RE: Trusted-realm vs default-realm kerberos issue

2015-04-19 Thread John Lilley
vs default-realm kerberos issue Do you have mapping rules, which tells Hadoop that the trusted realm is allowed to login? http://mapredit.blogspot.de/2015/02/hadoop-and-trusted-mitv5-kerberos-with.html BR, Alex On 24 Mar 2015, at 18:21, Michael Segel mailto:michael_se...@hotmail.com>>

Re: Trusted-realm vs default-realm kerberos issue

2015-03-25 Thread Alexander Alten-Lorenz
Do you have mapping rules, which tells Hadoop that the trusted realm is allowed to login? http://mapredit.blogspot.de/2015/02/hadoop-and-trusted-mitv5-kerberos-with.html BR, Alex > On 24 Mar 2015, at 18:21, Mic

Re: Trusted-realm vs default-realm kerberos issue

2015-03-24 Thread Michael Segel
So… If I understand, you’re saying you have a one way trust set up so that the cluster’s AD trusts the Enterprise AD? And by AD you really mean KDC? > On Mar 17, 2015, at 2:22 PM, John Lilley wrote: > > AD The opinions expressed here are mine, while they may reflect a cognitive thought,

Trusted-realm vs default-realm kerberos issue

2015-03-17 Thread John Lilley
Greetings, We encountered the issue reported here: https://issues.cloudera.org/browse/DISTRO-526 It seems that someone should have figured out a workaround by now, does anyone know what it is? The problem is, the Hadoop installation uses an "Edge" AD controller as its KDC, and that Edge AD cont