Questions tagged [keytab]

110 questions
0
votes
0 answers

Connect Hive with keytab using python

I am looking for an option to connect Hive with keytab using python. Tried the option Jaydebeapi to establish the connection, but no success yet import jaydebeapi DIR = root_path jarFile = [ DIR + 'hive-jdbc-2.3.7.jar', DIR +…
AK_sat
  • 91
  • 1
  • 1
  • 4
0
votes
0 answers

Implementing a Keytab File on Windows Server

I'm currently running Windows Server 2012. We have SQL Server connected to Hadoop, Via an ODBC connector. The connection to Hadoop uses Windows Authentication, via an MIT Kerberos ticket generator program. The tickets only last for 24 hours, so it's…
Depth of Field
  • 307
  • 2
  • 16
0
votes
1 answer

Windows AD and Its Key tab File

I just have a simple question . I have windows Active directory . I have created key tab file from it with command : ktpass /princ host/User1.contoso.com@CONTOSO.COM /mapuser User1 /pass MyPas$w0rd /out machine.keytab /crypto all /ptype…
karnish
  • 79
  • 1
  • 10
0
votes
2 answers

Kerberos keytab works on different hosts

I have encountered a problem. A keytab is generated for test01/host01@xxxx.com. I thought it only work on host01. But it works on other hosts. The host01 doesn't make sense. How can I use the keytab on only host01. Thanks a lot!
William
  • 11
  • 1
0
votes
1 answer

Connect to HDFS with keytab of a serviceID with Python3.6

I am trying the below piece of code to connect to hdfs and do some file related operation. Please note I am trying to connect a Cloudera HDFS instance from a Centos7 environment with python3.6 installed into it. import io from csv import…
Shanit
  • 109
  • 1
  • 2
  • 7
0
votes
1 answer

Where can I pass the properties file in Datastage when using Kafka Connector

There are some properties that I want to change as, for instance, security.protocol from SASL_PLAINTEXT to SASL_SSL. But the Kafka Connector in Datastage has very limited number of properties (host, use kerberos, principal name, keytab, topic name,…
Daniel Bonetti
  • 2,306
  • 2
  • 24
  • 33
0
votes
0 answers

How to connect to a kerberos-protected cluster?

I have a hadoop cluster that is kerberized. How do I connect to it from an external java application? I've been told I need to have a keytab and krb5 conf file but I'm not totally clear.
0
votes
0 answers

A question about using KeyTab files to authenticate an Active Directory user to a Linux WEB Server (or any other App running on Linux)

Can someone please help me with the following Assume I have an AD Domain and a 'standalone Linux host' which is not joined to the AD domain and there is no trust relationship in place between the AD and Linux of any kind. Next I have a Kerberos…
AUser
  • 63
  • 3
  • 11
0
votes
1 answer

Kerberos create spn and keytabs to include proxy DNS

I want to create SPNs and keytabs to include the proxy DNS so that the proxy can forward the headers to the back-end. I'm unsure what is host, domain and realm. Can someone verify if it looks ok? Or did I add an example.com too much? The proxy has…
Plv90
  • 7
  • 2
0
votes
1 answer

If a Kerberos keytab has multiple entries, how keep wrong person from using an entry?

Kerberos keytab files are located at /etc/krb5/krb5.keytab by convention, which is a non-user-specific location. That keytab (and all keytabs) can contain multiple entries. Let's suppose a computer has three users: Alice, Bob, and Eve. They each…
Becca Petrin
  • 1,494
  • 14
  • 13
0
votes
0 answers

Mirrormaker issue with Kerberos + GSSAPI +SASL_PLAINTEXT

I am trying to run Mirrormaker on a kerberos enabled cluster that sources from an off-site non-kerberos cluster, and I am getting the following error when starting up mirror maker. All of my key tabs are verified and valid, my…
0
votes
2 answers

KrbException: S4U2self needs a FORWARDABLE ticket

I am trying to perform kerberos constrained delegation through my java code. I've a keytab file, SPN attached to the user, and the delegation enabled for the SPN to that user. When I am trying to login with Keytab, I am getting the SPN's TGT.…
0
votes
0 answers

When connecting to SQL server via keytab warning shown as SPN not available in the keytab file

I have some doubts regarding generating a keytab file for SQL server kerberos authentication. SQL server's SPN is: MSSQLSvc/myhost:1433@MYDOMAIN.COM I have created keytab file as: ktpass -out…
Anna
  • 71
  • 1
  • 10
0
votes
1 answer

Unable to authenticate using Kerberos Keytab and kinit cache

I am using a keytab and setting it up using the kinit command on my windows commandline. I get the message "New ticket is stored in cache file".After that when I run my java application to access the keytab file for the key I get below…
0
votes
0 answers

Kerberos java to impala keytab authentication with JAAS Configuration

I am trying to connect to Impala DB using kerberos KeyTab authentication and JAAS configuration. I am already able to connect to Impala DB by setting System property - "java.security.auth.login.config" to JAAS config file. And it works perfectly.…