Specify Kerberos security

Perform the following steps to specify the credentials for the Kerberos security.

Note: You can define different principal users for each of the named connections only if all the clusters for these connections are in the same Kerberos realm. See MIT Kerberos Documentation for more information about Kerberos realms.

1. Select Kerberos as the security type.

2. Click Next.

3. Choose one of the following security methods and specify the Kerberos credentials you obtained from the cluster administrator:

   • Password: Specify the Authentication username and Password options. Additionally, if you are connected to the Pentaho Repository and are using secure impersonation, specify the Impersonation username and Password. See Try Pentaho Data Integration and Analytics if the environment requires advanced settings, the server is on Windows, or when you are using a Cloudera Impala database for secure impersonation.

     
   • Keytab: Specify the Authentication username and Authentication Keytab options. Click Browse to navigate to your keytab file. Additionally, if you are connected to the Pentaho Repository and are using secure impersonation, specify the Impersonation username and Impersonation Keytab. See Try Pentaho Data Integration and Analytics if the environment requires advanced settings, the server is on Windows, or when you are using a Cloudera Impala database for secure impersonation.

     
4. Click Next to test the connection. See Test a cluster connection for more information.

   The Test results dialog box appears.

   

   For each tested connection, the dialog box displays one of the following icons to indicate the results:

   • A green checkmark indicates the connection to the cluster service was successful.

   • A yellow caution symbol indicates the cluster service information was not supplied, so the test for that component was skipped.

   • A red circle-backslash indicates the connection failed. Check the connection information and then test the connection again. If you suspect a different issue, see the troubleshooting section in the Install Pentaho Data Integration and Analytics document or consult the cluster administrator.Note: You can click the drop-down arrow in the Hadoop file system test for more details.

5. Click Finish.

If no errors occur during the connection, PDI is successfully connected.

If you have errors, see the troubleshooting section in the Administer Pentaho Data Integration and Analytics document to resolve the issues or consult the cluster administrator, then run the test again. When no error messages are returned, the connection is properly configured.