From 01ab13c336d75018b323737e6c22e558af7e051d Mon Sep 17 00:00:00 2001 From: Misty Stanley-Jones Date: Mon, 22 Dec 2014 12:18:30 +1000 Subject: [PATCH] HBASE-12528 Document the newly introduced params for providing principal and keytabs. --- src/main/docbkx/ops_mgt.xml | 48 +++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 48 insertions(+) diff --git a/src/main/docbkx/ops_mgt.xml b/src/main/docbkx/ops_mgt.xml index 3e38ff7..dedd238 100644 --- a/src/main/docbkx/ops_mgt.xml +++ b/src/main/docbkx/ops_mgt.xml @@ -215,6 +215,54 @@ private static final int ERROR_EXIT_CODE = 4; $ ${HBASE_HOME}/bin/hbase orghapache.hadoop.hbase.tool.Canary -t 600000 +
+ Running Canary in a Kerberos-enabled Cluster + To run Canary in a Kerberos-enabled cluster, configure the following two properties in + hbase-site.xml: + + + hbase.client.keytab.file + + + hbase.client.kerberos.principal + + + Kerberos credentials are refreshed every 30 seconds when Canary runs in daemon + mode. + To configure the DNS interface for the client, configure the following optional + properties in hbase-site.xml. + + + hbase.client.dns.interface + + + hbase.client.dns.nameserver + + + + Canary in a Kerberos-Enabled Cluster + This example shows each of the properties with valid values. + + hbase.client.kerberos.principal + hbase/_HOST@YOUR-REALM.COM + + + hbase.client.keytab.file + /etc/hbase/conf/keytab.krb5 + + +property> + hbase.client.dns.interface + default + + + hbase.client.dns.nameserver + default + + ]]> + +