Configuring an Active Directory Domain in a Kerberos-Enabled Cluster

You can configure an existing Active Directory as a Key Distribution Center (KDC) for a secure ODH cluster.

Complete the following:

1. Configuring Kerberos Authentication for Active Directory
   1. Prerequisites
   2. Strategies to Configure Active Directory
      1. Configure Kerberos Authentication Using Active Directory KDC Only (Recommended)
         1. Disabling KDC
         2. Enabling Kerberos Using Existing Active Directory
      2. Configuring Kerberos Authentication Using Local KDC and Active Directory KDC
         1. Updating Ambari to Use Active Directory KDC
         2. Setting Up Cross Realm Trust Between Domains
   3. Validating Active Directory Integration
2. Configuring Hadoop Group Mappings for LDAP/Active Directory
3. Configuring Ambari Authentication with LDAP/Active Directory
4. Configuring Apache Ranger Authentication with LDAP/Active Directory
5. Configuring Hue Authentication with LDAP/Active Directory