Enabling Kerberos

Before you enable Kerberos, you must install the Kerberos client on the Log Analysis server.

1. Install the Kerberos client on the Log Analysis server.
   For example, to install the Kerberos client on a Red Hat® Enterprise (RHEL) system, run the following command.

   yum install krb5-workstation krb5-libs

   Or to install the Kerberos client on a SUSE Linux® Enterprise Server (SLES) system, run the following command.

   zypper install krb5 krb5-client

2. Copy the Kerberos configuration file to the Log Analysis server.
   • For Huawei FusionInsight HD, using the FusionInsight Manager administration user interface, download the Authentication Credential from the System User management section and copy the krb5.conf file from the downloaded compressed file to the /etc directory on the Log Analysis server.
3. Initialize Kerberos authentication on the NameNode server.
   • For Huawei FusionInsight HD, run the command as the root user.

     kinit -k -t <hdfs_keytab_dir_path>/HTTP.keytab <hdfs_user_principal>