Learn how to create a user in Ozone.
An existing user must be already configured with the
ASSUME_ROLE permission in Ranger. For more details about creating a
user with the ASSUME_ROLE permission, see Creating a user in Ranger.
-
Sign in to the host server as the root user or other user with required
permissions.
-
Run the following command to create the Kerberos user:
kadmin.local -q "addprinc -randkey [***PRINCIPAL***]" && \
kadmin.local -q "xst -k /tmp/[***SERVICE_USER***].keytab [***PRINCIPAL***]" && \
cp "/tmp/$[***SERVICE_USER***].keytab" "[***KEYTAB_DIR***]/[***SERVICE_USER***].keytab"
Example,
kadmin.local -q "addprinc -randkey svc-iceberg-rest-catalog/icebergclient@example.com" && \
kadmin.local -q "xst -k /tmp/svc-iceberg-rest-catalog.keytab svc-iceberg-rest-catalog/icebergclient@example.com" && \
cp /tmp/svc-iceberg-rest-catalog.keytab /cdep/keytabs/svc-iceberg-rest-catalog.keytab
