Step 6: Deploying the Cloudera Manager Server Keytab
After obtaining or creating the Cloudera Manager Server principal and keytab, follow these instructions to deploy them.
To deploy the Cloudera Manager Server Principal and Keytab:
- Move the cmf.keytab file to the /etc/cloudera-scm-server/ directory on the host machine where you are running the Cloudera Manager Server.
$ mv cmf.keytab /etc/cloudera-scm-server/
- Make sure that the cmf.keytab file is only readable by the Cloudera Manager Server user account cloudera-scm.
$ sudo chown cloudera-scm:cloudera-scm /etc/cloudera-scm-server/cmf.keytab $ sudo chmod 600 /etc/cloudera-scm-server/cmf.keytab
- Add the Cloudera Manager Server principal (cloudera-scm/admin@YOUR-LOCAL-REALM.COM) to a text file named cmf.principal and store the cmf.principal file in the /etc/cloudera-scm-server/ directory on the host machine where you are running the Cloudera Manager Server.
- Make sure that the cmf.principal file is only readable by the Cloudera Manager Server user account cloudera-scm.
$ sudo chown cloudera-scm:cloudera-scm /etc/cloudera-scm-server/cmf.principal $ sudo chmod 600 /etc/cloudera-scm-server/cmf.principal

The Cloudera Manager server assumes that the kadmin command is located in a directory either on the path or in the /usr/kerberos/sbin directory. If this is not the case, you must create a symbolic link to kadmin from a location accessible on the path.
<< Previous: Step 5: Get or Create a Kerberos Principal and Keytab File for the Cloudera Manager Server | Next: Step 7: Configure the Kerberos Default Realm in the Cloudera Manager Admin Console >> |