Configuring Hadoop Security with Cloudera Manager
This guide describes how to use Cloudera Manager to automate many of the manual tasks of implementing Kerberos security on your CDH cluster.
- Background - These instructions assume you know how to install and configure Kerberos, you already have a working Kerberos key distribution center (KDC) and realm setup, and that you've installed the Kerberos user packages on all cluster hosts and hosts that will be used to access the cluster. Furthermore, Oozie and Hue require that the realm support renewable tickets. For more information about installing and configuring Kerberos, see:
- Support
- Kerberos security in Cloudera Manager has been tested on the following version of MIT Kerberos 5:
- krb5-1.6.1 on Red Hat Enterprise Linux 5 and CentOS 5
- Kerberos security in Cloudera Manager is supported on the following versions of MIT Kerberos 5:
- krb5-1.6.3 on SUSE Linux Enterprise Server 11 Service Pack 1
- krb5-1.8.1 on Ubuntu
- krb5-1.8.2 on Red Hat Enterprise Linux 6 and CentOS 6
- krb5-1.9 on Red Hat Enterprise Linux 6.1
- Kerberos security in Cloudera Manager has been tested on the following version of MIT Kerberos 5:
- Kerberos Principals and Keytabs
- Why Use Cloudera Manager to Implement Hadoop Security?
- Using Cloudera Manager to Configure Hadoop Security
- Hadoop Users in Cloudera Manager
- Viewing and Regenerating Kerberos Principals
- Configuring LDAP Group Mappings
- Security-Related Issues in Cloudera Manager
- Troubleshooting Security Issues
<< Importing Cloudera Manager Settings | Kerberos Principals and Keytabs >> | |