Validating Active Directory Integration

  1. Sign in to a node in your Big Data Service cluster.
  2. Create a token:
    kinit <myuser@ad.domain.com>
  3. Enter the principle password (the Active Directory password of the user), and then click Enter.
  4. Verify that the token was created:
    klist

    Example output:

    Ticket cache: FILE:/tmp/krb5cc_1000
    Default principal: <myuser@ad.domain.com>
    Valid starting       Expires              Service principal
    09/01/2021 20:44:07  09/02/2021 06:44:07  krbtgt/<ad-realm>@<ad-realm>
    renew until 09/08/2021 20:44:04