Our Community is getting an upgrade! To get everything ready for the relaunch, we’ll be placing the site in read-only mode starting September 21st.
We really appreciate your understanding while we get things set up behind the scenes. Catch up on all the exciting details about the move here.
Need help or have questions? Drop us a line at [email protected]
Created 10-18-2016 02:26 PM
Hello evryone,
I just start with secure my cluster HDP. And i don't well undestand the difference between apache knox and Kerberos.
can you please help my to understand that.
Thanks
AD-B
Created 10-18-2016 02:48 PM
@Baruch AMOUSSOU DJANGBAN Apache Knox is sort of Reverse Proxy which seats on Security Perimeter behind firewall and provide single point of access to underlying Hadoop services. An User will authenticate to Knox which can be configured to use Active Directory/LDAP/SAML-Based Identity Provider. Once User is authenticated with Knox, Knox will use it's own Kerberos Keytab to authenticate with other Hadoop services securely. Note: Apache Knox is not alternative to Kerberos.
Created 10-18-2016 02:48 PM
@Baruch AMOUSSOU DJANGBAN Apache Knox is sort of Reverse Proxy which seats on Security Perimeter behind firewall and provide single point of access to underlying Hadoop services. An User will authenticate to Knox which can be configured to use Active Directory/LDAP/SAML-Based Identity Provider. Once User is authenticated with Knox, Knox will use it's own Kerberos Keytab to authenticate with other Hadoop services securely. Note: Apache Knox is not alternative to Kerberos.
Created 10-18-2016 03:03 PM
@Krishna Pandey thanks for your answer
Created on 10-18-2016 03:05 PM - edited 08-19-2019 01:46 AM
http://hortonworks.com/apache/knox-gateway/
Knox sits on top of Kerberos
Try this out:
http://hortonworks.com/hadoop-tutorial/securing-hadoop-infrastructure-apache-knox/
Created 10-18-2016 03:18 PM
@Timothy Spann thanks for your answer