Step 5: Deploying the Cloudera Manager Server Keytab
After obtaining or creating the Cloudera Manager Server principal and keytab, follow these instructions to deploy them.
- Move the cmf.keytab file to the /etc/cloudera-scm-server/ directory on the host where you are running the Cloudera Manager Server.
$ mv cmf.keytab /etc/cloudera-scm-server/
- Make sure that the cmf.keytab file is only readable by the Cloudera Manager Server user account cloudera-scm.
$ sudo chown cloudera-scm:cloudera-scm /etc/cloudera-scm-server/cmf.keytab $ sudo chmod 600 /etc/cloudera-scm-server/cmf.keytab
- Add the Cloudera Manager Server principal (cloudera-scm/admin@YOUR-LOCAL-REALM.COM) to a text file named cmf.principal and store the cmf.principal file in the /etc/cloudera-scm-server/ directory on the host where you are running the Cloudera Manager Server.
- Make sure that the cmf.principal file is only readable by the Cloudera Manager Server user account cloudera-scm.
$ sudo chown cloudera-scm:cloudera-scm /etc/cloudera-scm-server/cmf.principal $ sudo chmod 600 /etc/cloudera-scm-server/cmf.principal
Note: The Cloudera Manager Server assumes that the kadmin command is located in a directory either on the path or in the /usr/kerberos/sbin directory. If this is not the case, you must create a symbolic link to kadmin from a location accessible on the path.
<< Step 4: Get or Create a Kerberos Principal and Keytab File for the Cloudera Manager Server | Step 6: Configure the Kerberos Default Realm in the Cloudera Manager Admin Console >> | |