Hadoop: enable login using Kerberos

deployments/hadoop-hdfs/ctx.yaml

@@ -51,3 +51,5 @@ write_files:
 runcmd:
   - cd /etc/puppet/code && HOME=/root librarian-puppet install --verbose
   - mkdir /data 2>/dev/null || true
+  - egrep '^\s*GSSAPIAuthentication\s+yes' /etc/ssh/sshd_config || echo 'GSSAPIAuthentication yes' >> /etc/ssh/sshd_config
+  - service ssh reload

deployments/hadoop-single/ctx.yaml

@@ -51,3 +51,5 @@ write_files:
 runcmd:
   - cd /etc/puppet/code && HOME=/root librarian-puppet install --verbose
   - mkdir /data 2>/dev/null || true
+  - egrep '^\s*GSSAPIAuthentication\s+yes' /etc/ssh/sshd_config || echo 'GSSAPIAuthentication yes' >> /etc/ssh/sshd_config
+  - service ssh reload

deployments/hadoop/ctx.yaml

@@ -51,3 +51,5 @@ write_files:
 runcmd:
   - cd /etc/puppet/code && HOME=/root librarian-puppet install --verbose
   - mkdir /data 2>/dev/null || true
+  - egrep '^\s*GSSAPIAuthentication\s+yes' /etc/ssh/sshd_config || echo 'GSSAPIAuthentication yes' >> /etc/ssh/sshd_config
+  - service ssh reload

image/hadoop.sh

@@ -44,6 +44,7 @@ cp -vp hadoop-adduser.sh $BODI_CHROOT_PATH/usr/local/sbin/
 cp -vp scripts/*.sh $BODI_CHROOT_PATH/usr/local/sbin/
 cp -vp ../single.pp ../single2.pp $BODI_CHROOT_PATH/root/
 cp -vp motd $BODI_CHROOT_PATH/etc/motd
+egrep '^\s*GSSAPIAuthentication\s+yes' $BODI_CHROOT_PATH/etc/ssh/sshd_config || echo 'GSSAPIAuthentication yes' >> $BODI_CHROOT_PATH/etc/ssh/sshd_config
 
 # tests
 mkdir -p $BODI_CHROOT_PATH/opt/hadoop-tests