Kerberos authentication in Hadoop - Interactive Code Practice

Practice - 5 Tasks

1fill in blank

easy

Complete the code to initialize Kerberos authentication in Hadoop configuration.

Hadoop

conf.set("hadoop.security.authentication", "[1]")

Drag options to blanks, or click blank then click option'

Akerberos

Bsimple

Cnone

Dtoken

Attempts:

3 left

💡 Hint

Common Mistakes

Using 'simple' instead of 'kerberos' disables Kerberos authentication.

Leaving the value empty causes authentication failure.

Setting hadoop.security.authentication to kerberos enables Kerberos authentication in Hadoop.

2fill in blank

medium

Complete the code to login a user from a keytab file using Hadoop's UserGroupInformation.

Hadoop

UserGroupInformation.[1](principal, keytabFilePath)

Drag options to blanks, or click blank then click option'

AsetConfiguration

BloginUserFromTicketCache

CloginUserFromKeytab

DgetCurrentUser

Attempts:

3 left

💡 Hint

Common Mistakes

Using 'loginUserFromTicketCache' instead of keytab login method.

Calling 'setConfiguration' instead of login method.

The method loginUserFromKeytab logs in a user using a principal and keytab file for Kerberos authentication.

3fill in blank

hard

Fix the error in the code to set the Kerberos realm in the configuration.

Hadoop

conf.set("[1]", "EXAMPLE.COM")

Drag options to blanks, or click blank then click option'

Ahadoop.security.auth_to_local

Bhadoop.security.krb5.realm

Chadoop.security.krb5.kdc

Dhadoop.security.authentication

Attempts:

3 left

💡 Hint

Common Mistakes

Setting 'hadoop.security.authentication' instead of the realm.

Confusing KDC and realm properties.

The correct property to set the Kerberos realm is hadoop.security.krb5.realm.

4fill in blank

hard

Fill both blanks to create a map of user principals to local usernames using the auth_to_local rules.

Hadoop

conf.set("[1]", "RULE:[1:$1@$0](.*@EXAMPLE.COM)s/@EXAMPLE.COM//")
conf.set("[2]", "kerberos")

Drag options to blanks, or click blank then click option'

Ahadoop.security.auth_to_local

Bhadoop.security.authentication

Chadoop.security.krb5.realm

Dhadoop.security.krb5.kdc

Attempts:

3 left

💡 Hint

Common Mistakes

Mixing up realm and auth_to_local properties.

Not setting authentication to kerberos.

The hadoop.security.auth_to_local property defines rules to map Kerberos principals to local usernames. The hadoop.security.authentication property must be set to kerberos to enable Kerberos authentication.

5fill in blank

hard

Fill all three blanks to configure Kerberos KDC, realm, and enable authentication in Hadoop configuration.

Hadoop

conf.set("[1]", "kdc.example.com")
conf.set("[2]", "EXAMPLE.COM")
conf.set("[3]", "kerberos")

Drag options to blanks, or click blank then click option'

Ahadoop.security.authentication

Bhadoop.security.krb5.kdc

Chadoop.security.krb5.realm

Dhadoop.security.auth_to_local

Attempts:

3 left

💡 Hint

Common Mistakes

Swapping KDC and realm properties.

Forgetting to enable authentication with 'kerberos'.

Set hadoop.security.krb5.kdc to the KDC server, hadoop.security.krb5.realm to the Kerberos realm, and hadoop.security.authentication to kerberos to enable Kerberos authentication.