| | 134 | |
| | 135 | {{{ |
| | 136 | 配置 core-site.xml |
| | 137 | |
| | 138 | <property> |
| | 139 | <name>hadoop.security.authorization</name> |
| | 140 | <value>true</value> |
| | 141 | <description>Is service-level authorization enabled?</description> |
| | 142 | </property> |
| | 143 | |
| | 144 | <property> |
| | 145 | <name>hadoop.security.authentication</name> |
| | 146 | <value>kerberos</value> |
| | 147 | <description>Possible values are simple (no authentication), and kerberos |
| | 148 | </description> |
| | 149 | </property> |
| | 150 | |
| | 151 | 配置 hdfs-site.xml |
| | 152 | |
| | 153 | <!-- kerberos -nameNode -config --> |
| | 154 | |
| | 155 | <property> |
| | 156 | <name>dfs.https.address</name> |
| | 157 | <value>hadooptest-11-63.pconline.ctc:50470</value> |
| | 158 | </property> |
| | 159 | |
| | 160 | <property> |
| | 161 | <name>dfs.https.port</name> |
| | 162 | <value>50470</value> |
| | 163 | </property> |
| | 164 | |
| | 165 | <property> |
| | 166 | <name>dfs.block.access.token.enable</name> |
| | 167 | <value>true</value> |
| | 168 | </property> |
| | 169 | |
| | 170 | <property> |
| | 171 | <name>dfs.namenode.keytab.file</name> |
| | 172 | <value>/data/hadoop-1.0.3/conf/hadoop.keytab</value> |
| | 173 | </property> |
| | 174 | |
| | 175 | <property> |
| | 176 | <name>dfs.namenode.kerberos.principal</name> |
| | 177 | <value>hadoop/_HOST@LOCALDOMAIN</value> |
| | 178 | </property> |
| | 179 | |
| | 180 | <property> |
| | 181 | <name>dfs.namenode.kerberos.https.principal</name> |
| | 182 | <value>host/_HOST@LOCALDOMAIN</value> |
| | 183 | </property> |
| | 184 | |
| | 185 | |
| | 186 | |
| | 187 | <!-- kerberos secondNameNode config --> |
| | 188 | <property> |
| | 189 | <name>dfs.secondary.http.address</name> |
| | 190 | <value>hadooptest-11-64.pconline.ctc:50090</value> |
| | 191 | </property> |
| | 192 | <property> |
| | 193 | <name>dfs.secondary.https.address</name> |
| | 194 | <value>0.0.0.0:50495</value> |
| | 195 | </property> |
| | 196 | <property> |
| | 197 | <name>dfs.secondary.https.port</name> |
| | 198 | <value>50495</value> |
| | 199 | </property> |
| | 200 | <property> |
| | 201 | <name>dfs.secondary.namenode.keytab.file</name> |
| | 202 | <value>/data/hadoop-1.0.3/conf/hadoop.keytab</value> |
| | 203 | </property> |
| | 204 | <property> |
| | 205 | <name>dfs.secondary.namenode.kerberos.principal</name> |
| | 206 | <value>hadoop/_HOST@LOCALDOMAIN</value> |
| | 207 | </property> |
| | 208 | <property> |
| | 209 | <name>dfs.secondary.namenode.kerberos.https.principal</name> |
| | 210 | <value>host/_HOST@LOCALDOMAIN</value> |
| | 211 | </property> |
| | 212 | |
| | 213 | |
| | 214 | <!-- kerberos DataNode config --> |
| | 215 | |
| | 216 | |
| | 217 | <property> |
| | 218 | <name>dfs.datanode.data.dir.perm</name> |
| | 219 | <value>700</value> |
| | 220 | <description>Permissions for the directories on on the local filesystem where |
| | 221 | the DFS data node store its blocks. The permissions can either be octal or |
| | 222 | symbolic.</description> |
| | 223 | </property> |
| | 224 | <property> |
| | 225 | <name>dfs.datanode.address</name> |
| | 226 | <value>0.0.0.0:1004</value> |
| | 227 | </property> |
| | 228 | <property> |
| | 229 | <name>dfs.datanode.http.address</name> |
| | 230 | <value>0.0.0.0:1006</value> |
| | 231 | </property> |
| | 232 | <property> |
| | 233 | <name>dfs.datanode.keytab.file</name> |
| | 234 | <value>/data/hadoop-1.0.3/conf/hadoop.keytab</value> |
| | 235 | </property> |
| | 236 | <property> |
| | 237 | <name>dfs.datanode.kerberos.principal</name> |
| | 238 | <value>hadoop/_HOST@LOCALDOMAIN</value> |
| | 239 | </property> |
| | 240 | <property> |
| | 241 | <name>dfs.datanode.kerberos.https.principal</name> |
| | 242 | <value>host/_HOST@LOCALDOMAIN</value> |
| | 243 | </property> |
| | 244 | }}} |
| | 245 | |
| | 246 | |