Step 9: (Optional) Enable authentication for HTTP web consoles for Hadoop roles
Authentication for access to the web consoles for the HDFS and YARN roles can be enabled using a configuration option for the appropriate service.
Minimum Required Role: Configurator (also provided by Cluster Administrator, Limited Cluster Administrator , and Full Administrator)
- On the Clusters tab, select the service (HDFS or YARN) for which you want to enable authentication.
- Click the Configuration tab.
- Select .
-
Type
Enable Kerberos
in the Search box. - Select Enable Kerberos Authentication for HTTP Web-Consoles.
- elect Enable Kerberos Authentication for HTTP Web-Consoles.
- Enter a Reason for change, then click Save Changes to commit the changes.
- When the command finishes, restart all roles of that service.
Enabling SPNEGO as an Authentication Backend for Hue
-
In Cloudera Manager, set the authentication backend to
SpnegoDjangoBackend
.- Go to the Cloudera Manager Admin Console. From the Clusters tab, select the Hue service.
- Click the Configuration tab.
- Select .
- Select .
-
Locate the Authentication Backend property and select
desktop.auth.backend.SpnegoDjangoBackend
. - Click Save Changes.
- Restart the Hue service.
-
If you are using an external load balancer, perform the following steps, otherwise
skip the remaining steps. Cloudera Manager creates these configuration
automatically: