Configure Kerberos

If Kerberos is enabled on your Hadoop cluster, you must configure LiveData Migrator's Kerberos settings to enable the service to authenticate with your Hadoop cluster.

For data migrations, you will need a valid keytab containing a suitable principal for the HDFS superuser on the HDFS edge node.

If you want to migrate Hive metadata from your Hadoop cluster, the edge node must also have a keytab containing a suitable principal for the Hive service.

Configure Kerberos for data migrations#

  1. In the Azure Portal, navigate to the LiveData Migrator resource page.
  2. Access the Overview page.
  3. Select Kerberos Settings.
  4. Under LiveData Migrator Kerberos, select Enabled.
  5. Supply the following information:
    • Principal: Provide a principal that will map to the HDFS superuser using auth_to_local rules.
    • Keytab Path: Provide the path to the Kerberos keytab containing the Kerberos Principal. This must be accessible to the local system user running the LiveData Migrator service (default is hdfs).
  6. Click Submit to confirm your changes.
  7. Click Refresh and verify the Install State is now InstalledAndOperational.

Configure Kerberos for metadata migrations#

note

You must configure Kerberos for general LiveData Migrator use before configuring Kerberos for metadata.

  1. In the Azure Portal, navigate to the LiveData Migrator resource page.
  2. Access the Overview page.
  3. Select Kerberos Settings.
  4. Under Hive Migrator Kerberos, select Enabled.
  5. Supply the following information:
    • Principal: Provide a principal that will map to the HDFS superuser using auth_to_local rules.
    • Keytab Path: Provide the path to the Kerberos keytab containing the Kerberos Principal. This must be accessible to the local system user running the LiveData Migrator service (default is hdfs).
  6. Click Submit to confirm your changes.
  7. Click Refresh and verify the Install State is now InstalledAndOperational.

Next steps#

Once you've configured Kerberos, you're ready to create a target for your data migrations and/or create a metadata target for metadata migrations.