[
https://issues.apache.org/jira/browse/AMBARI-5011?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Jaimin D Jetly updated AMBARI-5011:
-----------------------------------
Description:
To enable security we need add following properties to
falcon-startup.properties:
{noformat}
"*.falcon.http.authentication.kerberos.principal":"HTTP/[email protected]"
"*.falcon.http.authentication.kerberos.keytab":"/etc/security/keytabs/spnego.service.keytab"
"*.falcon.service.authentication.kerberos.principal":"falcon/[email protected]"
"*.falcon.service.authentication.kerberos.keytab":"/etc/security/keytabs/falcon.service.keytab"
"*.dfs.namenode.kerberos.principal":"nn/[email protected]"
"*.falcon.http.authentication.type":"kerberos"
"*.falcon.authentication.type":"kerberos"
{noformat}
Also, we need to add
{noformat}
<properties>
<property name="dfs.namenode.kerberos.principal"
value="nn/[email protected]" />
</properties>
{noformat}
in cluster definition to make it works in secured mode.
was:
To enable security we need add following properties to
falcon-startup.properties:
{noformat}
"*.falcon.http.authentication.kerberos.principal":"HTTP/[email protected]"
"*.falcon.http.authentication.kerberos.keytab":"/etc/security/keytabs/spnego.service.keytab"
"*.falcon.service.authentication.kerberos.principal":"falcon/[email protected]"
"*.falcon.service.authentication.kerberos.keytab":"/etc/security/keytabs/falcon.service.keytab"
"*.dfs.namenode.kerberos.principal":"nn/[email protected]"
"*.falcon.http.authentication.type":"kerberos"
{noformat}
Also, we need to add
{noformat}
<properties>
<property name="dfs.namenode.kerberos.principal"
value="nn/[email protected]" />
</properties>
{noformat}
in cluster definition to make it works in secured mode.
> Security Wizard: enable Kerberos setup for Falcon
> -------------------------------------------------
>
> Key: AMBARI-5011
> URL: https://issues.apache.org/jira/browse/AMBARI-5011
> Project: Ambari
> Issue Type: Bug
> Components: client
> Affects Versions: 1.5.0
> Reporter: Jaimin D Jetly
> Assignee: Jaimin D Jetly
> Fix For: 1.5.0
>
> Attachments: AMBARI-5011.patch, AMBARI-5011_2.patch
>
>
> To enable security we need add following properties to
> falcon-startup.properties:
> {noformat}
> "*.falcon.http.authentication.kerberos.principal":"HTTP/[email protected]"
> "*.falcon.http.authentication.kerberos.keytab":"/etc/security/keytabs/spnego.service.keytab"
> "*.falcon.service.authentication.kerberos.principal":"falcon/[email protected]"
> "*.falcon.service.authentication.kerberos.keytab":"/etc/security/keytabs/falcon.service.keytab"
> "*.dfs.namenode.kerberos.principal":"nn/[email protected]"
> "*.falcon.http.authentication.type":"kerberos"
> "*.falcon.authentication.type":"kerberos"
> {noformat}
> Also, we need to add
> {noformat}
> <properties>
> <property name="dfs.namenode.kerberos.principal"
> value="nn/[email protected]" />
> </properties>
> {noformat}
> in cluster definition to make it works in secured mode.
--
This message was sent by Atlassian JIRA
(v6.2#6252)
