
"streamType": "kafka",
"security.protocol": "SASL_PLAINTEXT",
.....
}
```
**Add Your Realtime-Table:**
```
bin/pinot-admin.sh AddTable \
-schemaFile /home/dev/apache-pinot-incubating-0.7.1-bin/table_schema.json \
-tableConfigFile
/home/dev/apache-pinot-incubating-0.7.1-bin/table_config.json \
-exec
```
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
