knox-commits mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From dillido...@apache.org
Subject svn commit: r1589917 - /knox/site/books/knox-0-4-0/knox-0-4-0.html
Date Fri, 25 Apr 2014 00:34:16 GMT
Author: dillidorai
Date: Fri Apr 25 00:34:15 2014
New Revision: 1589917

URL: http://svn.apache.org/r1589917
Log:
KNOX-331: Obsolete Docs for Secure Clusters, add hive notes

Modified:
    knox/site/books/knox-0-4-0/knox-0-4-0.html

Modified: knox/site/books/knox-0-4-0/knox-0-4-0.html
URL: http://svn.apache.org/viewvc/knox/site/books/knox-0-4-0/knox-0-4-0.html?rev=1589917&r1=1589916&r2=1589917&view=diff
==============================================================================
--- knox/site/books/knox-0-4-0/knox-0-4-0.html (original)
+++ knox/site/books/knox-0-4-0/knox-0-4-0.html Fri Apr 25 00:34:15 2014
@@ -991,7 +991,7 @@ exit
     <name>webhcat.proxyuser.knox.hosts</name>
     <value>FQDN_OF_KNOX_HOST</value>
 </property>
-</code></pre><h4><a id="Grant+proxy+privilege+for+Knox+in+`webhcat-stie.xml`+on+Hadoop+master+nodes"></a>Grant
proxy privilege for Knox in <code>webhcat-stie.xml</code> on Hadoop master nodes</h4><p>Update
<code>webhcat-site.xml</code> and add the following lines towards the end of the
file.</p><p>Replace FQDN_OF_KNOX_HOST with right value in your cluster. You could
use * for local developer testing if Knox host does not have static IP.</p>
+</code></pre><h4><a id="Grant+proxy+privilege+for+Knox+in+`webhcat-site.xml`+on+Hadoop+master+nodes"></a>Grant
proxy privilege for Knox in <code>webhcat-site.xml</code> on Hadoop master nodes</h4><p>Update
<code>webhcat-site.xml</code> and add the following lines towards the end of the
file.</p><p>Replace FQDN_OF_KNOX_HOST with right value in your cluster. You could
use * for local developer testing if Knox host does not have static IP.</p>
 <pre><code>&lt;property&gt;
     &lt;name&gt;hadoop.proxyuser.knox.groups&lt;/name&gt;
     &lt;value&gt;users&lt;/value&gt;
@@ -1000,7 +1000,7 @@ exit
     &lt;name&gt;hadoop.proxyuser.knox.hosts&lt;/name&gt;
     &lt;value&gt;FQDN_OF_KNOX_HOST&lt;/value&gt;
 &lt;/property&gt;
-</code></pre><h4><a id="Grant+proxy+privilege+for+Knox+in+`oozie-stie.xml`+on+Oozie+host"></a>Grant
proxy privilege for Knox in <code>oozie-stie.xml</code> on Oozie host</h4><p>Update
<code>oozie-site.xml</code> and add the following lines towards the end of the
file.</p><p>Replace FQDN_OF_KNOX_HOST with right value in your cluster. You could
use * for local developer testing if Knox host does not have static IP.</p>
+</code></pre><h4><a id="Grant+proxy+privilege+for+Knox+in+`oozie-site.xml`+on+Oozie+host"></a>Grant
proxy privilege for Knox in <code>oozie-site.xml</code> on Oozie host</h4><p>Update
<code>oozie-site.xml</code> and add the following lines towards the end of the
file.</p><p>Replace FQDN_OF_KNOX_HOST with right value in your cluster. You could
use * for local developer testing if Knox host does not have static IP.</p>
 <pre><code>&lt;property&gt;
    &lt;name&gt;oozie.service.ProxyUserService.proxyuser.knox.groups&lt;/name&gt;
    &lt;value&gt;users&lt;/value&gt;
@@ -1009,7 +1009,7 @@ exit
    &lt;name&gt;oozie.service.ProxyUserService.proxyuser.knox.hosts&lt;/name&gt;
    &lt;value&gt;FQDN_OF_KNOX_HOST&lt;/value&gt;
 &lt;/property&gt;
-</code></pre><h4><a id="Copy+knox+keytab+to+Knox+host"></a>Copy
knox keytab to Knox host</h4><p>Add unix account for the knox user on Knox host</p>
+</code></pre><h4><a id="Enable+http+transport+mode+and+use+substitution+in+Hive+Server2"></a>Enable
http transport mode and use substitution in Hive Server2</h4><p>Update <code>hive-site.xml</code>
and set the following properties on Hive Server2 hosts. Some of the properties may already
be in the hive-site.xml. Ensure that the values match the ones below.</p><p><property>
 <name>hive.server2.allow.user.substitution</name>  <value>true</value>
</property></p><p><property>  <name>hive.server2.transport.mode</name>
 <value>http</value>  <description>Server transport mode. &ldquo;binary&rdquo;
or &ldquo;http&rdquo;.</description> </property></p><p><property>
 <name>hive.server2.thrift.http.port</name>  <value>10001</value>
 <description>Port number when in HTTP mode.</description> </property></p><p><property>
 <name>hive.server2.thrift.http.path</name>  <value>cliservice</value>
 <description>Path component of URL endpoint when in HTTP mode.</description>
</property></p><h4><a id="Copy
 +knox+keytab+to+Knox+host"></a>Copy knox keytab to Knox host</h4><p>Add
unix account for the knox user on Knox host</p>
 <pre><code>useradd -g hadoop knox
 </code></pre><p>Copy knox.service.keytab created on KDC host on to your
Knox host /etc/knox/conf/knox.service.keytab</p>
 <pre><code>chown knox knox.service.keytab



Mime
View raw message