Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Info

This document is a work in progress.for Ambari versions between 2.0 and 2.2. The latest version may be seen at https://github.com/apache/ambari/blob/trunk/ambari-server/docs/security/kerberos/index.md.

Table of Contents
maxLevel4

...

Default value: aes des3-cbc-sha1 rc4 des-cbc-md5

realm

The default realm to use when creating service principals

Example: EXAMPLE.COM

kdc_host

-cbc-md5

realm

The default realm to use when creating service principals

Example: EXAMPLE.COM

kdc_host (<Ambari 2.4.0)

The IP address or FQDN for the KDC host. Optionally a port number may be included.

Example:  kdc.example.com

Example: kdc.example.com:88

kdc_hosts (>=Ambari 2.4.0)

A comma-delimited list of IP addresses or FQDNs for the list of relevant KDC hostsThe IP address or FQDN for the KDC host. Optionally a port number may be included for each entry.

Example:  kdc kdc.example.com, kdc1.example.com

Example: kdc.example.com:88, kdc1.example.com:88 

admin_server_host

The IP address or FQDN for the KDC Kerberos administrative host. Optionally a port number may be included.

...

curl -H "X-Requested-By:ambari" -u admin:admin -i -X PUT -d  '{"RequestInfo":{"context":"Stop Service"},"Body":{"ServiceInfo":{"state":"INSTALLED"}}}'  http://AMBARI_SERVER:8080/api/v1/clusters/CLUSTER_NAME/services

Get the

...

default Kerberos Descriptor

curl -H "X-Requested-By:ambari" -u admin:admin -i -X GET http://AMBARI_SERVER:8080/api/v1/stacks/STACK_NAME/versions/STACK_VERSION/artifacts/kerberos_descriptor

...

curl -H "X-Requested-By:ambari" -u admin:admin -i -X PUT POST -d @./payload http://AMBARI_SERVER:8080/api/v1/clusters/CLUSTER_NAME/artifacts/kerberos_descriptor

...