Kerberos Client Configuration

[Tristen Georgiou <tg...@phemi.com>]

Hi all,

Searched through the mail lists and couldn't find an answer, so hopefully
this hasn't been asked already, but under this section of the documentation:
http://accumulo.apache.org/1.7/accumulo_user_manual.html#_configuration_3

It says:

Three items need to be set to enable access to Accumulo:

   - instance.rpc.sasl.enabled=true
   - kerberos.server.primary=accumulo

The second and third properties must match the configuration of the
accumulo servers; this is required to set up the SASL transport.

Does anyone know what the 3rd item is?

Thanks,

Tristen

Re: Kerberos Client Configuration

[Christopher <ct...@apache.org>]

The third property was "kerberos.server.realm". It looks like it was
removed from the docs perhaps because the property doesn't exist, and we
just assume that the default realm in the client and the servers are the
same.

In any case, this is a documentation bug, at the very least. I think you
can ignore the missing "third property".

On Tue, Feb 2, 2016 at 8:50 PM Tristen Georgiou <tg...@phemi.com> wrote:

> Hi all,
>
> Searched through the mail lists and couldn't find an answer, so hopefully
> this hasn't been asked already, but under this section of the documentation:
> http://accumulo.apache.org/1.7/accumulo_user_manual.html#_configuration_3
>
> It says:
>
> Three items need to be set to enable access to Accumulo:
>
>    - instance.rpc.sasl.enabled=true
>    - kerberos.server.primary=accumulo
>
> The second and third properties must match the configuration of the
> accumulo servers; this is required to set up the SASL transport.
>
> Does anyone know what the 3rd item is?
>
> Thanks,
>
> Tristen
>