Pre-Installation Worksheet¶
The questions below are meant to assist you with the Enterprise Steam installation process. For a smoother installation process, please print and fill this out so that you have this information ready when installing Enterprise Steam.
General Information¶
- Who is your Hadoop administrator?
___________________________________________________________
- Who is your IT firewall administrator?
___________________________________________________________
- What is the Hadoop distribution that H2O is running on (for example, HDP2.4 or CDH5.5 or MAPR 5.1)?
___________________________________________________________
- What are the IP address and hostname of the server where Enterprise Steam will run?
___________________________________________________________
- What TCP port will Enterprise Steam use (recommended 443)?
___________________________________________________________
- Does the Enterprise Steam port need to be opened through a firewall?
___________________________________________________________
- What TCP port will the Enterprise Steam Proxy use (recommended 9999)?
___________________________________________________________
- Does the Enterprise Steam Proxy port need to be opened through a firewall?
___________________________________________________________
- What OS version is the above server running (for example, RHEL 6.7 or Ubuntu 12.04) [“cat /etc/redhat-release” or “cat /etc/lsb-release”]?
___________________________________________________________
- Do you have root login access to the server named above (required for installation of the package using rpm or dpkg)?
___________________________________________________________
- What is the service ID that will be used to run Enterprise Steam?
___________________________________________________________
- Will you provide a certificate and private key or generate a self-signed certificate?
___________________________________________________________
- Will user passwords be authenticated by LDAP/AD or an internal Steam database?
___________________________________________________________
- Does your environment use Kerberos authentication?
___________________________________________________________
For LDAP/AD Users¶
- Who is your LDAP/AD administrator?
___________________________________________________________
- What is the LDAP/AD host IP and port?
___________________________________________________________
- Does your LDAP/AD setup use SSL?
___________________________________________________________
- What is the Bind Distinguished Name (DN) used by the LDAP/AD server if extended access is required (for example, cn=admin,dc=0xdata,dc=loc)? Note that you can also use anonymous bind.
___________________________________________________________
- What is the User Base DN or the location of the LDAP/AD users, specified by the DN of your user subtree (for example, ou=users,dc=0xdata,dc=loc)?
___________________________________________________________
- What will be the LDAP/AD search filter used to filter users (for example, department=IT)?
___________________________________________________________
- What is the User Attribute that contains the user name (for example, uid)?
___________________________________________________________
- What is the Group DN or the Distinguished Name used for group synchronization (for example cn=jettygroup,ou=groups,dc=0xdata,dc=loc)?
___________________________________________________________
- What is the Group Base DN or the location of your LDAP/AD groups specified by the DN of your subtree (for example, ou=groups,dc=0xdata,dc=loc)?
___________________________________________________________
- What is the Group Attribute that contains the user name (for example, cn)?
___________________________________________________________
- What is the attribute for static group entries (for example, memberUid)?
___________________________________________________________
- What is the desired search request size limit? Note that you can also specify 0 for unlimited size.
___________________________________________________________
- What is the desired search request time limit? Note that you can also specify 0 for unlimited time.
___________________________________________________________
For Kerberos Users¶
- Who is your Kerberos administrator?
___________________________________________________________
- What is the Enterprise Steam Principal?
___________________________________________________________
- Does your Kerberos environment use multiple realms? If so, what is the Realm the Enterprise Steam Principal will authenticate to?
___________________________________________________________
- Do you have a keytab file for the Enterprise Steam Principal?
___________________________________________________________
- Does the Enterprise Steam service ID have Hadoop core-site.xml settings to run as a proxyuser (required)?
___________________________________________________________