Installing and configuring MIT Kerberos for Windows
Downloading and installing MIT Kerberos for Windows 4.0.1
About this task
Procedure
-
Download the appropriate Kerberos installer:
- For a 64-bit machine, use the following download link from the MIT Kerberos website:http://web.mit.edu/kerberos/dist/kfw/4.0/kfw-4.0.1-amd64.msi.
- For a 32-bit machine, use the following download link from the MIT Kerberos website:http://web.mit.edu/kerberos/dist/kfw/4.0/kfw-4.0.1-i386.msi.
- To run the installer, double-click the .msi file that you downloaded above.
- Follow the instructions in the installer to complete the installation process.
- When the installation completes, click Finish.
Setting up the Kerberos configuration file
Settings for Kerberos are specified through a configuration file. You can set up the configuration file as an .ini file in the default location, which is the C:\ProgramData\MIT\Kerberos5 directory. Normally, the C:\ProgramData\MIT\Kerberos5 directory is hidden. For information about viewing and using this hidden directory, refer to Microsoft Windows documentation. Note: For more information on configuring Kerberos, refer to the MIT Kerberos documentation.
About this task
Procedure
- Obtain a krb5.conf configuration file. You can obtain this file from your Kerberos administrator, or from the /etc/krb5.conf folder on the machine that is hosting the Impala server.
- Rename the configuration file from krb5.conf to krb5.ini.
- Copy the krb5.ini file to the C:\ProgramData\MIT\Kerberos5 directory and overwrite the empty sample file.
Setting up the Kerberos credential cache file
Kerberos uses a credential cache to store and manage credentials. To set up the Kerberos credential cache file:
Procedure
- Create a directory where you want to save the Kerberos credential cache file. For example, create a directory named C:\temp.
-
Open the System window:
- If you are using Windows 7 or earlier, click Start (Windows icon), then right-click Computer, and then click Properties.
- Or, if you are using Windows 8 or later, right-click This PC on the Start screen, and then click Properties.
- Click Advanced System Settings.
- In the System Properties dialog box, click the Advanced tab and then click Environment Variables.
- In the Environment Variables dialog box, under the System Variables list, click New.
- In the New System Variable dialog box, in the Variable Name field, type KRB5CCNAME.
- In the Variable Value field, type the path to the folder you created above, and then append the file name krb5cache. For example, if you created the folder C:\temp, then type C:\temp\krb5cache.Note: krb5cache is a file (not a directory) that is managed by the Kerberos software, and it should not be created by the user. If you receive a permission error when you first use Kerberos, make sure that the krb5cache file does not already exist as a file or a directory.
- Click OK to save the new variable.
- Make sure that the variable appears in the System Variables list.
- Click OK to close the Environment Variables dialog box, and then click OK to close the System Properties dialog box.
- To make sure that Kerberos uses the new settings, restart your machine.