Big Data Management Administrator Guide

Back Next

Configure the Microsoft Active Directory Server

Add the MIT KDC host name and local realm trust to the Active Directory server.

To configure the Active Directory server, complete the following steps:

Enter the following command to add the MIT KDC host name:

ksetup /addkdc <mit_realm_name> <kdc_hostname>

For example, enter the command to add the following values:

ksetup /addkdc HADOOP-MIT-REALM def456.hadoop-mit-realm.com

Enter the following command to add the local realm trust to Active Directory:

netdom trust <mit_realm_name> /Domain:<ad_realm_name> /add /realm /passwordt:<TrustPassword>

For example, enter the command to add the following values:

netdom trust HADOOP-MIT-REALM /Domain:INFA-AD-REALM /add /realm /passwordt:trust1234

Enter the following commands based on your Microsoft Windows environment to set the proper encryption type:

For Microsoft Windows 2008, enter the following command:

ksetup /SetEncTypeAttr <mit_realm_name> <enc_type>

For Microsoft Windows 2003, enter the following command:

ktpass /MITRealmName <mit_realm_name> /TrustEncryp <enc_type>

The enc_type parameter specifies AES, DES, or RC4 encryption. To find the value for enc_type, see the documentation for your version of Windows Active Directory. The encryption type you specify must be supported on both versions of Windows that use Active Directory and the MIT server.

Rename Saved Search

Table of Contents

Big Data Management Administrator Guide

Big Data Management Administrator Guide

Configure the Microsoft Active Directory Server

Configure the Microsoft Active Directory Server