domino logo
Get started with Python
Step 0: Orient yourself to DominoStep 1: Create a projectStep 2: Configure your projectStep 3: Start a workspaceStep 4: Get your files and dataStep 5: Develop your modelStep 6: Clean up WorkspacesStep 7: Deploy your model
Get started with R
Step 0: Orient yourself to Domino (R Tutorial)Step 1: Create a projectStep 2: Configure your projectStep 3: Start a workspaceStep 4: Get your files and dataStep 5: Develop your modelStep 6: Clean up WorkspacesStep 7: Deploy your model
Domino Reference
Projects
Projects OverviewProjects PortfolioUpload Files to Domino using your BrowserFork and Merge ProjectsSearchSharing and CollaborationDomino Service FilesystemCompare File RevisionsArchive a Project
Advanced Project Settings
Project DependenciesProject TagsRename a ProjectSet up your Project to Ignore FilesUpload files larger than 550MBExporting Files as a Python or R PackageTransfer Project Ownership
Domino Runs
JobsDiagnostic Statistics with dominostats.jsonNotificationsResultsRun Comparison
Advanced Options for Domino Runs
Run StatesDomino Environment VariablesEnvironment Variables for Secure Credential StorageAccessing the shell for a Domino Run with SSHUse Apache Airflow with Domino
Scheduled Jobs
Domino Workspaces
WorkspacesUse Visual Studio Code in Domino WorkspacesPersist RStudio PreferencesAccess Multiple Hosted Applications in one Workspace Session
Customize the Domino Software Environment
Environment ManagementDomino Standard EnvironmentsInstall Packages and DependenciesAdd Workspace IDEs
Advanced Options for Domino Software Environment
Install Custom Packages in Domino with Git IntegrationAdd Custom DNS Servers to Your Domino EnvironmentConfigure a Compute Environment to User Private Cran/Conda/PyPi MirrorsScala notebooksUse TensorBoard in Jupyter WorkspacesUse MATLAB as a WorkspaceCreate a SAS Data Science Workspace Environment
Publish your Work
Publish a Model API
Model Publishing OverviewModel Invocation SettingsModel Access and CollaborationModel Deployment ConfigurationPromote Projects to Production
Publish a Web Application
App Publishing OverviewGet Started with DashGet Started with ShinyGet Started with Flask
Advanced Web Application Settings in Domino
App Scaling and PerformanceHost HTML Pages from DominoHow to Get the Domino Username of an App Viewer
Launchers
Launchers OverviewAdvanced Launcher Editor
Connect to your Data
Domino Datasets
Datasets OverviewDatasets Best PracticesAbout domino.yamlDatasets Advanced Mode TutorialDatasets Scratch SpacesConvert Legacy Data Sets to Domino Datasets
Data Sources OverviewConnect to Data Sources
Git and Domino
Git Repositories in DominoWork From a Commit ID in Git
Work with Data Best Practices
Work with Big Data in DominoWork with Lots of FilesMove Data Over a Network
Hadoop and Spark
Connect to a Cloudera CDH5 cluster from DominoConnect to a Hortonworks cluster from DominoConnect to a MapR cluster from DominoConnect to an Amazon EMR cluster from DominoHadoop and Spark overviewKerberos authenticationRun local Spark on a Domino executorUse PySpark in Jupyter Workspaces
Advanced User Configuration Settings
Two-factor authenticationUser API KeysOrganizations Overview
Use the Domino Command Line Interface (CLI)
Install the Domino Command Line (CLI)Domino CLI ReferenceDownload Files with the CLIForce-Restore a Local ProjectMove a Project Between Domino DeploymentsUse the Domino CLI Behind a Proxy
Browser Support
Get Help with Domino
Additional ResourcesGet Domino VersionContact Domino Technical Support
domino logo
About Domino
Domino Data LabKnowledge BaseData Science BlogTraining
User Guide
>
Domino Reference
>
Connect to your Data
>
Hadoop and Spark
>
Kerberos authentication

Kerberos authentication

Domino supports Kerberos authentication, allowing users to authenticate as themselves when connecting to Kerberos-secured systems.

Users can enable Kerberos authentication at the project-level or user-level by uploading a Kerberos keytab and principal into Domino. Once set up, Runs started by Kerberos-enabled users or in Kerberos-enabled projects in Domino will automatically run kinit and retrieve the ticket to be able to authenticate.

Adding your Kerberos configuration file to Domino

There are two ways to add your krb5.conf file to Domino.

  1. Add it to your project in a folder named kerberos:

    Screen_Shot_2019-02-04_at_8.48.07_PM.png

#. Add it to your environment at /etc/krb5.conf:

RUN echo "[libdefaults]" >> /etc/krb5.conf && \
    echo "    default_realm = [YOUR-DEFAULT-REALM]" >> /etc/krb5.conf && \
    echo "    default_tkt_enctypes = des3-hmac-sha1 des-cbc-crc" >> /etc/krb5.conf && \
    echo "    default_tgs_enctypes = des3-hmac-sha1 des-cbc-crc" >> /etc/krb5.conf && \
    echo "    dns_lookup_kdc = true" >> /etc/krb5.conf && \
    echo "    dns_lookup_realm = false" >> /etc/krb5.conf && \
    echo "" >> /etc/krb5.conf && \
    echo "[realms]" >> /etc/krb5.conf && \
    echo "    EXAMPLE.COM = {" >> /etc/krb5.conf && \
    echo "        kdc = kerberos.example.com" >> /etc/krb5.conf && \
    echo "        admin_server = kerberos.example.com" >> /etc/krb5.conf && \
    echo "    }" >> /etc/krb5.conf

===

Adding Kerberos credentials to your user

To add a keytab and principal that will be used for Runs started by your user, open your Account Settings and click Kerberos Integration from the settings menu. Click Keytab file based authentication, supply your keytab and principal, then clickSave.

Screen_Shot_2019-02-04_at_8.39.59_PM.png

Adding Kerberos credentials to your project

To add a keytab and principal that will be used for Runs started by a specific project, open the project Settings and click to open the Integrations tab.

In the Kerberos panel, click Keytab file based authentication, supply your keytab and principal, then click Save.

Screen_Shot_2019-02-04_at_8.39.59_PM.png

Domino Data LabKnowledge BaseData Science BlogTraining
Copyright © 2022 Domino Data Lab. All rights reserved.