Configuration for a HBase cluster that uses Kerberos
For a HBase cluster that uses Kerberos, perform the following tasks on all the backup hosts:
Ensure that the Kerberos package (krb5-workstation package) is present on all the backup hosts.
Acquire the
keytabfile and copy it to a secure location on the backup host.Ensure that the
keytabhas the required principal.Manually update the
krb5.conffile with the appropriate KDC server and realm details.Note:
Enure that default_cache_name parameter is not set to the KEYRING:persistent:%{uid} value. You can comment the parameter to use the default or you can specify a file name such as, FILE:/tmp/krb_file_name:%{uid}.
When you add HBase credentials in NetBackup, specify "kerberos" as application_server_user_id value. See Adding HBase credentials in NetBackup.
To run backup and restore operations for a HBase cluster that uses Kerberos authentication, HBase needs a valid Kerberos ticket-granting ticket (TGT) to authenticate with the HBase cluster. See Pre-requisite for running backup and restore operations for a HBase cluster with Kerberos authentication.