Using CLI Commands Without a User Ticket When SSO Is Configured

Describes how to use temporary tickets with certain command line interfaces in SSO-enabled clusters.

In this case, "command line interface" refers to any of the following:
  • maprcli
  • hadoop
  • mc
  • fuse (service start)
  • loopback nfs (service start)

When SSO is not configured, issuing a CLI command requires a user or client to have a valid ticket in order for the command line to connect to the CLDB service.

When SSO is configured, it is possible for the CLI to create temporary tickets automatically. To use this feature, you must set an environment variable before issuing the CLI command. For example:
export MAPR_JWT_TOKEN_LOCATION="/tmp/jwt"

Obtain the JWT from your SSO provider, and place it in a secure location that can be specified in the environment variable.

Exporting the environment variable creates a temporary ticket, enabling the CLI to talk to the CLDB server. This method permits the use of any command without a password for the duration of the ticket.