accelo config kerberos

Synopsis

This command configures and generates files required for Acceldata Kerberos setup.

Note

Before executing, verify if this command is compatible to the targeted Pulse version.

accelo config kerberos [flags]

Note

If you are using Pulse version >= 3.3.1, then add allow_weak_crypto config to krb5.conf file as shown in the example file code block below. This is mandatory for sparkstats and ad-connectors to read from HDFS and RM interface respectively.

[libdefaults] allow_weak_crypto = true default_realm = ADSRE.COM dns_lookup_kdc = false dns_lookup_realm = false ticket_lifetime = 86400 renew_lifetime = 604800 forwardable = true default_tgs_enctypes = rc4-hmac default_tkt_enctypes = rc4-hmac permitted_enctypes = rc4-hmac udp_preference_limit = 1 kdc_timeout = 3000 [realms] ADSRE.COM = { kdc = cdpssl01.acceldata.dvl admin_server = cdpssl01.acceldata.dvl } [domain_realm]

Options

-h: help help for kerberos
-u: Updates the Kerberos in passwd and group files of Pulse containers.

accelo config kerberos

Synopsis

Options

SEE ALSO