DocsHortonworks Data Platform

 

 3. Adjusting for Kerberos

[Important]Important

You only need to perform these Kerberos steps if you are running Ambari 1.7 or earlier. There is no need to perform these steps if you are running Ambari 2.0.

If you are upgrading to Ambari 2.0 from an Ambari-managed cluster that is already Kerberos enabled, because of the new Ambari 2.0 Kerberos features, you need perform the following steps after Ambari upgrade.

  1. Review the procedure for Configuring Ambari and Hadoop for Kerberos in the Ambari Security Guide.

  2. Have your Kerberos environment information readily available, including your KDC Admin account credentials.

  3. Take note of current Kerberos security settings for your cluster.

    1. Browse to Services > HDFS > Configs.

    2. Record the core-site auth-to-local property value.

  4. Upgrade Ambari according to the steps in Upgrading to Ambari 2.0.

  5. Ensure your cluster and the Services are healthy.

  6. Browse to Admin > Kerberos and you’ll notice Ambari thinks that Kerberos is not enabled. Run the Enable Kerberos Wizard, following the instructions in the Ambari Security Guide.

  7. Ensure your cluster and the Services are healthy.

  8. Verify the Kerberos security settings for your cluster are correct.

    • Browse to Services > HDFS > Configs.

    • Check the core-site auth-to-local property value.

    • Adjust as necessary, based on the pre-upgrade value recorded in Step 3.

Legal notices