Step 9: (Optional) Enable Authentication for HTTP Web Consoles for Hadoop Roles

Minimum Required Role: Configurator (also provided by Cluster Administrator, Full Administrator)

Authentication for access to the HDFS, MapReduce, and YARN roles' web consoles can be enabled using a configuration option for the appropriate service. To enable this authentication:
  1. From the Clusters tab, select the service (HDFS, MapReduce, or YARN) for which you want to enable authentication.
  2. Click the Configuration tab.
  3. Expand Service-Wide > Security, check the Enable Authentication for HTTP Web-Consoles property, and save your changes.

    A command is triggered to generate the new required credentials.

  4. Once the command finishes, restart all roles of that service.

Enabling SPNEGO as an Authentication Backend for Hue

To enable SPNEGO authentication:
  1. From the Clusters tab, select the Hue service.
  2. Click the Configuration tab.
  3. Expand Service-Wide > Security, and for the Authentication Backend property, select desktop.auth.backend.SpnegoDjangoBackend.
  4. Click Save Changes.
  5. Restart the Hue service.