Configuring Authentication with Kerberos
Also available as:
PDF
loading table of contents...

Customizing the Attribute Template

If you are using the Kerberos Automated setup with Active Directory, depending on your KDC policies, you can customize the attributes that Ambari sets when creating principals.

On the Configure Kerberos step of the wizard, in the Advanced kerberos-env section, you have access to the Ambari Attribute Template. This template (which is based on the Apache Velocity templating syntax) can be modified to adjust which attributes are set on the principals and how those attribute values are derived.

The following table lists the set of computed attribute variables available if you choose to modify the template:

Attribute Variables

Example

$normalized_principal

nn/c6401.ambari.apache.org@EXAMPLE.COM

$principal_name

nn/c6401.ambari.apache.org

$principal_primary

nn

$principal_digest

SHA1 hash of the $normalized_principal

$principal_digest_256

SHA256 hash of the $normalized_principal

$principal_digest_512

SHA512 hash of the $normalized_principal

$principal_instance

c6401.ambari.apache.org

$realm

EXAMPLE.COM

$password

password