Created 10-18-2016 02:26 PM
Hello evryone,
I just start with secure my cluster HDP. And i don't well undestand the difference between apache knox and Kerberos.
can you please help my to understand that.
Thanks
AD-B
Created 10-18-2016 02:48 PM
@Baruch AMOUSSOU DJANGBAN Apache Knox is sort of Reverse Proxy which seats on Security Perimeter behind firewall and provide single point of access to underlying Hadoop services. An User will authenticate to Knox which can be configured to use Active Directory/LDAP/SAML-Based Identity Provider. Once User is authenticated with Knox, Knox will use it's own Kerberos Keytab to authenticate with other Hadoop services securely. Note: Apache Knox is not alternative to Kerberos.
Created 10-18-2016 02:48 PM
@Baruch AMOUSSOU DJANGBAN Apache Knox is sort of Reverse Proxy which seats on Security Perimeter behind firewall and provide single point of access to underlying Hadoop services. An User will authenticate to Knox which can be configured to use Active Directory/LDAP/SAML-Based Identity Provider. Once User is authenticated with Knox, Knox will use it's own Kerberos Keytab to authenticate with other Hadoop services securely. Note: Apache Knox is not alternative to Kerberos.
Created 10-18-2016 03:03 PM
@Krishna Pandey thanks for your answer
Created on 10-18-2016 03:05 PM - edited 08-19-2019 01:46 AM
http://hortonworks.com/apache/knox-gateway/
Knox sits on top of Kerberos
Try this out:
http://hortonworks.com/hadoop-tutorial/securing-hadoop-infrastructure-apache-knox/
Created 10-18-2016 03:18 PM
@Timothy Spann thanks for your answer