Mailing-List: contact user-help@ambari.apache.org; run by ezmlm
Precedence: bulk
Reply-To: user@ambari.apache.org
Subject: Re: Launching Kerberized cluster via Blueprint
MIME-Version: 1.0
From: Olivier Renault <orenault@hortonworks.com>
To: "user@ambari.apache.org" <user@ambari.apache.org>,
	"user@ambari.apache.org" <user@ambari.apache.org>
Thread-Topic: Launching Kerberized cluster via Blueprint
Thread-Index: AQHQnrzhA+ckk0mbyEeiiqXujw0T+52cV0X8
Date: Thu, 4 Jun 2015 13:28:41 +0000
Message-ID: 
 <DFB6CA29F208216D.1-90ac03d5-9223-4ec0-a22e-0b5d5503caa1@mail.outlook.com>
References: 
 <CAEg_P-JZ3R0nLsSgbLwp_Xw1OvFDsRLHG-DqXOxHUEFoW+U=Hw@mail.gmail.com>
In-Reply-To: 
 <CAEg_P-JZ3R0nLsSgbLwp_Xw1OvFDsRLHG-DqXOxHUEFoW+U=Hw@mail.gmail.com>
Accept-Language: en-GB, en-US
Content-Language: en-GB
Content-Type: multipart/alternative;
	boundary="_000_DFB6CA29F208216D190ac03d592234ec0a22e0b5d5503caa1mailou_"

--_000_DFB6CA29F208216D190ac03d592234ec0a22e0b5d5503caa1mailou_
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

Unfortunately, it's a two step process atm. Install via blueprint and then =
API call for kerberos.

IIRC, it's on the roadmap.

Olivier Renault


On Thu, Jun 4, 2015 at 4:52 AM -0700, "Lo=EFc Chanel" <loic.chanel@telecomn=
ancy.net<mailto:loic.chanel@telecomnancy.net>> wrote:


Hi all,

As I was trying to deploy a fully secured cluster with Knox, Ranger and Ke =
beros, I had the feeling that it is not possible to instantiate a cluster a=
sking it to generate the principal and keytabs linked to each of its servic=
es.

Is there a way to deploy both of the cluster services and the corresponding=
 principals and keytabs via blueprint, just like if I deployed my cluster a=
nd I was asking Ambari to enable Kerberos with MIT KDC ?

Thanks,


Lo=EFc

Lo=EFc CHANEL
Engineering student at TELECOM Nancy
Trainee at Worldline - Villeurbanne (France - 69)

--_000_DFB6CA29F208216D190ac03d592234ec0a22e0b5d5503caa1mailou_
Content-Type: text/html; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<html>
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Diso-8859-=
1">
<meta content=3D"text/html; charset=3Dutf-8">
</head>
<body>
<p dir=3D"ltr">Unfortunately, it's a two step process atm. Install via blue=
print and then API call for kerberos.
</p>
<p dir=3D"ltr">IIRC, it's on the roadmap. </p>
<p dir=3D"ltr">Olivier Renault </p>
<br>
<br>
<br>
<div class=3D"gmail_quote">On Thu, Jun 4, 2015 at 4:52 AM -0700, &quot;Lo=
=EFc Chanel&quot; <span dir=3D"ltr">
&lt;<a href=3D"mailto:loic.chanel@telecomnancy.net" target=3D"_blank">loic.=
chanel@telecomnancy.net</a>&gt;</span> wrote:<br>
<br>
</div>
<div>
<div dir=3D"ltr">
<p class=3D"">Hi all,</p>
<p class=3D"">As I was trying to deploy a fully secured cluster with Knox, =
Ranger and Ke beros, I had the feeling that it is not possible to instantia=
te a cluster asking it to generate the principal and keytabs linked to each=
 of its services.</p>
<p class=3D"">Is there a way to deploy both of the cluster services and the=
 corresponding<span style=3D"">
</span>principals and keytabs via blueprint, just like if I deployed my clu=
ster and I was asking Ambari to enable Kerberos with MIT KDC ?</p>
<p class=3D"">Thanks,</p>
<p class=3D""><br>
</p>
<p class=3D"">Lo=EFc</p>
<div>
<div class=3D"gmail_signature">
<div dir=3D"ltr">
<div class=3D"gmail_signature">Lo=EFc CHANEL<br>
Engineering student at TELECOM Nancy<br>
Trainee at Worldline - Villeurbanne (France - 69)<br>
</div>
</div>
</div>
</div>
</div>
</div>
</body>
</html>

--_000_DFB6CA29F208216D190ac03d592234ec0a22e0b5d5503caa1mailou_--