How to make Windows aware of the Kerberos Key Distribution Center (KDC)

Windows must be aware of the Kerberos Key Distribution Center (KDC). If the KDC (aka Kerberos ticketing server) is not the Active Directory server used by the Windows workstation where Amp is installed, users must run Ksetup to inform Windows of how to obtain a ticket for connecting to a Kerberized cluster.

This can be accomplished by opening the command line (Start >> cmd) and running the following commands ...

> ksetup /AddKdc <realm> <the host name or IP of Kerberos KDC>
> ksetup /AddHostToRealmMap <host name of HiveServer2> <realm>
> ksetup /setrealmflags <realm> ncsupported delegate TcpSupported RC4

After running these commands, be sure to reboot Windows in order for the setup to take effect.

*If Metastore is on a different host, repeat /AddHostToRealmMap for that host.


Relevant Platform(s)

Workbench for Hadoop

Have more questions? Submit a request


Please sign in to leave a comment.

** Aginity, Inc.’s Provision of Scripts and Similar Materials at Help Desk Center. For the convenience of Aginity Amp™ clients, we provide code snippets, scripts and similar materials at this Help Desk Center. Such materials are reference materials provided for illustration purposes only. These are intended to serve as an example for self-service clients and are generally geared to respond to common questions asked by similar clients. Such materials constitute Aginity’s intellectual property. Aginity Amp clients and their authorized users are permitted to use these materials in connection with their software license and/or subscription of Aginity Amp. Nothing herein shall limit Aginity’s right to use, develop, enhance, modify or market any of these materials as part of its business. These materials are not formally supported by Aginity or its affiliates. Usage of these materials does not guarantee any specific results, uptime, performance or error-free operation. Aginity disclaims all warranties of any kind, whether express, implied, statutory or otherwise, including any implied warranty of merchantability or fitness for a particular purpose.