Enable MultiKDC

This document explains the process of enabling multi KDC in a Pulse environment which is already deployed.

One Cluster has already been configured with a KDC.
All the clusters that have to be added to the Pulse Instance have different KDCs
All the cluster nodes and KDCs are reachable from Pulse Servers.

Manual Modifications

Enable Multi-KDC Flag

Modify the accelo.yml file by executing the following sub-steps.
1. Open the$AcceloHome/config/accelo.yml file.
2. Change the IsMultiKDCclusterEnabled flag to true, if not yet set.

The updated file looks as follows.

Bash
    
 
ContainerRegistry: 191579300362.dkr.ecr.us-east-1.amazonaws.com/acceldataImageTag: 3.2.1ContainerRegistryID: ""ContainerRegistryKey: ""ContainerUserID: 1000:1000ContainerLogType: json-fileContainerLogOpts:  max-buffer-size: 4m  max-file: "3"  max-size: 10m  mode: non-blockingIsMultiKDCclusterEnabled: trueKerberosAddons:- ad-connectors- ad-kafka-connector- ad-kafka-0-10-2-connector- ad-impala-connector- ad-fsanalyticsv2-connector- ad-sparkstats
Copy

Push the changes to the database by executing the following command.

Bash
    
 
accelo admin database push-config -a
Copy

Copy Kerberos File

The following steps demonstrate the process to copy the Kerberos files of the first cluster.

Execute the config kerberos command.

Bash
    
 
accelo config kerberos -n <Active Name node URL>
Copy

Provide the principal of the first cluster, (The following code block shows an example of this).

Bash
    
 
Enter the principal: : hdfs@ACCELDATA.COM
Copy

Provide the Keytab file path of the first cluster. (The following code block shows an example of this).

Bash
    
 
Enter full path to the Keytab file (eg: /root/hdfs.keytab): : /data01/acceldata/kerberos.keytab
Copy

Provide the krb5.conf file path of the first cluster:

Bash
    
 
Enter the krb5Conf file path: : /data01/acceldata/krb5.conf
Copy

The output is as follows.

Bash
    
 
[root@pulse01:acceldata (ad-default)]$ accelo config kerberos -n http://hdp3101.dev.axl.iti:8042Setting up kerberos..Setting up kerberos..Enter the principal: : hdfs@ACCELDATA.COMEnter full path to the Keytab file (eg: /root/hdfs.keytab): : /data01/acceldata/kerberos.keytabEnter the krb5Conf file path: : /data01/acceldata/krb5.confWARN: /data01/acceldata/work/ad_hdp3_dev/krb/security/krb5JAASLogin.conf already being generatedWARN: /data01/acceldata/work/ad_hdp3_dev/krb/security/kafkaKrb5JAASLogin.conf already being generated✓ Done, Kerberos setup completed.INFO: /data01/acceldata/work/ad_hdp3_dev/fsanalytics/kinit_fsimage.sh - ✓ DoneINFO: /data01/acceldata/work/ad_hdp3_dev/fsanalytics/update_fsimage.sh - ✓ Done
Copy

Adding Second Cluster

You can follow the steps in the Enable MultiKDC section to add the second cluster.

Last updated on

Was this page helpful?