Home | About | Sematext search-lucene.com search-hadoop.com
NEW: Monitor These Apps!
elasticsearch, apache solr, apache hbase, hadoop, redis, casssandra, amazon cloudwatch, mysql, memcached, apache kafka, apache zookeeper, apache storm, ubuntu, centOS, red hat, debian, puppet labs, java, senseiDB
 Search Hadoop and all its subprojects:

Switch to Threaded View
HDFS >> mail # user >> Sharing data through Kerberos


Copy link to this message
-
Re: Sharing data through Kerberos
Rahul,

On Mon, Apr 9, 2012 at 1:22 PM, Rahul Das <[EMAIL PROTECTED]> wrote:
>
> Hi,
>
> I am trying out the possibilities of Hadoop with kerberos. Can somebody clear my doubts in following questions
> 1) Does the Hadoop with Kerberos prevent the HDFS user data from sharing?
Kerberos adds authentication. What you need on top of that is a proper
permissions setup.

>
> 2) If some user wants to share the HDFS data with other user/group then what are the steps to follow.

Same as how you would do it on any other filesystem. Make sure they
exist in same group and that the data is group readable. Use "fs
-chown" and "fs -chmod" to your benefit here.

> 3) Can I create a super user who can access all the jobs and data?

Your namenode-running user ("hdfs" if you use packages), is a
superuser automatically. To create more superusers, set
"dfs.permissions.supergroup" to a specific group name and all users
that also belong to that specified group name will then be elevated as
HDFS superuser. Be careful about doing this, however. Also see
http://www.cloudera.com/blog/2012/03/authorization-and-authentication-in-hadoop/
for some more details along the same lines.

--
Harsh J
NEW: Monitor These Apps!
elasticsearch, apache solr, apache hbase, hadoop, redis, casssandra, amazon cloudwatch, mysql, memcached, apache kafka, apache zookeeper, apache storm, ubuntu, centOS, red hat, debian, puppet labs, java, senseiDB