Security HDP

[#1]

Hi:

i cant use Kerberos in my company, son which sofware recomend my for autenthication and segurity for de cluster and services???

Mnay thanks again.

[#2 · Accepted solution]

@Roberto Sancho Apache Knox is good alternative but not the best one in comparison with Kerberos.

https://knox.apache.org/

http://hortonworks.com/hadoop/knox-gateway/

[#3]

adn what about oauth???

[#4]

See this ...https://issues.apache.org/jira/browse/HADOOP-11744

[#5]

@Roberto Sancho On seperate note from Knox...

You can integrate the authentication with AD/LDAP. Users can use their AD credentials to access the stack

[#6]

@Roberto Sancho Please let me know if it was useful. I highly recommend Kerberos.

Please read Bosco's reply on this thread

https://community.hortonworks.com/questions/2982/kerberos-adldap-and-ranger.html

[#7]

Does it mean if the cluster is kerberized, we don't need Knox ? Only Ranger installation is enough.

[#8]

@Roberto Sancho you can also use Active Directory as opposed to Kerberos. http://hortonworks.com/blog/enabling-kerberos-hdp-active-directory-integration/

[#9]

@Roberto Sancho , NIS seems to be workaround, but i didn't find it secure. You can get about it in : "http://aput.net/~jheiss/krbldap/howto.html". But i will suggest to go with Kerberos.