...
Check for HTTP Principal
-> kinit -kt <HTTP keytab path> HTTP/<FQDN_OF_Ranger_Admin_Cluster>@<REALM>
Code Block language bash E.g
: kinit -kt /etc/security/keytabs/spnego.service.keytab HTTP/<FQDN>@EXAMPLE.COM
(After above command there should not be any error. You can check using “klist” whether the above command was successful)
-> kdestroy (Please don't miss kdestroy after above step)
For Ranger Admin
Create rangeradmin/<FQDN of Ranger Admin>@<REALM>
Admin>
-> kadmin.local
-> addprinc -randkey rangeradmin/<FQDN of RangerAdmin>
E.g: addprinc -randkey rangeradmin/<FQDN>@EXAMPLE.COM
-> xst -k /etc/security/keytabs/rangeradmin.keytab rangeradmin/<FQDN of Ranger Admin>@<REALM>
-> exit
Check ranger-admin created principal
...
- -> kinit -kt /etc/security/keytabs/rangeradmin.keytab rangeradmin/<FQDN of Ranger Admin>@<REALM>
...
...
language | bash |
---|
E.g :
...
kinit -kt
...
/etc/security/keytabs/rangeradmin.keytab rangeradmin/<FQDN>@EXAMPLE.COM
...
(After above command there should not be any error. You can check using “klist” whether the above command was successful)
...
-> kdestroy (Please don’t miss kdestroy after above step)
For Ranger Lookup
Create rangerlookup/<FQDN of Ranger Admin>@<REALM>
-> kadmin.locallocal
...
- -> addprinc -randkey rangerlookup/<FQDN of Ranger Admin>
Eg: addprinc -randkey rangerlookup/<FQDN>@EXAMPLE.COM
...
-> xst -k /etc/security/keytabs/rangerlookup.keytab rangerlookup/<FQDN of Ranger Admin>@<REALM>
...
...
-> exit
Check ranger-lookup created principal
...