Hadoop Plugin installation: Login information with multiple keytabs

Products

• Workload Automation Agent
• CA Workload Automation Advanced Integration for Hadoop

Issue/Introduction

I need your help to work with Hadoop plugin installation on Linux machine .  

We are using kerberos authentication, so while installing I have selected the krb5 and given the path;   

Krb5 Configuration (Default: ): /etc/krb5.conf

 

For login configuration, we have to keytab file or path will work, as we have many keytab files in that directory  /etc/keytabs/ 

When I gave the path it is giving error;

===============================================================================
Invalid Kerberos Configuration Files
------------------------------------

Error

Login Configuration Path - Specified path is a directory.

PRESS <ENTER> TO ACCEPT THE FOLLOWING (OK):

--------------------

 

So if I want to give the file name, how do I configure for 100's of keytab file. 

Please advice.

Environment

Release : 12.0

Component : WORKLOAD AUTOMATION ADVANCED INTEGRATION FOR HADOOP

Resolution

To enable the plugin for kerberos authentication with HDFS file triggers, you need to provide the full path to the krb5.conf and login.conf configuration files (not the directory). 

If you have multiple keytabs, you can create an entry for each keytab in the JAAS Login Configuration File (login.conf). Should consult Kerberos security administrator on the configuration. See Implementing Kerberos Security for more information.

Note that you don't need to enable kerberos authentication during plugin installation, it's optional. After plugin installation, you can configure the plugin for kerberos support by adding these parameter in agentparm.txt file;

java.security.auth.login.config=<full path to a JAAS Login Configuration file>

java.security.krb5.conf=<full path to a Kerberos Configuration file>

 

 

Additional Information

Implementing Kerberos Security