Help Center > > User Guide> FusionInsight Manager Operation Guide> System Configuration> Configuring Permission> Managing Users> Exporting an Authentication Credential File

Exporting an Authentication Credential File

Updated at: Mar 25, 2021 GMT+08:00

Scenarios

If a user uses a security mode cluster to develop applications, the keytab file of the user needs to be obtained for security authentication. You can export keytab files on FusionInsight Manager.

After a user password is changed, the exported keytab file becomes invalid, and you need to export a keytab file again.

Prerequisites

Before downloading the keytab file of a Human-Machine user, the password of the user must be changed at least once on the Manager portal or a client. Otherwise, the downloaded keytab file cannot be used. For details, see Changing a User Password.

Procedure

  1. Log in to FusionInsight Manager.
  2. Choose System > Permission > User.
  3. Locate the row that contains the user whose keytab file needs to be exported, choose More > Download Authentication Credential, specify the save path after the file is automatically generated, and keep the file properly.

    The authentication credential includes the krb5.conf file of the Kerberos service. If there are multiple clusters, select the krb5.conf file of the specific cluster.

    After the authentication credential file is decompressed, you can obtain the following two files:

    • The krb5.conf file contains the authentication service connection information.
    • The user.keytab file contains user authentication information.

Did you find this page helpful?

Submit successfully!

Thank you for your feedback. Your feedback helps make our documentation better.

Failed to submit the feedback. Please try again later.

Which of the following issues have you encountered?







Please complete at least one feedback item.

Content most length 200 character

Content is empty.

OK Cancel