5120dd7060
this change reimplements oozie client to support running of edp jobs on top of the kerberized clusters. additionally, we will setup keytabs and principals in order to have ability to process authentication in clients. these principals will be refreshed by additional cron jobs once per hour. implements bp: initial-kerberos-integration Change-Id: I55b4267c09c43fdef75a443410f4ae11f56127e1
13 lines
256 B
Bash
13 lines
256 B
Bash
#!/bin/bash
|
|
|
|
mkdir -p /tmp/sahara-kerberos/
|
|
|
|
kadmin -p %(admin_principal)s <<EOF
|
|
%(admin_password)s
|
|
addprinc -randkey %(principal)s
|
|
xst -k /tmp/sahara-kerberos/%(keytab)s %(principal)s
|
|
exit
|
|
EOF
|
|
|
|
sudo chown %(user)s:%(user)s /tmp/sahara-kerberos/%(keytab)s
|