Hortonworks Data Platform December 15, 2017
iv
2.6.1. Configure Ambari Server for Authenticated HTTP ................................. 74
2.6.2. Configuring HTTP Authentication for HDFS, YARN, MapReduce2,
HBase, Oozie, Falcon and Storm .................................................................... 74
2.6.3. Enabling Browser Access to a SPNEGO-enabled Web UI ........................ 75
2.7. Setting Up Kerberos Authentication for Non-Ambari Clusters ........................... 76
2.7.1. Preparing Kerberos ............................................................................... 76
2.7.2. Configuring HDP for Kerberos .............................................................. 82
2.7.3. Setting up One-Way Trust with Active Directory .................................. 110
2.7.4. Configuring Proxy Users ...................................................................... 112
2.8. Perimeter Security with Apache Knox ............................................................ 112
2.8.1. Apache Knox Gateway Overview ........................................................ 112
2.8.2. Configuring the Knox Gateway ........................................................... 115
2.8.3. Defining Cluster Topologies ................................................................ 120
2.8.4. Configuring a Hadoop Server for Knox ............................................... 121
2.8.5. Mapping the Internal Nodes to External URLs ..................................... 126
2.8.6. Configuring Authentication ................................................................ 130
2.8.7. Configuring Identity Assertion ............................................................ 149
2.8.8. Configuring Service Level Authorization .............................................. 158
2.8.9. Audit Gateway Activity ....................................................................... 162
2.8.10. Gateway Security .............................................................................. 164
2.8.11. Setting Up Knox Services for HA ....................................................... 168
2.8.12. Knox CLI Testing Tools ...................................................................... 171
2.9. Knox SSO ...................................................................................................... 172
2.9.1. Identity Providers (IdP) ....................................................................... 173
2.9.2. Setting up Knox SSO for Ambari ......................................................... 177
2.9.3. Setting up Knox SSO for Ranger Web UI ............................................. 178
2.9.4. Setting up the Knox Token Service for Ranger APIs ............................. 180
2.9.5. Setting up Knox SSO for Apache Atlas ................................................ 182
3. Configuring Authorization in Hadoop ...................................................................... 184
3.1. Installing Ranger Using Ambari ..................................................................... 184
3.1.1. Overview ............................................................................................ 184
3.1.2. Installation Prerequisites ..................................................................... 184
3.1.3. Ranger Installation ............................................................................. 193
3.1.4. Enabling Ranger Plugins ..................................................................... 234
3.1.5. Ranger Plugins - Kerberos Overview .................................................... 269
3.2. Using Ranger to Provide Authorization in Hadoop ......................................... 273
3.2.1. About Ranger Policies ......................................................................... 274
3.2.2. Using the Ranger Console ................................................................... 279
3.2.3. Configuring Resource-Based Services ................................................... 284
3.2.4. Resource-Based Policy Management ................................................... 301
3.2.5. Row-level Filtering and Column Masking in Hive .................................. 334
3.2.6. Adding Tag-based Service ................................................................... 348
3.2.7. Tag-Based Policy Management ........................................................... 350
3.2.8. Users/Groups and Permissions Administration ..................................... 369
3.2.9. Reports Administration ....................................................................... 381
3.2.10. Special Requirements for High Availability Environments ................... 385
3.2.11. Adding a New Component to Apache Ranger ................................... 386
3.2.12. Developing a Custom Authorization Module ..................................... 389
3.2.13. Apache Ranger Public REST API ........................................................ 389
4. Data Protection: Wire Encryption ............................................................................. 424
4.1. Enabling RPC Encryption ............................................................................... 424
我的内容管理
收起
我的收益 登录查看自己的收益
我的积分
登录查看自己的积分
我的C币
登录后查看C币余额
我的收藏 
我的下载 
下载帮助 
评论0