Operational Insights

Back Next

Connecting to a cluster secured using Kerberos authentication

If the Data Engineering Integration collector collects analytics from a cluster secured using Kerberos authentication, you must add custom Kerberos properties to the configuration for the Secure Agent the Data Engineering Integration domain uses.

To find the Secure Agent the collector uses,

Select the domain, and then click the

Details

tab.

Locate the name of the Secure Agent the domain uses in the Secure Agent Group property.

Click

Secure Agents

in the left hand navigation bar.

Select the Secure Agent, then click

Manage

The Details page for the Secure Agent opens in the Administrator application.

Click

Edit

Click the

symbol next to a property in the Custom Configuration section of the page to add a new custom property.

For each property, select

OpsInsights Data Collector

from the Service menu, and then select

OpsInsights

from the Type menu.

Enter the following custom properties. The table below describes the properties to add:

Name	Value
kerberosPrincipal	The Service Principal Name (SPN) assigned in Active Directory to the user that runs Data Integration Service jobs on the cluster.
kerberosKeyTabFile	The path and file name of the keytab file on the node where the Secure Agent runs. On both Linux and Windows hosts, specify the value as follows: /<Secure Agent installation directory>/<file name>.keytab
kerberosConfFile	The path to the krb5.conf file on the node where the Secure Agent runs. On both Linux and Windows hosts, specify the value as follows: /<Secure Agent installation directory>/krb5.conf