Sharing data through Kerberos

[Rahul Das <ra...@gmail.com>]

Hi,

I am trying out the possibilities of Hadoop with kerberos. Can somebody
clear my doubts in following questions
1) Does the Hadoop with Kerberos prevent the HDFS user data from sharing?
2) If some user wants to share the HDFS data with other user/group then
what are the steps to follow.
3) Can I create a super user who can access all the jobs and data?

-- 
Regards,
Rahul

Re: Sharing data through Kerberos

[Harsh J <ha...@cloudera.com>]

Rahul,

On Mon, Apr 9, 2012 at 1:22 PM, Rahul Das <ra...@gmail.com> wrote:
>
> Hi,
>
> I am trying out the possibilities of Hadoop with kerberos. Can somebody clear my doubts in following questions
> 1) Does the Hadoop with Kerberos prevent the HDFS user data from sharing?


Kerberos adds authentication. What you need on top of that is a proper
permissions setup.

>
> 2) If some user wants to share the HDFS data with other user/group then what are the steps to follow.

Same as how you would do it on any other filesystem. Make sure they
exist in same group and that the data is group readable. Use "fs
-chown" and "fs -chmod" to your benefit here.

> 3) Can I create a super user who can access all the jobs and data?

Your namenode-running user ("hdfs" if you use packages), is a
superuser automatically. To create more superusers, set
"dfs.permissions.supergroup" to a specific group name and all users
that also belong to that specified group name will then be elevated as
HDFS superuser. Be careful about doing this, however. Also see
http://www.cloudera.com/blog/2012/03/authorization-and-authentication-in-hadoop/
for some more details along the same lines.

--
Harsh J