Changes between Version 10 and Version 11 of kerberos

Timestamp:

09/03/2012 04:31:04 PM (14 years ago)

Author:

liaojiaohe

Comment:

--

kerberos

@@ -312 +312 @@
 
 start-mapred.sh 
+
+
+
+----
+14.配置hbase
+
+{{{
+    <property>
+        <name>hbase.regionserver.kerberos.principal</name>
+        <value>hbase/_HOST@LOCALDOMAIN</value>
+      </property>
+      <property>
+        <name>hbase.regionserver.keytab.file</name>
+        <value>/data/hbase0-0.94.1-sercurity/conf/hbase.keytab</value>
+      </property>
+      <property>
+        <name>hbase.master.kerberos.principal</name>
+        <value>hbase/_HOST@LOCALDOMAIN</value>
+      </property>
+      <property>
+        <name>hbase.master.keytab.file</name>
+        <value>/data/hbase0-0.94.1-sercurity/conf/hbase.keytab</value>
+      </property>
+
+
+      <property>
+        <name>hbase.security.authentication</name>
+        <value>kerberos</value> 
+      </property> 
+      <property>
+        <name>hbase.security.authorization</name>
+        <value>true</value>
+      </property>
+      <property>
+      <name>hbase.coprocessor.region.classes</name>
+        <value>org.apache.hadoop.hbase.security.token.TokenProvider</value>
+      </property>
+   <property>
+        <name>hbase.coprocessor.master.classes</name>
+        <value>org.apache.hadoop.hbase.security.access.AccessController</value>
+      </property>
+      <property>
+      <name>hbase.coprocessor.region.classes</name>
+        <value>org.apache.hadoop.hbase.security.token.TokenProvider,
+        org.apache.hadoop.hbase.security.access.AccessController</value>
+      </property>
+    
+}}}
+
+15.在KDC里面添加hbase用户，在台机器上生成hbase.keytab文件
+
+addprinc -randkey hbase/hadooptest-11-64.pconline.ctc@LOCALDOMAIN[[BR]
+
+ktadd -k /data/hbase-0.94.1-security/conf/hbase.keytab  hbase/hadooptest-11-64.pconline.ctc@LOCALDOMAIN 
+
+
+