abajwa-hw / security-workshops Goto Github PK

when i try to login to the Virtual box, HDP2.3 integrated with Secured IPA client, the system boots up and is asking for the updated IP address, when it boots up i am not sure of the IP address and the random ip addr that i am giving is not getting picked up.
Please can you help.

Hello and thank you for this good tutorial, however I am blocked, because I can not display the page "http://sandbox.hortonworks.com/ldapadmin/" I configured everything well, I think it is Port problem because port 80 is not open on the Hortonworks VM. Do you have any idea how I can do it?

Assuming we have 2 separate clusters secured against the same Active directory with separate Kerberos realms - what is the right way to configure cross-cluster communication?

A user is getting the following error when the script attempts to write passwords to 'passwd.txt'.

Waiting on more details from them, but I suspect Ambari is not running as root or they have SELinux in place.

@abajwa-hw - Why 256? Is that the updated recommendation.

Today Olivier mentioned that 128 was what he heard last as best practice

https://github.com/abajwa-hw/security-workshops/blame/master/Setup-TDE-23.md#L73

The following line in the workshop lead us to change all uppercase components like HDFS & HTTP to lowercase which left kerberos broken on restart. Leaving the file alone worked fine.

Paste contents to a file on both IPA host and on the HDP node, making sure to remove empty lines at the end. If you have any principal names that have upper case chars in them, lower case them (e.g. change ambari-qa-Sandbox to ambari-qa-sandbox and change hdfs-Sandbox to hdfs-sandbox)