2015-08-27 149 views
2

有人看到以下消息时,如何启用Kerberos authetication同时连接到使用安全凤HBase的集群:连接到安全的HBase集群

15/08/25 23:04:49 DEBUG ipc.AbstractRpcClient: Use SIMPLE authentication for service MasterService, sasl=false 
15/08/25 23:04:49 DEBUG ipc.AbstractRpcClient: Connecting to nnn-hdp-sa-********/10.99.40.213:60000 
15/08/25 23:04:49 DEBUG ipc.AbstractRpcClient: Use SIMPLE authentication for service MasterService, sasl=false 
15/08/25 23:04:49 DEBUG ipc.AbstractRpcClient: Connecting to nnn-hdp-sa-********/10.99.40.213:60000 
15/08/25 23:04:49 DEBUG ipc.AbstractRpcClient: Use SIMPLE authentication for service MasterService, sasl=false 
15/08/25 23:04:49 DEBUG ipc.AbstractRpcClient: Connecting to nnn-hdp-sa-********/10.99.40.213:60000 

看来它是使用简单的身份验证连接到HBase的主服务?我们如何使它使用Kerberos认证?

回答

1

查看:https://phoenix.apache.org/server.html

凤凰查询服务器提供了与凤凰和HBase交互 的替代方法。很快,这将启用除JVM之外的环境 的访问。

具体凤凰配置(我相信你已经有一个凤凰Kerberos主体):

hbase.security.authentication When set to "kerberos", the server will attempt to log in before initiating Phoenix connections. Specified hbase-default.xml 
phoenix.queryserver.keytab.file The key to look for keytab file. unset 
phoenix.queryserver.kerberos.principal The kerberos principal to use when authenticating. unset 
phoenix.queryserver.dns.nameserver The DNS hostname default 
phoenix.queryserver.dns.interface The name of the network interface to query for DNS. default