Kerberos for HBase

Step-by-Step Guide to Set Up Kerberos for HBase on Cloudera (CDH).

Posted by Aravind Nuthalapati on January 31, 2018

This Article helps setting up Kerberos for HBase on CDH Clusters.

Prerequisites

Cloudera Manager and CDH installed and running. MIT Kerberos server installed and operational. Administrator access to Kerberos KDC, Cloudera Manager, and cluster nodes.

Step 1: Install and Configure Kerberos (KDC)

Step 1: Install and Configure Kerberos (KDC) On your Kerberos KDC server (typically separate from your Hadoop nodes): Install Kerberos: yum install krb5-server krb5-libs krb5-auth-dialog krb5-workstation

Cloudera Manager and CDH installed and running. MIT Kerberos server installed and operational. Administrator access to Kerberos KDC, Cloudera Manager, and cluster nodes.

Read the documentation and more at https://ansible.com/

You can find installation instructions here for a variety of platforms. Most users should probably install a released version of Ansible from pip, a package manager or our release repository. Officially supported builds of Ansible are also available. Some power users run directly from the development branch - while significant efforts are made to ensure that devel is reasonably stable, you're more likely to encounter breaking changes when running Ansible this way.

Design Principles

Have a dead simple setup process and a minimal learning curve Manage machines very quickly and in parallel Avoid custom-agents and additional open ports, be agentless by leveraging the existing SSH daemon Describe infrastructure in a language that is both machine and human friendly Focus on security and easy auditability/review/rewriting of content Manage new remote machines instantly, without bootstrapping any software Allow module development in any dynamic language, not just Python Be usable as non-root Be the easiest IT automation system to use, ever.