Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

  • Create rangeradmin/<FQDN of Ranger Admin>@<REALM>
    -> kadmin.local

    -> addprinc -randkey rangeradmin/<FQDN of Ranger Admin>
          Eg: addprinc -randkey rangeradmin/mp-ranger-0703-3.novalocal@EXAMPLE.COM

    -> xst -k /etc/security/keytabs/rangeradmin.keytab rangeradmin/<FQDN of Ranger Admin>@<REALM>

    -> exit
  •  Check ranger-admin created principal
    -> kinit -kt  /etc/security/keytabs/rangeradmin.keytab rangeradmin/<FQDN of Ranger Admin>@<REALM>
          E.g : kinit -kt  /etc/security/keytabs/rangeradmin.keytab rangeradmin/mp-ranger-0703-3.novalocal@EXAMPLE.COM 
          (After above command there should not be any error. You can check using “klist” whether the above command was successful)

    -> kdestroy (Please don’t miss kdestroy after above step)

 For Ranger Lookup:

  •   Create rangerlookup/<FQDN of Ranger Admin>@<REALM>

...

  • -> kadmin.local

  -> addprinc -randkey  rangerlookup/<FQDN of Ranger Admin>

Eg: addprinc -randkey rangerlookup/mp-ranger-0703-3.novalocal@EXAMPLE.COM

  -> xst -k /etc/security/keytabs/rangerlookup.keytab rangerlookup/<FQDN of Ranger Admin>@<REALM>           

  -> exit

  •  Check rangerlookup ranger-lookup created principal

  -> kinit -kt  /etc/security/keytabs/rangerlookup.keytab rangerlookup/<FQDN of Ranger Admin>@<REALM>

E.g : kinit -kt  /etc/security/keytabs/rangerlookup.keytab rangerlookup/mp-ranger-0703-3.novalocal@EXAMPLE.COM

               (After above command there should not be any error u can check using “klist” whether the above command was successful)

          -> kdestroy (Please don’t miss kdestroy after above step)

For Ranger Usersync:

  •  Create rangerusersync/<FQDN>@<REALM>

...

  • -> kadmin.local

...

  • -> addprinc -randkey rangerusersync/<FQDN of Ranger usersync>

Eg   Eg: addprinc -randkey rangerusersync/mp-ranger-0703-3.novalocal@EXAMPLE.COM

 -> xst -k /etc/security/keytabs/rangerusersync.keytab rangerusersync/<FQDN>@<REALM>

...