Enabling Kerberos Authentication Using the Wizard
Required Role: Cluster Administrator or Full Administrator
Cloudera Manager provides a wizard for integrating your organization's Kerberos instance with your cluster to provide authentication services.
Kerberos must already be deployed in your organization and the Kerberos key distribution center (KDC) must be ready to use, with a realm established. For Hue and Oozie, the Kerberos realm must support renewable tickets.
- See MIT Kerberos home and MIT Kerberos 5 Release 1.8.6 documentation for more information about MIT Kerberos.
- See Direct to Active Directory and Microsoft Active Directory documentation for more information about using Active Directory as a KDC.
For Active Directory, you must have administrative privileges to the Active Directory instance for initial setup and for on-going management, or you will need to have the help of your AD administrator prior to and during the integration process. For example, administrative access is needed to access the Active Directory KDC, create principals, and troubleshoot Kerberos TGT/TGS-ticket-renewal and other issues that may arise.
| OS | Packages Required |
|---|---|
| RHEL 7 Compatible, RHEL 6 Compatible, RHEL 5 Compatible |
|
| SLES |
|
| Ubuntu or Debian |
|
| Windows |
|
Cloudera supports the Kerberos version that ships with each supported operating system listed in CDH and Cloudera Manager Supported Operating Systems.