Optional Step 9: Configure secure WebHDFS

Security for WebHDFS is disabled by default. If you want use WebHDFS with a secure cluster, this is the time to enable and configure it.

To configure secure WebHDFS:

  1. If you have not already done so, enable WebHDFS by adding the following property to the hdfs-site.xml file on every machine in the cluster.
    <property>
      <name>dfs.webhdfs.enabled</name>
      <value>true</value>
    </property>
  2. Add the following properties to the hdfs-site.xml file on every machine in the cluster. Replace the example values shown below with the correct settings for your site.
    <property>
      <name>dfs.web.authentication.kerberos.principal</name>
      <value>HTTP/_HOST@YOUR-REALM.COM</value>
    </property>
    
    <property>
      <name>dfs.web.authentication.kerberos.keytab</name>
      <value>/etc/hadoop/conf/HTTP.keytab</value> <!-- path to the HTTP keytab -->
    </property>