Synopsis
This command configures and generates files required for Acceldata Kerberos setup.
Before executing, verify if this command is compatible to the targeted Pulse version.
accelo config kerberos [flags]If you are using Pulse version >= 3.3.1, then add allow_weak_crypto config to krb5.conf file as shown in the example file code block below. This is mandatory for sparkstats and ad-connectors to read from HDFS and RM interface respectively.
x
[libdefaults]allow_weak_crypto = truedefault_realm = ADSRE.COM dns_lookup_kdc = falsedns_lookup_realm = falseticket_lifetime = 86400renew_lifetime = 604800forwardable = truedefault_tgs_enctypes = rc4-hmacdefault_tkt_enctypes = rc4-hmacpermitted_enctypes = rc4-hmacudp_preference_limit = 1kdc_timeout = 3000[realms]ADSRE.COM = {kdc = cdpssl01.acceldata.dvladmin_server = cdpssl01.acceldata.dvl}[domain_realm]Options
- -h: help help for kerberos
- -u: Updates the Kerberos in passwd and group files of Pulse containers.
SEE ALSO
- accelo config - Configure the Acceldata stack services and components
Was this page helpful?