Configuring the Server for Kerberos

To configure the server for Kerberos authentication, modify the csi.xml and csi_kerberos.xml files.

Kerberos support in Event Stream Processor is limited as it does not support Kerberos ticket-based authentication. To authenticate Kerberos, provide your user name and password. The security configuration information is maintained in an XML-based configuration file that is accessible by all cluster managers.

  1. Use a text editor to open the $ESP_HOME/cluster/<node-name>/<node-name>.xml file. The file should contain the following lines:
    <Property name="java.security.krb5.realm">REALM_PLACEHOLDER</Property>
            <Property name="java.security.krb5.kdc">KDC_PLACEHOLDER</Property>
  2. Add the following to the$ESP_HOME/cluster/<node-name>/<node-name>.xmlfile:
    <Csi>
            <File> csi_kerberos.xml</File>
    </Csi>
  3. Restart the server. All of the cluster managers must be restarted.