Hortonworks Docs
»
Data Platform 3.0.0
»
Configuring Authentication with Kerberos
Configuring Authentication with Kerberos
Also available as:
Configuring Authentication with Kerberos
Kerberos Overview
Kerberos Principals Overview
Enabling SPNEGO Authentication for Hadoop
Set Up Kerberos for Ambari Server
Configure HTTP Authentication for HDFS, YARN, MapReduce2, HBase, Oozie, Falcon, and Storm
Enable Browser Access to a SPNEGO-enabled Web UI
Enabling Kerberos Authentication Using Ambari
Checklist: Installing and Configuring the KDC
Optional: Install a new MIT KDC
Optional: Use an Existing IPA
Install the JCE for Kerberos
Enabling Kerberos Security
Create Mappings Between Principals and UNIX Usernames
Running the Kerberos Security Wizard
Launch the Kerberos Wizard (Automated Setup)
Launch the Kerberos Wizard (Manual Setup)
Update KDC Admin Credentials
Customizing the Attribute Template
Disable Kerberos Security
Configuring HDP Components for Kerberos
Configuring Kafka for Kerberos
Kerberos for Kafka Prerequisites
Configuring the Kafka Broker for Kerberos
Create Kafka Topics
Produce Events or Messages to Kafka on a Secured Cluster
Consume Events or Messages from Kafka on a Secured Cluster
Authorizing Access when Kerberos is Enabled
Appendix: Kerberos Kafka Configuration Options
Server.properties key value pairs
JAAS Configuration File for the Kafka Server
Configuration Setting for the Kafka Producer
JAAS Configuration File for the Kafka Client
Configuring Storm for Kerberos
Kerberos for Storm Prerequisites
Designating a Storm Client Node
Dedicate or Use an Existing Gateway Node
Use an Existing Storm Node
Running Storm Commands
Running Workers as Users
Accessing the Storm UI
Accessing the Storm UI Active Directory Trust Configuration
Kerberos Storm Security Properties
Known Issues with Storm for Kerberos
Securing Apache HBase in a production environment
Installing Apache HBase with Kerberos on an existing HDP cluster
Verify if kerberos is enabled for HBase
Access Kerberos-enabled HBase cluster using a Java client
Download configurations
Set up client account
Create the Java client
Appendix: Kerberos Kafka Configuration Options
Reference material for Kerberos Kafka configuration options.
Server.properties key value pairs
Ambari configures the following Kafka values during the installation process. Settings are stored as key-value pairs stored in an underlying
server.properties
configuration file.
JAAS Configuration File for the Kafka Server
The Java Authentication and Authorization Service (JAAS) API supplies user authentication and authorization services for Java applications.
Configuration Setting for the Kafka Producer
Reference information for the configuration setting for the Kafka producer.
JAAS Configuration File for the Kafka Client
After enabling Kerberos, Ambari sets up a JAAS login configuration file for the Kafka client. Settings in this file will be used for any client (consumer, producer) that connects to a Kerberos-enabled Kafka cluster.
Parent topic:
Configuring Kafka for Kerberos
© 2012–2019, Hortonworks, Inc.
Document licensed under the
Creative Commons Attribution ShareAlike 4.0 License
.
Hortonworks.com
|
Documentation
|
Support
|
Community