Set up a secured cluster

If you are connecting to a HDP cluster that is secured with Kerberos, you must also perform the following tasks.

1. Configure Kerberos security on the cluster, including the Kerberos Realm, Kerberos KDC, and Kerberos Administrative Server.

2. Configure the name, data, secondary name, job tracker, and task tracker nodes to accept remote connection requests.

3. If you are have deployed Hadoop using an enterprise-level program, set up Kerberos for name, data, secondary name, job tracker, and task tracker nodes.

4. Add the user account credential for each PDI client user who should have access to the Hadoop cluster to the Kerberos database.

5. Verify that an operating system user account on each node in the Hadoop cluster exists for each user who you want to add to the Kerberos database.

   Add operating system user accounts if necessary.

   Note: The user account UIDs must be greater than the minimum user ID value (min.user.id). Usually, the minimum user ID value is set to 1000.

6. Set up Kerberos on your Pentaho machines.See the Administer Pentaho Data Integration and Analytics document for instructions.