Summary

In order to install Ranger in kerberized environment, user will have to enable kerberos on the cluster where Ranger is to be installed. Once, cluster is kerberized, user will have to create principals for each Ranger service and then follow below given steps to install Ranger.

...

• Check for HTTP Principal

  -> kinit -kt <HTTP keytab path> HTTP/<FQDN_OF_Ranger_Admin_Cluster>@<REALM>

  Code Block
  language bash
  E.g : kinit -kt /etc/security/keytabs/spnego.service.keytab HTTP/<FQDN>@EXAMPLE.COM

  (After

  above

  command

  there

  should

  not

  be

  any

  error.

  You

  can

  check

  using

  “klist”

  whether

  the

  above

  command

  was

  successful)

           -> kdestroy (Please don't miss kdestroy after above step)

...

E.g : kinit -kt  /etc/security/keytabs/rangeradmin.keytab rangeradmin/<FQDN>@EXAMPLE.COM

            (After above command there should not be any error. You can check using “klist” whether the above command was successful)

...

  -> kinit -kt  /etc/security/keytabs/rangerlookup.keytab rangerlookup/<FQDN of Ranger Admin>@<REALM>

...

E.g : kinit -kt  /etc/security/keytabs/rangerlookup.keytab rangerlookup/<FQDN>@EXAMPLE.COM

          (After above command there should not be any error u can check using “klist” whether the above command was successful)         

          -> kdestroy (Please don’t miss kdestroy after above step)

...