Plans for fully automated Kerberos support

[ADAMOS LOIZOU <ad...@tid.es>]

Hello again,

In my team we have been exploring the semi-automated option of enabling cluster security with Kerberos though Ambari, as described in the guide and indicated by the Security wizard.

I noticed that in the code base the option for enabling Kerberos has the default value of MANUALLY_SET_KERBEROS.

Are there any plans for fully automating kerberos security with Ambari (i.e. installing Kerberos server, clients, generating principals and keys, etc)?

Thank you.

Kind Regards,
Adamos

________________________________

Este mensaje se dirige exclusivamente a su destinatario. Puede consultar nuestra pol?tica de env?o y recepci?n de correo electr?nico en el enlace situado m?s abajo.
This message is intended exclusively for its addressee. We only send and receive email on the basis of the terms set out at:
http://www.tid.es/ES/PAGINAS/disclaimer.aspx

Re: Plans for fully automated Kerberos support

[Yusaku Sako <yu...@hortonworks.com>]

Yes, there is a plan to fully automate Kerberos setup including
installation of Kerberos server/clients, generation of principals and
keytabs, etc.
The current semi-manual approach is painful and error prone.  Also,
it's not easy to add host components to existing hosts or new hosts to
the cluster as principals and keytabs have to be generated and
distributed manually.
Ambari should perform these tasks automatically.

Yusaku

On Wed, Oct 9, 2013 at 9:05 AM, ADAMOS LOIZOU <ad...@tid.es> wrote:
> Hello again,
>
> In my team we have been exploring the semi-automated option of enabling
> cluster security with Kerberos though Ambari, as described in the guide and
> indicated by the Security wizard.
>
> I noticed that in the code base the option for enabling Kerberos has the
> default value of MANUALLY_SET_KERBEROS.
>
> Are there any plans for fully automating kerberos security with Ambari (i.e.
> installing Kerberos server, clients, generating principals and keys, etc)?
>
> Thank you.
>
> Kind Regards,
> Adamos
>
> ________________________________
>
> Este mensaje se dirige exclusivamente a su destinatario. Puede consultar
> nuestra política de envío y recepción de correo electrónico en el enlace
> situado más abajo.
> This message is intended exclusively for its addressee. We only send and
> receive email on the basis of the terms set out at:
> http://www.tid.es/ES/PAGINAS/disclaimer.aspx

-- 
CONFIDENTIALITY NOTICE
NOTICE: This message is intended for the use of the individual or entity to 
which it is addressed and may contain information that is confidential, 
privileged and exempt from disclosure under applicable law. If the reader 
of this message is not the intended recipient, you are hereby notified that 
any printing, copying, dissemination, distribution, disclosure or 
forwarding of this communication is strictly prohibited. If you have 
received this communication in error, please contact the sender immediately 
and delete it from your system. Thank You.