Help Center/ MapReduce Service/ User Guide/ Managing Clusters/ Managing MRS Cluster Users/ Managing MRS Cluster Users/ Downloading MRS Cluster User Credentials
Updated on 2024-09-23 GMT+08:00
View PDF
Share

Downloading MRS Cluster User Credentials

If you develop big data applications and run them in an MRS cluster that requires Kerberos authentication, you need to prepare a user authentication file for accessing the MRS cluster. The keytab file in the authentication files is used for user authentication.

This topic describes how to download user authentication files and export the keytab file on MRS Manager.

After a user password is changed, the exported keytab file becomes invalid, and you need to export a keytab file again.

Prerequisites

Before downloading the keytab file of a Human-Machine user, the password of the user must be changed at least once on the Manager portal or a client; otherwise, the downloaded keytab file cannot be used For details, see Changing the Passwords for Manager Users of an MRS Cluster.

Downloading the Authentication Credential

  1. Log in to Manager.

    For MRS 3.x and later versions, choose System > Permission > User.

    For versions earlier than MRS 3.x, choose System > Permission > Manage User.

  2. Locate the row that contains the user whose keytab file needs to be exported, choose More > Download Authentication Credential, specify the save path after the file is automatically generated, and keep the file properly.

    The authentication credential includes the krb5.conf file of the Kerberos service.

    After the authentication credential file is decompressed, you can obtain the following two files:

    • The krb5.conf file contains the authentication service connection information.
    • The user.keytab file contains user authentication information.