security - 连接到安全的 hbase 集群时如何启用 kerberos 身份验证

Question

有没有人在使用 phoenix 连接到安全 hbase 集群时看到以下消息:

15/08/25 23:04:49 DEBUG ipc.AbstractRpcClient: Use SIMPLE authentication for service MasterService, sasl=false
15/08/25 23:04:49 DEBUG ipc.AbstractRpcClient: Connecting to nnn-hdp-sa-********/10.99.40.213:60000
15/08/25 23:04:49 DEBUG ipc.AbstractRpcClient: Use SIMPLE authentication for service MasterService, sasl=false
15/08/25 23:04:49 DEBUG ipc.AbstractRpcClient: Connecting to nnn-hdp-sa-********/10.99.40.213:60000
15/08/25 23:04:49 DEBUG ipc.AbstractRpcClient: Use SIMPLE authentication for service MasterService, sasl=false
15/08/25 23:04:49 DEBUG ipc.AbstractRpcClient: Connecting to nnn-hdp-sa-********/10.99.40.213:60000

好像是用简单的认证方式连接到hbase master服务？我们如何让它使用 kerberos 身份验证？

Answer 1

检查一下:https://phoenix.apache.org/server.html .

The Phoenix Query Server provides an alternative means for interaction with Phoenix and HBase. Soon this will enable access from environments other than the JVM.

特定的 Phoenix 配置(我假设您已经拥有 Phoenix Kerberos 主体):

hbase.security.authentication   When set to "kerberos", the server will attempt to log in before initiating Phoenix connections.    Specified hbase-default.xml
phoenix.queryserver.keytab.file The key to look for keytab file.    unset
phoenix.queryserver.kerberos.principal  The kerberos principal to use when authenticating.  unset
phoenix.queryserver.dns.nameserver  The DNS hostname    default
phoenix.queryserver.dns.interface   The name of the network interface to query for DNS. default