...
- Before doing the following setups, make sure the Droundplex Groundplex is working fine.
Install Kerberos packages on groundplex Groundplex nodes.
Code Block $ sudo yum install krb5-workstation krb5-libs krb5-auth-dialog
Copy the file /etc/krb5.conf from one of the target cluster nodes to /etc/krb5.conf on each Groundplex node.
- Install the JCE extension on each Groundplex node.
- Download the JCE extension zip file: http://www.oracle.com/technetwork/java/javase/downloads/jce8-download-2133166.html
Copy the JCE extension zip file onto each Groundplex node and install the JCE extension with the following command. Restart the node after the installation.
Code Block $ unzip -o -j -q jce_policy-8.zip -d /opt/snaplogic/pkgs/jre1.8.0_45/lib/security/
To check if the JCE extension was correctly installed, run the command below and you should see the same output shown as below:
Code Block $ zipgrep CryptoAllPermission /opt/snaplogic/pkgs/jre1.8.0_45/lib/security/local_policy.jar default_local.policy: permission javax.crypto.CryptoAllPermission;
Generate the keytab file for the Kerberos user, put it on each Groundplex node, and give snapuser access to the keytab file.
Code Block $ sudo cp /path/to/keytab/file /home/snapuser/<keytab_file_name> $ sudo chown snapuser:snapuser /home/snapuser/<keytab_file_name> $ sudo chmod 400 /home/snapuser/<keytab_file_name>
...