Github user radarwave commented on a diff in the pull request:
https://github.com/apache/incubator-hawq-docs/pull/127#discussion_r127402619
--- Diff: markdown/clientaccess/disable-kerberos.html.md.erb ---
@@ -21,43 +21,49 @@ specific language governing permissions and limitations
under the License.
-->
-Follow these steps to disable Kerberos security for HAWQ and PXF for
manual installations.
+HAWQ supports Kerberos at both the HDFS and/or user authentication levels.
You will perform different disable procedures for each.
-**Note:** If you install or manage your cluster using Ambari, then the
HAWQ Ambari plug-in automatically disables security for HAWQ and PXF when you
disable security for Hadoop. The following instructions are only necessary for
manual installations, or when Hadoop security is disabled outside of Ambari.
-1. Disable Kerberos on the Hadoop cluster on which you use HAWQ.
-2. Disable security for HAWQ:
- 1. Login to the HAWQ database master server as the `gpadmin` user:
+## <a id="disable_kerb_hdfs"></a>Disable Kerberized HDFS for HAWQ/PXF
- ``` bash
- $ ssh hawq_master_fqdn
- ```
+You will perform different procedures to disable HAWQ/PXF access to a
previously-kerberized HDFS depending upon whether you manage your cluster from
the command line or use Ambari to manage your cluster.
+
+### <a id="disable_kerb_hdfs_ambari"></a>Procedure for Ambari-Managed
Clusters
+
+If you manage your cluster using Ambari, you will disable Kerberos
authentication for your cluster as described in the [How To Disable
Kerberos](https://docs.hortonworks.com/HDPDocuments/Ambari-2.4.2.0/bk_ambari-user-guide/content/how_to_disable_kerberos.html)
Hortonworks documentation. Ambari will guide you through the de-kerberization
process, including removing/updating any authentication-related configuration
in your cluster.
- 2. Run the following command to set up HAWQ environment variables:
+### <a id="disable_kerb_hdfs_ambari"></a>Procedure for
Command-Line-Managed Clusters
+
+If you manage your cluster from the command line, follow these
instructions to disable HDFS Kerberos security for HAWQ and PXF.
+
+1. Disable Kerberos on the Hadoop cluster on which you use HAWQ.
+2. Disable security for HAWQ:
+ 1. Login to the HAWQ database master server as the `gpadmin` user and
set up your HAWQ environment:
``` bash
- $ source /usr/local/hawq/greenplum_path.sh
+ $ ssh gpadmin@<master>
+ gpadmin@master$ . /usr/local/hawq/greenplum_path.sh
```
- 3. Start HAWQ if necessary:
+ 2. Start HAWQ if necessary:
``` bash
- $ hawq start -a
+ gpadmin@master$ hawq start cluster -a
--- End diff --
âhawq start clusterâ do not need '-a' option.
---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at [email protected] or file a JIRA ticket
with INFRA.
---
