Kerberos

Prior to installing Kerberos on Cloudera Manager, you must collect the details from the Kerberos installation in Ambari.

Collect the values for the following settings:

• KDC Type (AD, MIT KDC, Redhat IPA)

• Admin Account Username

• Admin Account Password

• Kerberos Domain

• Kerberos Realm

• KDC Host

• KDC Admin Host

• Service Port (if non standard)

• Encryption Type (default ‘rc4-hmac’)

• AD Directory Suffix

Cloudera Manager maintains a single principal for all the roles in a service. Hence Auth_to_local rules are not migrated.

Service user names in Ambari will be migrated to Kerberos principal names in Cloudera manager as part of the transition process.