This post is part of series of post which explains how to enable Kerberos on Hadoop Cluster.
To use AES 256 encryption in Kerberos you must install the Java Cryptography Extension (JCE) Unlimited Strength Jurisdiction Policy File in each of the host of your cluster.
Process is straight forward
Download the JCE from Oracle website ( Follow the Link and JCE is at bottom of the page )
http://www.oracle.com/technetwork/java/javase/downloads/index.html
Extract the Zip
Copy the files
local_policy.jar
US_export_policy.jar
In all machines at following location
JAVA_HOME/jre/lib/security
Take appropriate path as per your configuration above
Verify aes256-cts:normal is present in supported_enctypes field of the kdc.conf or krb5.conf file.
After changing the kdc.conf file, you'll need to restart both the KDC and the kadmin server for those changes to take
No comments:
Post a Comment
Please share your views and comments below.
Thank You.