hadoop-mapreduce-user mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Francis Dupin <francis.du...@ifsttar.fr>
Subject Authentication for hdfs web interface
Date Wed, 25 Nov 2015 15:48:35 GMT
Hi all,

I would like to secure the web browser access to hdfs interface.

I have installed kerberos (working fine)

Then I have modified in my hadoop dist (binarie downloaded from apache 
site) :
${HADOOP}/share/hadoop/hdfs/webapps/hdfs/WEB-INF/web.xml

adding :


  <filter>
         <filter-name>kerberosFilter</filter-name>
<filter-class>org.apache.hadoop.security.authentication.server.AuthenticationFilter</filter-class>
         <init-param>
             <param-name>type</param-name>
             <param-value>kerberos</param-value>
         </init-param>
         <init-param>
             <param-name>token.validity</param-name>
             <param-value>3600</param-value>
         </init-param>
         <init-param>
             <param-name>cookie.domain</param-name>
             <param-value>.mv</param-value>
         </init-param>
         <init-param>
             <param-name>cookie.path</param-name>
             <param-value>/</param-value>
         </init-param>
         <init-param>
             <param-name>kerberos.principal</param-name>
             <param-value>HTTP/mv05@MV</param-value>
         </init-param>
         <init-param>
             <param-name>kerberos.keytab</param-name>
<param-value>/etc/krb5kdc/kadm5.keytab</param-value>
         </init-param>
     </filter>

     <filter-mapping>
         <filter-name>kerberosFilter</filter-name>
         <url-pattern>/kerberos/*</url-pattern>
     </filter-mapping>

where HTTP/mv05@MV and .mv are my own parameters


1 - In the documentation,
-------------------------------------
http://hadoop.apache.org/docs/current/hadoop-auth/Configuration.html

it is written
<filter-class>org.apache.hadoop.security.auth.server.AuthenticationFilter</filter-class>
but the class is not found.

I have replaced by
<filter-class>org.apache.hadoop.security.auth.server.AuthenticationFilter</filter-class>


2 - In core-site.xml, I have added :
---------------------------------------------

<property>
   <name>hadoop.http.filter.initializers</name>
<value>org.apache.hadoop.http.lib.StaticUserWebFilter,org.apache.hadoop.security.authentication.server.AuthenticationFilter

</value>
</property>


When I launch the nodename, I have this error :

java.lang.ClassCastException: 
org.apache.hadoop.security.authentication.server.AuthenticationFilter 
cannot be cast to org.apache.hadoop.http.FilterInitializer


Any idea to solve that ?

Thank you to all in advance.



---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@hadoop.apache.org
For additional commands, e-mail: user-help@hadoop.apache.org


Mime
View raw message