Tag Archives: redhat

Setting up apache httpd and subversion on a redhat host to integrate with Windows AD Domain authentication

The following setup worked for me:

1 using kerberos for the auth module: mod_auth_kerb.so.

I tried to use mod_ntlm but it proved too hard to get it to work on Apache 2.2 on redhat.

I have the following in /etc/krb5.conf:

clockskew = 300
default_realm = AAA.BBB.XXX.COM

kdc = pdc01.aaa.bbb.xxx.com
default_domain = AAA.BBB.XXX.COM
kpasswd_server = pdc01.aaa.bbb.xxx.com

server01.www.yyy.xxx.com = AAA.BBB.XXX.COM
.yyy.xxx.com = AAA.BBB.XXX.COM
.xxx.com = AAA.BBB.XXX.COM
xxx.com = AAA.BBB.XXX.COM

With that I am to run kinit and get kerberos ticket from the redhat host.

And my /etc/httpd/conf/httpd.conf has:

DAV svn
SVNPath "/path/to/svn_repo"

AuthType Kerberos
AuthName Kerberos
KrbMethodNegotiate Off
KrbMethodK5Passwd On
KrbServiceName Any
KrbSaveCredentials on
KrbLocalUserMapping on
# The last bit I had to fix to get this working:
KrbVerifyKDC Off

AuthzSVNAccessFile /path/to/svn_access_file
require valid-user

Using this setup I can get users to authenticate against the corporate active directory domain controller to access Subversion.

My apache httpd version: 2.2.15
My subversion svn version: 1.6.11


installing and running beeline client

I work with a Hortonworks HDP 2.5 distro of Big Data hadoop/hiveserver2. I have been wondering for sometime now what it would take to run beeline client on another machine to connect to Hive or Knox.

After some work, I managed to get beeline client running with a minimal set of jar files on another machine outside of the cluster. The crucial bit was identifying the set of jar files involved using the jvm option: -verbose:class

After collecting the necessary jar files, beeline can be started using a java commandline.

java -Xmx1024m -classpath apache-log4j-extras-1.2.17.jar:avatica- -Dhdp.version= -Djava.net.preferIPv4Stack=true -Dhdp.version=  -Dhadoop.log.dir=/home/userid -Dhadoop.log.file=hadoop.log -Dhadoop.home.dir=/home/userid -Dhadoop.id.str=userid -Dhadoop.root.logger=INFO,console -Djava.library.path=:/home/userid -Dhadoop.policy.file=hadoop-policy.xml  -Djava.net.preferIPv4Stack=true -Djava.util.logging.config.file=/home/userid/parquet-logging.properties -Dlog4j.configuration=beeline-log4j.properties -Dhadoop.security.logger=INFO,NullAppender org.apache.hadoop.util.RunJar /home/userid/hive-beeline-1.2.1000. org.apache.hive.beeline.BeeLine -n userid -p pass -u "jdbc:hive2://knox.company.com:8000/;ssl=true;transportMode=http;httpPath=gateway/tdcprd/hive"

There was no need to install beeline or any hadoop app.

Java 8 JRE is required.