HDP2 to CDP Private Cloud Base Two Stage upgradePDF version

Kerberos

Prior to installing Kerberos on Cloudera Manager, you must collect the details from the Kerberos installation in Ambari.

Collect the values for the following settings:

  • KDC Type (AD, MIT KDC, Redhat IPA)

  • Admin Account Username

  • Admin Account Password

  • Kerberos Domain

  • Kerberos Realm

  • KDC Host

  • KDC Admin Host

  • Service Port (if non standard)

  • Encryption Type (default ‘rc4-hmac’)

  • AD Directory Suffix

Cloudera Manager maintains a single principal for all the roles in a service. Hence Auth_to_local rules are not migrated.

Service user names in Ambari will be migrated to Kerberos principal names in Cloudera manager as part of the transition process.