This Confluence has been LDAP enabled, if you are an ASF Committer, please use your LDAP Credentials to login. Any problems file an INFRA jira ticket please.

Child pages
  • Sentry Webserver Kerberos Authentication and Authorization Configuration
Skip to end of metadata
Go to start of metadata

Sentry Webserver now supports Kerberos Authentication and Authorization. Currently Sentry web server mainly provides metric data, in future, rest api will also use it. Here are the configurations for enable Kerberos Authentication and Authorization for web server.


Sentry Service (sentry-site.xml)

Enable Sentry Web Server

Config PropertyValueDefaultRequired


Config PropertyValueDefaultRequired
sentry.service.web.authentication.kerberos.principalThe principal name(HTTP/$FQDN@REALM)-Yes
sentry.service.web.authentication.kerberos.keytabFile path of keytab file-Yes


Config PropertyValueDefaultRequired
sentry.service.web.authentication.allow.connect.usersComma-separated list of users allowed to connectsentryYes



  • No labels