[AMBARI-7615] Ambari support for DataNode no longer running as root.

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.7.0
• Fix Version/s: 1.7.0
• Component/s: ambari-server
• Assignee: Dmitry Lysnichenko
• Reporter: Dmitry Lysnichenko
• Created: 02/Oct/14 19:40
• Updated: 02/Oct/14 20:33
• Resolved: 02/Oct/14 19:56

Description

This feature is new in Champlain.
This feature is intended for use in secure (Kerberized) clusters. The full steps for configuration are:

1. Configure in hdfs-site.xml:
   1. Set dfs.data.transfer.protection to authentication, integrity, or privacy. I think authentication makes sense as the default on new installs.
   2. Set dfs.datanode.address to use a non-privileged port, i.e. 0.0.0.0:50010.
   3. Set dfs.datanode.https.address to use a non-privileged port, i.e. 0.0.0.0:50475.
   4. Set dfs.http.policy to HTTPS_ONLY.
2. Start DataNode as hdfs.

BTW, running as root using privileged ports is still a fully supported configuration. This should continue to be the default mode. Running as non-root is opt-in only, so all of the above should be optional.

Issue Links

• is duplicated by: AMBARI-7126 Run DataNode as hdfs instead of root
• links to: review board