[
https://issues.apache.org/jira/browse/AMBARI-5011?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13931128#comment-13931128
]
Yusaku Sako commented on AMBARI-5011:
-------------------------------------
+1 for the patch.
> Security Wizard: enable Kerberos setup for Falcon
> -------------------------------------------------
>
> Key: AMBARI-5011
> URL: https://issues.apache.org/jira/browse/AMBARI-5011
> Project: Ambari
> Issue Type: Bug
> Components: client
> Affects Versions: 1.5.0
> Reporter: Jaimin D Jetly
> Assignee: Jaimin D Jetly
> Fix For: 1.5.0
>
> Attachments: AMBARI-5011.patch, AMBARI-5011_2.patch
>
>
> To enable security we need add following properties to
> falcon-startup.properties:
> {noformat}
> "*.falcon.http.authentication.kerberos.principal":"HTTP/[email protected]"
> "*.falcon.http.authentication.kerberos.keytab":"/etc/security/keytabs/spnego.service.keytab"
> "*.falcon.service.authentication.kerberos.principal":"falcon/[email protected]"
> "*.falcon.service.authentication.kerberos.keytab":"/etc/security/keytabs/falcon.service.keytab"
> "*.dfs.namenode.kerberos.principal":"nn/[email protected]"
> "*.falcon.http.authentication.type":"kerberos"
> "*.falcon.authentication.type":"kerberos"
> {noformat}
> Also, we need to add
> {noformat}
> <properties>
> <property name="dfs.namenode.kerberos.principal"
> value="nn/[email protected]" />
> </properties>
> {noformat}
> in cluster definition to make it works in secured mode.
--
This message was sent by Atlassian JIRA
(v6.2#6252)
