List of Pages in Category Security (231 pages)
*
A
- Adding Trusted Realms to the Cluster
- Amazon Web Services (AWS) Security
- Apache Hive File System Permissions in CDH
- Apache Sentry Overview
- Auditing and Data Lineage Concepts
- Auditing Impala Operations
- Authenticate Hue Users with LDAP
- Authenticate Hue Users with SAML
- Authenticating Kerberos Principals in Java Code
- Authentication
- Authentication and Kerberos Issues
- Authentication Concepts
- Authorization
- Authorization Concepts
- Authorization With Apache Sentry
- Automatic Logout
)C
- CDH 5 and Cloudera Manager 5 Requirements and Supported Versions
- Cloudera Manager 5 Overview
- Cloudera Manager User Accounts
- Cloudera Manager User Roles
- Cloudera Navigator and External Authentication
- Cloudera Navigator Data Encryption Overview
- Cloudera Navigator Encrypt
- Cloudera Navigator HSM KMS Overview
- Cloudera Navigator Key HSM Overview
- Cloudera Navigator Key Trustee Server Overview
- Cloudera Search Security
- Cloudera Security
- Cloudera Security Overview
- Configure Hue for High Availability
- Configuring a Cluster with Custom Kerberos Principals
- Configuring a Cluster-dedicated MIT KDC with Cross-Realm Trust
- Configuring Authentication for Cloudera Navigator
- Configuring Authentication for Other Components
- Configuring Authentication in CDH Using the Command Line
- Configuring Authentication in Cloudera Manager
- Configuring CDH Services for HDFS Encryption
- Configuring Cloudera Navigator for LDAP
- Configuring Cloudera Navigator for SAML
- Configuring Encrypted Communication Between HiveServer2 and Client Drivers
- Configuring Encrypted On-disk File Channels for Flume
- Configuring Encrypted Transport for HBase
- Configuring Encrypted Transport for HDFS
- Configuring Encryption for Data Spills
- Configuring External Authentication for Cloudera Manager
- Configuring Flume's Security Properties
- Configuring HBase Authorization
- Configuring HiveServer2 for CDH
- Configuring HttpFS
- Configuring Impala Delegation for Hue and BI Tools
- Configuring Kerberos Authentication for HBase
- Configuring Kerberos Authentication for Hue
- Configuring Kerberos Authentication for the Oozie Server
- Configuring Kerberos for Flume Thrift Source and Sink Using Cloudera Manager
- Configuring Kerberos for Flume Thrift Source and Sink Using the Command Line
- Configuring KMS Access Control Lists (ACLs)
- Configuring LDAP Group Mappings
- Configuring MRv1 Security
- Configuring Oozie
- Configuring Oozie HA with Kerberos
- Configuring Proxy Users to Access HDFS
- Configuring Secure HBase Replication
- Configuring Sentry Authorization for Cloudera Search
- Configuring Sentry Policy File Authorization Using Cloudera Manager
- Configuring Sentry Policy File Authorization Using the Command Line
- Configuring the HBase Client TGT Renewal Period
- Configuring the Key Management Server (KMS)
- Configuring the Mapping from Kerberos Principals to Short Names
- Configuring the Sentry Service
- Configuring TLS Encryption for Cloudera Manager
- Configuring TLS/SSL Encryption for CDH Services
- Configuring TLS/SSL for Flume Thrift Source and Sink
- Configuring TLS/SSL for HBase
- Configuring TLS/SSL for HDFS, YARN and MapReduce
- Configuring TLS/SSL for HttpFS
- Configuring TLS/SSL for Hue
- Configuring TLS/SSL for Impala
- Configuring TLS/SSL for Kafka (Navigator Event Broker)
- Configuring TLS/SSL for Navigator Audit Server
- Configuring TLS/SSL for Navigator Metadata Server
- Configuring TLS/SSL for Oozie
- Configuring TLS/SSL for Solr
- Configuring YARN Security
- ContainerExecutor Error Codes (YARN)
- Copying Cluster Data Using DistCp
- Copying Data between a Secure and an Insecure Cluster using DistCp and WebHDFS
- CREATE ROLE Statement (CDH 5.2 or higher only)
D
- Data at Rest Encryption Reference Architecture
- Data at Rest Encryption Requirements
- Disabling SELinux
- DROP ROLE Statement (CDH 5.2 or higher only)
E
- Enabling Kerberos Authentication for Hadoop Using the Command Line
- Enabling Kerberos Authentication for Impala
- Enabling Kerberos Authentication Using the Wizard
- Enabling LDAP Authentication for Impala
- Enabling Replication Between Clusters with Kerberos Authentication
- Enabling Sentry Authorization for Impala
- Encrypted Shuffle and Encrypted Web UIs
- Encrypting Data in Transit
- Encryption Concepts
- Encryption Mechanisms Overview
- Error Messages and Various Failures
F
G
H
- Hadoop Users in Cloudera Manager and CDH
- HBase Authentication
- HCatalog Authentication
- HDFS Encryption Issues
- HDFS Extended ACLs
- HDFS Transparent Encryption
- Hive Authentication
- Hive Metastore Server Security Configuration
- Hive SQL Syntax for Use with Sentry
- HiveServer2 Security Configuration
- How to Add Root and Intermediate CAs to Truststore for TLS/SSL
- How to Check Security Settings on a Cluster
- How To Configure Authentication for Amazon S3
- How to Configure Browser-based Interfaces to Require Kerberos Authentication
- How to Configure Browsers for Kerberos Authentication
- How to Configure Clusters to Use Kerberos for Authentication
- How to Configure Encryption for Amazon S3
- How to Convert File Encodings (DER, JKS, PEM) for TLS/SSL Certificates and Keys
- How To Create a Multitenant Enterprise Data Hub
- How to Enable Sensitive Data Redaction
- How to Log a Security Support Case
- How To Obtain and Deploy Keys and Certificates for TLS/SSL
- How To Renew and Redistribute Certificates
- How to Set Up a Gateway Node to Restrict Access to the Cluster
- How To Set Up Access to Cloudera EDH or Cloudera Director (Microsoft Azure Marketplace)
- How to Use Antivirus Software on CDH Hosts
- How to Use Self-Signed Certificates for TLS
- HttpFS Authentication
- Hue Authentication
- Hue Security
I
- Impala Authentication
- Impala Security Overview
- Initializing Standalone Key Trustee Server
- Installation Considerations for Impala Security
- Installing and Upgrading Sentry for Policy File Authorization
- Installing and Upgrading the Sentry Service
- Integrating Hadoop Security with Active Directory
K
- Kerberos Authentication for Single User Mode and Non-Default Users
- Kerberos Security Artifacts Overview
- Kudu Security Overview
L
M
- Managing HBase Security
- Managing Kerberos Credentials Using Cloudera Manager
- Managing Key Trustee Server Certificates
- Migrating from Sentry Policy Files to the Sentry Service
N
O
- Oozie Authentication
- Optional Step 10: Configuring a secure HDFS NFS Gateway
- Optional Step 8: Configuring Security for HDFS High Availability
- Optional Step 9: Configure secure WebHDFS
- Other Cloudera Manager Tasks and Settings
- Overview of Apache Hive Security in CDH
P
- Permission Requirements for Package-based Installations and Upgrades of CDH
- Prerequisites for Setting up Cloudera Manager High Availability
R
- Replication of Encrypted Data
- Resource Planning for Data at Rest Encryption
- REVOKE Statement (CDH 5.2 or higher only)
S
- Securing Impala Data and Log Files
- Securing the Hive Metastore Database
- Securing the Impala Web User Interface
- Securing the Key Management Server (KMS)
- Security Guidelines for Impala
- Security How-To Guides
- Sentry Debugging and Failure Scenarios
- Sentry Installation
- Sentry Metrics
- Sentry Policy File Authorization
- Sentry Server Metrics
- Solr Authentication
- Spark Authentication
- Spark Encryption
- Specifying Impala Credentials to Access Data in S3
- Specifying Impala Credentials to Access Data in S3 with Cloudera Manager
- Sqoop 1, Pig, and Whirr Security
- Sqoop 2 Authentication
- Step 10: (Flume Only) Use Substitution Variables for the Kerberos Principal and Keytab
- Step 11: Set Variables for Secure DataNodes
- Step 12: Start up a DataNode
- Step 12: Start up the NameNode
- Step 14: Set the Sticky Bit on HDFS Directories
- Step 15: Start up the Secondary NameNode (if used)
- Step 16: Configure Either MRv1 Security or YARN Security
- Step 1: Install CDH 5
- Step 1: Install Cloudera Manager and CDH
- Step 2: If You are Using AES-256 Encryption, Install the JCE Policy File
- Step 2: Installing and Configuring Cloudera Manager Server for High Availability
- Step 2: Verify User Accounts and Groups in CDH 5 Due to Security
- Step 3: Create the Kerberos Principal for Cloudera Manager Server
- Step 3: If you are Using AES-256 Encryption, Install the JCE Policy File
- Step 4: Create and Deploy the Kerberos Principals and Keytab Files
- Step 4: Enabling Kerberos Using the Wizard
- Step 5: Create the HDFS Superuser
- Step 5: Shut Down the Cluster
- Step 6: Enable Hadoop Security
- Step 6: Get or Create a Kerberos Principal for Each User Account
- Step 7: Configure Secure HDFS
- Step 7: Prepare the Cluster for Each User
- Step 8: Verify that Kerberos Security is Working
- Step 9: (Optional) Enable Authentication for HTTP Web Consoles for Hadoop Roles
- Step 9: Enable Hue to Work with Hadoop Security using Cloudera Manager
- Synchronize Hue with LDAP Server
- Synchronizing HDFS ACLs and Sentry Permissions
T
- TaskController Error Codes (MRv1)
- Testing the Flume HDFS Sink Configuration
- The Sentry Service
- TLS and Kerberos Configuration for Cloudera Manager High Availability
- Troubleshooting Security Issues
- Troubleshooting TLS/SSL Issues in Cloudera Manager
U
- Understanding Keystores and Truststores
- User Roles and Privileges Reference
- User-Defined Functions (UDFs)
- Using a Custom Kerberos Keytab Retrieval Script
- Using Auth-to-Local Rules to Isolate Cluster Users
- Using Hive to Run Queries on a Secure HBase Server
- Using Impala through a Proxy for High Availability
- Using kadmin to Create Kerberos Keytab Files
- Using Kerberos with Solr
- Using Multiple Authentication Methods with Impala
- Using Search through a Proxy for High Availability
- Using the Sentry Web Server
W
Y
Z