Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

  • Check for HTTP Principal

    -> kinit -kt <HTTP keytab path> HTTP/<FQDN_OF_Ranger_Admin_Cluster>@<REALM>

    Code Block
    languagebash
    E.g
    : kinit -kt /etc/security/keytabs/spnego.service.keytab HTTP/<FQDN>@EXAMPLE.COM

    (After above command there should not be any error. You can check using “klist” whether the above command was successful)

           -> kdestroy (Please don't miss kdestroy after above step)

For Ranger Admin

  • Create rangeradmin/<FQDN of Ranger Admin>@<REALM>
    -> kadmin.local
    -> addprinc -randkey rangeradmin/<FQDN of Ranger

    Admin>

    Admin> 

          
    E.g: addprinc -randkey rangeradmin/<FQDN>@EXAMPLE.COM

    -> xst -k /etc/security/keytabs/rangeradmin.keytab rangeradmin/<FQDN of Ranger Admin>@<REALM>

    -> exit

  • Check ranger-admin created principal

...

  • -> kinit -kt  /etc/security/keytabs/rangeradmin.keytab rangeradmin/<FQDN of Ranger Admin>@<REALM>

     

...

...

languagebash
  • E.g :

...

  • kinit -kt

...

  •  /etc/security/keytabs/rangeradmin.keytab rangeradmin/<FQDN>@EXAMPLE.COM

...

  • (After above command there should not be any error. You can check using “klist” whether the above command was successful)

...

  • -> kdestroy (Please don’t miss kdestroy after above step)

 For Ranger Lookup

  •   Create rangerlookup/<FQDN of Ranger Admin>@<REALM>

    -> kadmin.locallocal 

...

  • -> addprinc -randkey  rangerlookup/<FQDN of Ranger Admin>

     

    Eg: addprinc -randkey rangerlookup/<FQDN>@EXAMPLE.COM

...

  • -> xst -k /etc/security/keytabs/rangerlookup.keytab rangerlookup/<FQDN of Ranger Admin>@<REALM>

...

  •           

...

  • -> exit

  • Check ranger-lookup created principal

...