Enabling Kerberos authentication
You need to enable Kerberos authentication in Cloudera Manager as well as directly for your browser to securely reach the Streaming SQL Console.
When Kerberos authentication is set up for SSB, and a not authorized user wants to reach the
Streaming SQL Console, the following error message appears:
Enabling Kerberos for authentication
- Go to your cluster in Cloudera Manager.
- Click on SQL Stream Builder from the list of Services.
- Click the Configuration tab.
- Select .
- Type kerberos to the search field.
- Select the Enable Kerberos authentication setting.
- Open a terminal window.
- Copy and paste the following
command:
defaults write com.google.Chrome AuthServerAllowlist "<host_domain>" sudo scp <your_hostname>:/etc/krb5.conf /etc/krb5.conf kinit <username>
Enabling keytabs
- Go to your cluster in Cloudera Manager.
- Click on SQL Stream Builder from the list of Services.
- Click on SQLStreamBuilder Console.
The Streaming SQL Console opens up in a new window
- Click on your username.
- Click on Profile.
- Click Unlock keytab.