Preparing for Security Authentication

KeyTab File Authentication Using HSFabric

The KeyTab file authentication requires the jaas-zk.conf(Versions earlier than MRS 3.6.0-LTS), krb5.conf, and user.keytab files.

For details about how to obtain the krb5.conf and user.keytab files, see MRS Application Security Authentication Description.

Versions earlier than MRS 3.6.0-LTS. In the jaas-zk.conf file, principal is the username added for authentication in section MRS Application Security Authentication Description@domain name. The domain name is the value of the default_realm field in the krb5.conf file (For example, HADOOP.COM). keyTab is the path of the user.keytab file.

    Client {
    com.sun.security.auth.module.Krb5LoginModule required
    useKeyTab=true
    keyTab="/opt/client/user.keytab"
    principal="hivetest@System domain name"
    useTicketCache=false
    storeKey=true
    debug=true;
    };

Versions earlier than MRS 3.6.0-LTS. Change the value of keyTab in the jaas-zk.conf file based on the site requirements.

For example:

• Windows Path: "D:\\hetu-examples\\hetu-examples-security\\src\\main\\resources\\user.keytab".
• Linux Path: "/opt/client/user.keytab".

Username and Password Authentication Using HSFabric

Versions earlier than MRS 3.6.0-LTS. Only the username and password are required to implement this authentication using HSFabric.

Username and Password Authentication Using HSBroker

Versions earlier than MRS 3.6.0-LTS. Only the username and password are required to implement this authentication using HSBroker.