How to get the password from Kerberos principal

Asked Jan 23 '20 at 21:25

Active Jan 26 '20 at 06:55

Viewed 269 times

For all the auto-generated Kerberos principals, for example HDFS, Hadoop, Livy, how can I get their passwords so that I can try kinit with it?

I created a Kerberized cluster in AWS EMR and by default it auto-generated all these principals, and now I want to actually be able to authenticate Kerberos with them, but I don't know their passwords.

How can I get their passwords, and since I have their keytabs can I get their passwords from the keytabs?

edited Jan 26 '20 at 06:55

the Tin Man

158,662
42
215
303

asked Jan 23 '20 at 21:25

JYCH

Recommended reading: the `man` page of `kinit`. Especially options `-k` and `-t`. – Samson Scharfrichter Jan 29 '20 at 23:47
Note that you are talking about **service** principals. Stuff used by machines. Unless you are a cyborg, you should probably create a **user** principal and use it, well, to authenticate _against_ the services... – Samson Scharfrichter Jan 29 '20 at 23:49
...especially since some of the service principals are black-listed for some operations (a kind of fool-proof measure). – Samson Scharfrichter Jan 29 '20 at 23:52

How to get the password from Kerberos principal

0 Answers0