kerberos

Issue connecting RStudio (but not R) to Hive with Kerberos

由 冷暖自知 提交于 2019-12-11 14:42:33
问题 I'me trying to connect RStudio to Hive that has Kerberos authentication. If I run the below in an R script called from the command line, it works. library("DBI") library("rJava") library("RJDBC") cp = c("/u01/cloudera/parcels/CDH/lib/hive/lib/hive-jdbc.jar" , "/u01/cloudera/parcels/CDH/lib/hadoop/hadoop-common.jar" , "/u01/cloudera/parcels/CDH/lib/hive/lib/libthrift-0.9.2.jar" , "/u01/cloudera/parcels/CDH/lib/hive/lib/hive-service.jar" , "/u01/cloudera/parcels/CDH/lib/hive/lib/httpclient-4.2

Integrated Security on Reporting Services XML Datasource

由 醉酒当歌 提交于 2019-12-11 14:21:35
问题 I am working on setting up my report server to use a web service as an XML datasource. I seem to be having authentication issues between the web service and the report with I choose to use Integrated security. Here's what I have: 1) I have a website w/ an exposed service. This website is configured to run ONLY on Integrated Security. This means that we have all other modes turned off AND Enabled anonymous access turned off under directory security. 2) Within the Web.config of the website, I

Why Firefox keeps negotiating kerberos service tickets?

由 狂风中的少年 提交于 2019-12-11 12:23:21
问题 I ran some tests on Kerberos and found out some strange behavior related to Firefox and Kerberos. I have a server running Apache + mod_auh_kerb which is configured to check kerberos credential when serving requests from clients. Kerberos authentication is performed and user without valid credentials are rejected. However, I do not understand the following: Once the first request is made, a TGS is cached on the client in /tmp/krb5ccXXXX, but a network capture revealed that firefox request a

redhat6.4下面安装kerberos

由 只谈情不闲聊 提交于 2019-12-11 11:34:53
【推荐】2019 Java 开发者跳槽指南.pdf(吐血整理) >>> 1、安装rpm包 rpm -ivh krb5-libs-1.10.3-10.el6.x86_64.rpm rpm -ivh krb5-server-1.10.3-10.el6.x86_64.rpm rpm -ivh krb5-workstation-1.10.3-10.el6.x86_64.rpm 2、配置文件 /var/kerberos/krb5kdc/kdc.conf 内容如下： [kdcdefaults] kdc_ports = 750,88 [realms] psy.com = { database_name=/var/kerberos/krb5kdc/principal admin_keytab = /var/kerberos/krb5kdc/kadm5.keytab acl_file = /var/kerberos/krb5kdc/kadm5.acl key_stash_file=/var/kerberos/krb5kdc/.k5.psy.com kdc_ports=750,88 max_life=10h 0m 0s max_renewable_life=7d 0h 0m 0s } /etc/krb5.conf [logging] default = FILE:/var/log/krb5libs

解决问题Login failure for nn/admin@psy.com from keytab

由 混江龙づ霸主 提交于 2019-12-11 11:29:53
【推荐】2019 Java 开发者跳槽指南.pdf(吐血整理) >>> 在做hadoop和 Kerberos结合的时候，遇到这么一个问题“java.io.IOException: Login failure for hadoop/admin@psy.com from keytab /hadoop-data/etc/hadoop/hadoop.keytab”详细的异常信息最后给出，这里给出解决办法。 也可参考链接： http://www.cloudera.com/content/cloudera/en/documentation/archives/cdh3/v3u6/CDH3-Security-Guide/cdh3sg_topic_3_5.html 来源： oschina 链接： https://my.oschina.net/u/781254/blog/336846

0007-如何迁移Cloudera Manager节点

由 我与影子孤独终老i 提交于 2019-12-11 11:14:58
【推荐】2019 Java 开发者跳槽指南.pdf(吐血整理) >>> 1.概述 本文档讲述如何将Cloudera Manager在Kerberos环境下迁移至新的CM节点。通过本文档，您将学习到以下知识： 1.如何迁移Cloudera Manager节点 2.如何迁移MySQL元数据库 3.如何迁移Kerberos MIT KDC 文档主要分为以下几步： 1.准备Cloudera Manager新节点 2.MariaDB数据库迁移（可选） 3.迁移Kerberos MIT KDC（可选） 4.将原CM节点数据迁移至新节点 5.迁移后集群服务验证 这篇文档将着重介绍Cloudera Manager节点迁移，并基于以下假设： 1.CDH环境已搭建并正常运行 2.旧Cloudera Manager节点包含Cloudera Manager Server(即cloudera-scm-server)服务和Cloudera Management Service服务（Alert Publisher/Event Server/Host Monitor/Reports Manager/Service Monitor） 3.集群已完成MIT Kerberos的配置，并正常使用 4.集群Hadoop服务HBase/Hive/HDFS/Hue/Kafka/Oozie/Spark/Spark2/Yarn

Windows C# Is there a way to create a new process with the Kerberos ticket of parent process?

由 元气小坏坏 提交于 2019-12-11 08:47:10
问题 I'm able to create a new process via CreateProcessAsUser from code I found here: https://odetocode.com/blogs/scott/archive/2004/10/28/createprocessasuser.aspx It works fine, but the new process does not contain the Kerberos ticket of the new user which was impersonated by IIS Asp.net Impersonation. I know IIS has the Kerberos ticket, I just don't know programmatic how to get it from from the parent worker process to the new process I spawn which invokes OpenSSH. Edit: Updated Impersonation

Establish a connection using Kerberos Authentication

由 旧巷老猫 提交于 2019-12-11 08:39:11
问题 I'm trying to establish a connection using kerberos authentication. I think the question I have does not depend on the type of server (in my case it's a cognos tm1 server) nor the language (in my case R with use of the package httr (or RCurl)) since it's more a general http(s) thing. I do not have much experience using kerberos. According to my understanding there is some negotiation between the client and server following the following steps (here get-requests). The only thin I need to pass

Java - JNDI / Active Directory / Kerberos / WebLogic Server - Password Configuration

由 天大地大妈咪最大 提交于 2019-12-11 08:37:29
问题 I want to fetch data from an Active Directory using Java and JNDI from my EJB. Doing this search I need to define a user and a password. I was thinking of creating a service account (for my server) in the AD. I will also be using Kerberos protocol and WebLogic Server. As I understand it now, I need to create a keytab file that will contain this service account's credentials. This keytab file will then be configured in the WebLogic Server? So, this means that I will have to state the username

C# MVC delegation failing in Chrome and MobileIron browswer, but not in IE

由 北慕城南 提交于 2019-12-11 08:29:27
问题 I have a web app that is attempting to use delegation for retrieving files and making requests to other servers. I have Kerberos all set up and running fine (I think), but the delegation is only working in IE. The code System.Security.Principal.WindowsImpersonationContext impersonationContext; impersonationContext = ((System.Security.Principal.WindowsIdentity)User.Identity).Impersonate(); // Do some stuff here impersonationContext.Undo(); I then have some logging in the impersonated section
订阅 kerberos