日韩性视频-久久久蜜桃-www中文字幕-在线中文字幕av-亚洲欧美一区二区三区四区-撸久久-香蕉视频一区-久久无码精品丰满人妻-国产高潮av-激情福利社-日韩av网址大全-国产精品久久999-日本五十路在线-性欧美在线-久久99精品波多结衣一区-男女午夜免费视频-黑人极品ⅴideos精品欧美棵-人人妻人人澡人人爽精品欧美一区-日韩一区在线看-欧美a级在线免费观看

歡迎訪問 生活随笔!

生活随笔

當前位置: 首頁 > 编程资源 > 编程问答 >内容正文

编程问答

hue 3.1.2 启用kerberose认证

發布時間:2023/12/31 编程问答 33 豆豆
生活随笔 收集整理的這篇文章主要介紹了 hue 3.1.2 启用kerberose认证 小編覺得挺不錯的,現在分享給大家,幫大家做個參考.

hue安裝與編譯

系統環境是Redhat 7.5
基礎數據平臺是ambari 2.7.4
啟用了kerberose認證

1.hue的編譯

1.1.下載hue

下載hue 4.0以下的,因為需要python 3.0及以上的版本,要重新把python進行升級
這里我是從git上面上面下載 hue 3.1.2
解壓至/opt/hue

1.2.編譯hue

安裝依賴

yum install ant asciidoc cyrus-sasl-devel cyrus-sasl-gssapi cyrus-sasl-plain gcc gcc-c++ krb5-devel libffi-devel libxml2-devel libxslt-devel make mysql mysql-devel openldap-devel python-devel sqlite-devel gmp-devel

安裝mvn
下載mvn 3.6.0,解壓至 /usr/local/mvn3.6.0,在環境變量加入mvn
如下:

export MAVEN_HOME=/usr/local/maven-3.6.0 export PATH USER LOGNAME MAIL HOSTNAME HISTSIZE HISTCONTROL export PATH=$PATH:$MAVEN_HOME/bin

進入 /opt/hue 執行 make apps

2.hue 的安裝

hue的安裝位置在/opt/hue
2.1.初始化keytab文件
在kerberose的kdc服務器上面的Kadmin.local加入princ,設置密碼,并生成keytab文件

addprinc hue/cebcstag2@TCLOUD.COM addprinc -pw 111111 hue/cebcstag2 ktadd -k /etc/security/keytabs/hue.keytab -norandkey hue/cebcstag2

修改過期期限

modprinc -maxrenewlife 90day krbtgt/TCLOUD.COM@TCLOUD.COM modprinc -maxrenewlife 90day +allow_renewable hue/cebcstag2@TCLOUD.COM

2.2.hue無數據改為mysql

用的元數據庫默認用的是sqllite,把元數據庫改成mysql

2.2.1.首先創建元數據庫

CREATE DATABASE hue; use hue; CREATE USER 'hue'@'%' IDENTIFIED BY 'abc123'; GRANT ALL PRIVILEGES ON *.* TO 'hue'@'%'; CREATE USER 'hue'@'localhost' IDENTIFIED BY 'abc123'; GRANT ALL PRIVILEGES ON *.* TO 'hue'@'localhost'; CREATE USER 'hue'@'cebcstag2' IDENTIFIED BY 'abc123'; GRANT ALL PRIVILEGES ON *.* TO 'hue'@'cebcstag2'; FLUSH PRIVILEGES;

2.2.2.元數據改成mysql

在 /opt/hue/desktop/conf/pseudo-distributed.ini 改變如下配置節

[[database]]engine=mysqlhost=cebcstag1port=3306user=huepassword=abc123 name=hue

運行如下命令初始化元數據庫

/opt/hue/build/env/bin/hue syncdb /opt/hue/build/env/bin/hue migrate --merge

2.2.3.為了hue界面支持中文,改變其字符集

進入mysql,執行如下

alter database hue character set latin1; use hue; alter table beeswax_queryhistory modify `query` longtext character set utf8 collate utf8_general_ci not null; alter table desktop_document2 modify column name varchar(255) character set utf8; alter table desktop_document2 modify column description longtext character set utf8; alter table desktop_document2 modify column search longtext character set utf8;

2.3.創建hue的用戶組

groupadd hueuseradd -m -g hue hue

2.4.在ambari中,加入的配置如下

core-site.xml

hadoop.proxyuser.hue.groups * hadoop.proxyuser.hue.hosts *

hive-site.xml中加入如下配置
hive.server2.proxy.user

2.5.修改hue的配置文件

/opt/hue/desktop/conf/pseudo-distributed.ini

2.5.1.Hive配置節

[beeswax]# Host where HiveServer2 is running.# If Kerberos security is enabled, use fully-qualified domain name (FQDN).hive_server_host=cebcstag2# Port where HiveServer2 Thrift server runs on.## hive_server_port=10000# Hive configuration directory, where hive-site.xml is locatedhive_conf_dir=/etc/hive/conf

2.5.2.kerberose配置節

[[kerberos]]# Path to Hue's Kerberos keytab filehue_keytab=/etc/security/keytabs/hue.keytab# Kerberos principal name for Huehue_principal=hue/cebcstag2@TCLOUD.COM# Path to kinitkinit_path=/usr/bin/kinit

2.5.3.hadoop配置節

[hadoop]

# Configuration for HDFS NameNode# ------------------------------------------------------------------------[[hdfs_clusters]]# HA support by using HttpFs[[[default]]]# Enter the filesystem urifs_defaultfs=hdfs://cebcstag1:8020# NameNode logical name.## logical_name=# Use WebHdfs/HttpFs as the communication mechanism.# Domain should be the NameNode or HttpFs host.# Default port is 14000 for HttpFs.webhdfs_url=http://cebcstag1:50070/webhdfs/v1# Change this if your HDFS cluster is Kerberos-securedsecurity_enabled=true# In secure mode (HTTPS), if SSL certificates from YARN Rest APIs# have to be verified against certificate authority## ssl_cert_ca_verify=True# Directory of the Hadoop configurationhadoop_conf_dir=/etc/hadoop/conf

2.6.啟動hue

注意 /opt/hue的用戶組要改成hue
切換 hue用戶

su hue /opt/hue/build/env/bin/supervisor -d

注意事項:

如果出現如下錯誤:

Could not start SASL: Error in sasl_client_start (-4) SASL(-4): no mechanism available: No worthy mechs found yum install cyrus-sasl-plain cyrus-sasl-devel cyrus-sasl-gssapi


libmysqlclient.so.18 cannot open shared object file
安裝 mysql-devel

yum -y install mysql-devel

總結

以上是生活随笔為你收集整理的hue 3.1.2 启用kerberose认证的全部內容,希望文章能夠幫你解決所遇到的問題。

如果覺得生活随笔網站內容還不錯,歡迎將生活随笔推薦給好友。