Versions Compared

Old Version 1

changes.mady.by.user Diane Miller

Saved on

compared with

New Version 2

changes.mady.by.user Diane Miller

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

  1. Before doing the following setups, make sure the Droundplex Groundplex is working fine.

  2. Install Kerberos packages on groundplex Groundplex nodes.

    Code Block
    $ sudo yum install krb5-workstation krb5-libs krb5-auth-dialog


  3. Copy the file /etc/krb5.conf from one of the target cluster nodes to /etc/krb5.conf on each Groundplex node. 

  4. Install the JCE extension on each Groundplex node.
    1. Download the JCE extension zip file: http://www.oracle.com/technetwork/java/javase/downloads/jce8-download-2133166.html

    2. Copy the JCE extension zip file onto each Groundplex node and install the JCE extension with the following command. Restart the node after the installation.

      Code Block
      $ unzip -o -j -q jce_policy-8.zip -d /opt/snaplogic/pkgs/jre1.8.0_45/lib/security/


    3. To check if the JCE extension was correctly installed, run the command below and you should see the same output shown as below:

      Code Block
      $ zipgrep CryptoAllPermission /opt/snaplogic/pkgs/jre1.8.0_45/lib/security/local_policy.jar default_local.policy: permission javax.crypto.CryptoAllPermission;


  5. Generate the keytab file for the Kerberos user, put it on each Groundplex node, and give snapuser access to the keytab file.

    Code Block
    $ sudo cp /path/to/keytab/file /home/snapuser/<keytab_file_name>
$ sudo chown snapuser:snapuser /home/snapuser/<keytab_file_name>
$ sudo chmod 400 /home/snapuser/<keytab_file_name>


...