Cloudera Docs

Enabling Kerberos authentication

You need to enable Kerberos authentication in Cloudera Manager as well as directly for your browser to securely reach the Streaming SQL Console.

When Kerberos authentication is set up for SSB, and a not authorized user wants to reach the Streaming SQL Console, the following error message appears:

Enabling Kerberos for authentication

  1. Go to your cluster in Cloudera Manager.
  2. Click on SQL Stream Builder from the list of Services.
  3. Click the Configuration tab.
  4. Select Category > Security.
  5. Type kerberos to the search field.
  6. Select the Enable Kerberos authentication setting.
  7. Open a terminal window.
  8. Copy and paste the following command:
    defaults write com.google.Chrome AuthServerAllowlist
              "<host_domain>"
sudo scp <your_hostname>:/etc/krb5.conf /etc/krb5.conf
kinit <username>

Enabling keytabs

  1. Go to your cluster in Cloudera Manager.
  2. Click on SQL Stream Builder from the list of Services.
  3. Click on SQLStreamBuilder Console.

    The Streaming SQL Console opens up in a new window

  4. Click on your username.
  5. Click on Profile.
  6. Click Unlock keytab.