Pre-Installation Worksheet -------------------------- The questions below are meant to assist you with the Enterprise Steam installation process. For a smoother installation process, please print and fill this out so that you have this information ready when installing Enterprise Steam. General Information ~~~~~~~~~~~~~~~~~~~ 1. What are the IP address and hostname of the server where Enterprise Steam will run? \___________________________________________________________ 2. Who is your IT firewall administrator? \___________________________________________________________ 3. What TCP port will Enterprise Steam use (recommended 9555)? \___________________________________________________________ 4. Does the Enterprise Steam port need to be opened through a firewall? \___________________________________________________________ 5. What OS version is the above server running (for example, RHEL 6.7 or Ubuntu 12.04) [`cat /etc/redhat-release` or `cat /etc/lsb-release`]? \___________________________________________________________ 6. Do you have root login access to the server (required for installation of the package using yum or dpkg)? \___________________________________________________________ 7. What is the service ID that will be used to run Enterprise Steam? (recommended to use the provided "steam" service ID) \___________________________________________________________ 8. Will you provide a TLS certificate and private key for Enterprise Steam to use? \___________________________________________________________ 9. Will you use LDAP/AD or SAML to authenticate users? \___________________________________________________________ For Hadoop Users ~~~~~~~~~~~~~~~~ 1. Who is your Hadoop administrator? \___________________________________________________________ 2. What is your Hadoop distribution (for example, HDP2.4 or CDH5.5 or MAPR 5.1)? \___________________________________________________________ 3. Does your Hadoop environment use Kerberos authentication? \___________________________________________________________ For Spark Users ~~~~~~~~~~~~~~~~ 1. What is your Spark version? \___________________________________________________________ 2. What is your SPARK_HOME directory? \___________________________________________________________ 3. What is your JAVA_HOME directory? \___________________________________________________________ For LDAP/AD Users ~~~~~~~~~~~~~~~~~ 1. Who is your LDAP/AD administrator? \___________________________________________________________ 2. What is the LDAP/AD hostname/IP and port? \___________________________________________________________ 3. Is your LDAP/AD secured (LDAPs/Secured LDAP)? \___________________________________________________________ 4. If your LDAP/AD is secured, is the LDAP server certificate signed by internal certificate authority? \___________________________________________________________ 5. If your LDAP/AD is secured and your LDAP server certificate is signed by internal certificate authority. What is the path to the public key of the certificate authority? \___________________________________________________________ 6. What is the Bind Distinguished Name (DN) used by the LDAP/AD server if extended access is required (for example, cn=admin,dc=0xdata,dc=loc)? Note that you can also use anonymous bind. \___________________________________________________________ 7. What is the User Base DN or the location of the LDAP/AD users, specified by the DN of your user subtree (for example, ou=users,dc=0xdata,dc=loc)? \___________________________________________________________ 8. What will be the LDAP/AD search filter used to filter users (for example, department=IT)? \___________________________________________________________ 9. What is the User Attribute that contains the user name (for example, uid)? \___________________________________________________________ 10. What is the Group DN or the Distinguished Name used for group synchronization (for example cn=jettygroup,ou=groups,dc=0xdata,dc=loc)? \___________________________________________________________ 11. What is the Group Base DN or the location of your LDAP/AD groups specified by the DN of your subtree (for example, ou=groups,dc=0xdata,dc=loc)? \___________________________________________________________ 12. What is the Group Attribute that contains the user name (for example, cn)? \___________________________________________________________ 13. What is the attribute for static group entries (for example, memberUid)? \___________________________________________________________ For Kerberos Users ~~~~~~~~~~~~~~~~~~ 1. Who is your Kerberos administrator? \___________________________________________________________ 2. Did you create a keytab file for the Enterprise Steam Principal? Where is it stored? \___________________________________________________________ 3. What is the name of the Enterprise Steam Principal? \___________________________________________________________ 4. Does your Kerberos environment use multiple realms? If so, what is the Realm the Enterprise Steam Principal will authenticate to? \___________________________________________________________ 5. Does the Enterprise Steam service ID have Hadoop core-site.xml settings to run as a proxyuser (required)? \___________________________________________________________