hadoop-common-user mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Vivek Mishra <vivek.mis...@impetus.co.in>
Subject RE: Kerberos Hadoop access
Date Sun, 13 Mar 2016 08:26:02 GMT
Hi Benoy,
Thanks for your response. Would

You can also obtain kerberos tickets programatically using keytab. See http://hadoopsecurity.org/wiki/How%20to%20access%20secure%20Hadoop%20cluster%20programmatically%20using%20keytab
it also work from remote client machine?

Shouldn’t it be like need to connect with remote KDC server first for kinit?  Here in my
case, KDC is on machine X and secured hadoop cluster is on machine Y.

Please suggest.

Sincerely,
-Vivek

From: Benoy Antony [mailto:bantony@gmail.com]
Sent: 13 March 2016 02:43
To: Vivek Mishra <vivek.mishra@impetus.co.in>
Cc: user@hadoop.apache.org
Subject: Re: Kerberos Hadoop access

Hi Vivek,

You need a kerberos ticket to  interact with a secure Hadoop Cluster. To obtain kerberos ticket
, do a kinit. More kerberos command are here : http://hadoopsecurity.org/wiki/Useful%20Kerberos%20Commands%20for%20a%20Hadoop%20User
You can also obtain kerberos tickets programatically using keytab. See http://hadoopsecurity.org/wiki/How%20to%20access%20secure%20Hadoop%20cluster%20programmatically%20using%20keytab
Other than fetching a ticket, you do not need to change anything.
A few useful "How Tos" for a secure Hadoop Cluster are here : http://hadoopsecurity.org/wiki/How%20Tos
Let me know if it solves your problem.

thanks ,
Benoy



On Sat, Mar 12, 2016 at 7:39 AM, Vivek Mishra <vivek.mishra@impetus.co.in<mailto:vivek.mishra@impetus.co.in>>
wrote:
Hi,
Can anyone point me to a reference for running map reduce job or HDFS file creation over Kerberos
secured HDFS cluster( From remote client machine)?
Spent entire day with different tweaks using UserGroupInformation and SecurityUtil.



________________________________






NOTE: This message may contain information that is confidential, proprietary, privileged or
otherwise protected by law. The message is intended solely for the named addressee. If received
in error, please destroy and notify the sender. Any use of this email is prohibited when received
in error. Impetus does not represent, warrant and/or guarantee, that the integrity of this
communication has been maintained nor that the communication is free of errors, virus, interception
or interference.


________________________________






NOTE: This message may contain information that is confidential, proprietary, privileged or
otherwise protected by law. The message is intended solely for the named addressee. If received
in error, please destroy and notify the sender. Any use of this email is prohibited when received
in error. Impetus does not represent, warrant and/or guarantee, that the integrity of this
communication has been maintained nor that the communication is free of errors, virus, interception
or interference.
Mime
View raw message