Mailing-List: contact user-help@hadoop.apache.org; run by ezmlm
Precedence: bulk
MIME-Version: 1.0
From: Bear Giles <bgiles@snaplogic.com>
Date: Tue, 19 Dec 2017 08:28:08 -0700
Message-ID: <CAPKAHcgXcjmavuCaqwBQ_ZMV_4Wu2=KWSqcw6s6mX_+EXC1+rQ@mail.gmail.com>
Subject: embedded HDFS cluster + Kerberos question
To: user@hadoop.apache.org
Content-Type: multipart/alternative; boundary="001a1141f2243704570560b31df3"
archived-at: Tue, 19 Dec 2017 15:28:17 -0000

--001a1141f2243704570560b31df3
Content-Type: text/plain; charset="UTF-8"

Stupid question but der google insists on telling me how to set up Kerberos
on CDH and HDP clusters using GUIs instead of how to do it at a very low
level.

I have an embedded KDC and DFS servers running in my unit tests. I know how
to create the DFS Kerberos principals in the KDC and configure the DFS so
it knows the principals to use and a modified 'kinit command' so that it
refers to the krb5.conf file for the embedded KDC.

However I can't figure out where to put the keytab file so the embedded DFS
server (and potentially other embedded servers) knows where to find it.

I've gone as far as doing 'sudo / find -name "*.keytab"' on some of my
actual clusters to see where the file is located, with no luck.

Where do the server keytab files go?

-- 

Bear Giles

Sr. Java Application Engineer
bgiles@snaplogic.com
Mobile: 720-749-7876


<http://www.snaplogic.com/about-us/jobs>


*SnapLogic Inc | 929 Pearl St #200 | 80303 CO 80302 | USA*

*SnapLogic Inc | 2 W 5th Avenue 4th Floor | San Mateo CA 94402 | USA   *


This message is confidential. It may also be privileged or otherwise
protected by work product immunity or other legal rules. If you have
received it by mistake, please let us know by e-mail reply and delete it
from your system; you may not copy this message or disclose its contents to
anyone. The integrity and security of this message cannot be guaranteed on
the Internet.

--001a1141f2243704570560b31df3
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">Stupid question but der google insists on telling me how t=
o set up Kerberos on CDH and HDP clusters using GUIs instead of how to do i=
t at a very low level.<div><br></div><div>I have an embedded KDC and DFS se=
rvers running in my unit tests. I know how to create the DFS Kerberos princ=
ipals in the KDC and configure the DFS so it knows the principals to use an=
d a modified &#39;kinit command&#39; so that it refers to the krb5.conf fil=
e for the embedded KDC.</div><div><br></div><div>However I can&#39;t figure=
 out where to put the keytab file so the embedded DFS server (and potential=
ly other embedded servers) knows where to find it.</div><div><br></div><div=
>I&#39;ve gone as far as doing &#39;sudo / find -name &quot;*.keytab&quot;&=
#39; on some of my actual clusters to see where the file is located, with n=
o luck.<br clear=3D"all"><div><br></div><div>Where do the server keytab fil=
es go?</div><div><br></div>-- <br><div class=3D"gmail_signature" data-smart=
mail=3D"gmail_signature"><div dir=3D"ltr"><div><div dir=3D"ltr"><div><div d=
ir=3D"ltr"><div><div dir=3D"ltr"><div dir=3D"ltr"><table style=3D"color:rgb=
(0,0,0);font-size:11px;font-family:Arial;line-height:17px" cellspacing=3D"0=
" cellpadding=3D"0" border=3D"0" width=3D"600"><tbody><tr><td colspan=3D"2"=
><img src=3D"http://www.snaplogic.com/files/210-greybar_thin.png" width=3D"=
600" height=3D"2"><br></td></tr><tr><td width=3D"357" valign=3D"top"><p><sp=
an style=3D"font-size:20px;color:rgb(101,42,123);font-family:Helvetica,Aria=
l,sans-serif"></span><span style=3D"color:rgb(68,68,68)"><font size=3D"2"><=
span style=3D"font-family:verdana,sans-serif"><span style=3D"line-height:no=
rmal">Bear Giles</span></span></font><span style=3D"font-family:verdana,san=
s-serif"><font size=3D"2"><span style=3D"line-height:normal"><br></span></f=
ont></span></span></p><p><span style=3D"color:rgb(68,68,68)"><span style=3D=
"font-family:verdana,sans-serif"><font size=3D"2"><span style=3D"line-heigh=
t:normal">Sr.=C2=A0</span><span style=3D"line-height:normal">Java</span><sp=
an style=3D"line-height:normal">=C2=A0</span><span style=3D"line-height:nor=
mal">Application</span><span style=3D"line-height:normal">=C2=A0</span><spa=
n style=3D"line-height:normal">Engineer</span><br><a href=3D"mailto:bgiles@=
snaplogic.com" target=3D"_blank">bgiles@snaplogic.com</a><br>Mobile:=C2=A07=
20-749-7876</font></span></span></p><p style=3D"font-size:12px;font-family:=
Helvetica,Arial,sans-serif"><a href=3D"http://www.snaplogic.com/about-us/jo=
bs" style=3D"color:rgb(102,102,102);text-decoration:none" target=3D"_blank"=
><img src=3D"https://docs-snaplogic.atlassian.net/wiki/download/attachments=
/35245/SnapLogic%20logo-for%20email%20sig.png?version=3D2&amp;modificationD=
ate=3D1493417983204&amp;cacheVersion=3D1&amp;api=3Dv2"><br></a></p><span></=
span></td><td style=3D"line-height:5px;font-size:5px" width=3D"243" valign=
=3D"top" align=3D"right"><p>=C2=A0</p></td></tr><tr><td colspan=3D"2"><br><=
/td></tr><tr><td colspan=3D"2" style=3D"line-height:12px;padding-top:1px" v=
align=3D"top"><p><span style=3D"color:rgb(68,68,68)"><font size=3D"1"><span=
 style=3D"font-family:verdana,sans-serif"><strong>SnapLogic Inc | 929 Pearl=
 St #200 | 80303 CO 80302 | USA</strong><br></span></font></span></p><p><sp=
an style=3D"color:rgb(68,68,68)"><font size=3D"1"><span style=3D"font-famil=
y:verdana,sans-serif"><strong>SnapLogic Inc | 2 W 5th Avenue 4th Floor | Sa=
n Mateo CA 94402 | USA =C2=A0=C2=A0</strong>=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=
=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=
=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=
=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0</span></font></span>=
</p><p><span style=3D"color:rgb(68,68,68)"><font size=3D"1"><span style=3D"=
font-family:verdana,sans-serif">This
 message is confidential. It may also be privileged or otherwise=20
protected by work product immunity or other legal rules. If you have=20
received it by mistake, please let us know by e-mail reply and delete it
 from your system; you may not copy this message or disclose its=20
contents to anyone. The integrity and security of this message cannot be
 guaranteed on the Internet.</span></font></span></p></td></tr></tbody></ta=
ble></div></div></div></div></div></div></div></div></div>
</div></div>

--001a1141f2243704570560b31df3--