As one of the prerequisites
for installing SAS Data Loader for Hadoop, your Hadoop administrator
was asked to provide you with the information that you need to configure
Kerberos security. The administrator was also asked to deliver certain
files to you or install those files on your client host.
In the Setup window
for SAS Data Loader: Information Center, follow these steps to configure
Kerberos security on your client host:
-
Click
Run
SAS Data Loader in secure mode.
CAUTION:
Do not
click “Run Data Loader in secure mode” and click “OK”
unless you are certain that you will configure a Hadoop cluster that
uses Kerberos authentication.
After you click Run
Data Loader in secure mode and click OK,
you cannot reconfigure your vApp to connect to an unsecured Hadoop
cluster. If you need to configure an unsecured Hadoop cluster at that
point, you are required for reasons of security to download a new
vApp.
-
In the
Hostname field,
enter the name of your client host as it was defined by your Hadoop
administrator. This host name is different from your normal network
host name.
-
In the
User
ID for host login field, enter your normal login ID.
-
In the
Realm
for user ID field, enter the Kerberos realm for your
host name, as provided by your administrator. The Kerberos realm is
similar to a Windows domain.
-
In the
krb5
configuration field, enter the location of your Kerberos
configuration file.
-
In the
Host
keytab field, enter the location of the host keytab file.
The three keytab files authenticate the host, SAS, and the vApp HTTP
server to one another and to the Active Directory authentication provider.
-
In the
SAS
server keytab field, enter the location of the SAS server
keytab file.
-
In the
HTTP
keytab field, enter the location of the keytab file of
the HTTP server in the vApp for SAS Data Loader.
-
In the
Local
JCE security policy jar field, enter the location of
this Java archive file. This Java Cryptology Extension defines the
implementation of encryption at your site.
-
In the
US
JCE security policy jar field, enter the location of
the United States JCE JAR file.
-
Click
OK.
SAS Data Loader: Information Center proceeds to update configuration
files for a minute or two.
-
SAS Data Loader: Information
Center displays a message telling you to copy configuration files
from the Hadoop cluster to the shared folder. Click
Close,
and continue to the next topic for instructions.