Details
-
Improvement
-
Status: Resolved
-
Major
-
Resolution: Fixed
-
1.7.0
-
None
Description
This feature is new in Champlain.
This feature is intended for use in secure (Kerberized) clusters. The full steps for configuration are:
- Configure in hdfs-site.xml:
- Set dfs.data.transfer.protection to authentication, integrity, or privacy. I think authentication makes sense as the default on new installs.
- Set dfs.datanode.address to use a non-privileged port, i.e. 0.0.0.0:50010.
- Set dfs.datanode.https.address to use a non-privileged port, i.e. 0.0.0.0:50475.
- Set dfs.http.policy to HTTPS_ONLY.
- Start DataNode as hdfs.
BTW, running as root using privileged ports is still a fully supported configuration. This should continue to be the default mode. Running as non-root is opt-in only, so all of the above should be optional.
Attachments
Issue Links
- is duplicated by
-
AMBARI-7126 Run DataNode as hdfs instead of root
-
- Resolved
-
- links to