Configuring Authentication with Kerberos
Also available as:
PDF
loading table of contents...

Use an Existing Storm Node

How to designate a storm client node using an existing Storm node (edge node).

To use one of your existing Storm nodes (such as nimbus, supervisors, or drpc) as a Storm client node, complete the following steps for every user who requires Storm access (for example, to run Storm commands or deploy topologies):

  1. Create a .storm directory in the user's home directory. For example, user john should have a directory called /home/john/.storm/.
  2. Add the following settings to the /etc/storm/conf/storm.yaml configuration file:
    nimbus.seeds: <nimbus-host-array>
    nimbus.thrift.port: 6627
    java.security.auth.login.config: "/etc/storm/conf/client_jaas.conf"
    storm.thrift.transport: "org.apache.storm.security.auth.kerberos.KerberosSaslTransportPlugin"

    where <nimbus-host-array> is an array of hostnames running Nimbus (the value should come from /etc/storm/conf/storm.yaml).

    nimbus.seeds: ["c6401.ambari.apache.org", "c6402.ambari.apache.org"]

Repeat these steps for every user who requires Storm access.