Can we set hbase.rpc.protection property value as none in Cloudera Hadoop cluster? If yes then how? -
i using cloudera hadoop cluster in kerberos security enabled. in properties file have mention hbase.encryption none. need change value of property hbase.rpc.protection none in hbase-site.xml. tried set property value none failed because in cloudera shows authentication, privacy , integrity option. have solution this? in advance.
you can choose authentication
, integrity
, or privacy
hbase.rpc.protection. when set none, defaults authentication
. can seen in hbase-client/src/main/java/org/apache/hadoop/hbase/security/saslutil.java:
/** * @param rpcprotection value of 'hbase.rpc.protection' configuration. * @return map values sasl properties. */ static map<string, string> initsaslproperties(string rpcprotection) { string saslqop; if (rpcprotection.isempty()) { saslqop = qualityofprotection.authentication.getsaslqop(); } else { string[] qops = rpcprotection.split(","); ....
configuring encrypted hbase data transport using cloudera manager states following:
search hbase transport security property , select 1 of following:
- authentication: enables simple authentication using kerberos.
integrity: checks integrity of data received ensure not corrupted in transit. selecting integrity enables authentication.
privacy: ensures privacy encrypting data in transit using tls/ssl encryption. selecting privacy enables authentication , integrity. set property privacy enable secure rpc transport.
so choosing authentication
or integrity
not encrypting rpc traffic.
Comments
Post a Comment