accelo config kerberos
Synopsis
This command configures and generates files required for Acceldata Kerberos setup.
Before executing, verify if this command is compatible to the targeted Pulse version.
accelo config kerberos [flags]
If you are using Pulse version >= 3.3.1, then add allow_weak_crypto
config to krb5.conf file as shown in the example file code block below. This is mandatory for sparkstats and ad-connectors to read from HDFS and RM interface respectively.
x
[libdefaults]
allow_weak_crypto = true
default_realm = ADSRE.COM
dns_lookup_kdc = false
dns_lookup_realm = false
ticket_lifetime = 86400
renew_lifetime = 604800
forwardable = true
default_tgs_enctypes = rc4-hmac
default_tkt_enctypes = rc4-hmac
permitted_enctypes = rc4-hmac
udp_preference_limit = 1
kdc_timeout = 3000
[realms]
ADSRE.COM = {
kdc = cdpssl01.acceldata.dvl
admin_server = cdpssl01.acceldata.dvl
}
[domain_realm]
Options
- -h: help help for kerberos
- -u: Updates the Kerberos in passwd and group files of Pulse containers.
SEE ALSO
- accelo config - Configure the Acceldata stack services and components
Was this page helpful?