關(guān)于Ambari的安全、訪問控制在這里有非常詳細(xì)的介紹。

http://pivotalhd.docs.pivotal.io/docs/security-guide-ambari-2.1.2.html

另外還可以參考這一篇

https://community.hortonworks.com/articles/39865/enabling-https-for-ambariserver-and-troubleshootin.html

Ambari用來管理大數(shù)據(jù)集群非常的方便，但是默認(rèn)只支持HTTP協(xié)議，需要手動安裝、配置才能支持HTTPS協(xié)議。
步驟如下：
1、登陸到Ambari Server所在主機(jī)，依次執(zhí)行如下命令

1） openssl genrsa -out $wserver.key 2048 2） openssl req -new -key $wserver.key -out $wserver.csr 3） openssl x509 -req -days 365 -in $wserver.csr -signkey $wserver.key -out $wserver.crt注：$wserver 就是Ambari Server 的host nameThe certificate you use must be PEM-encoded, not DER-encoded. If you attempt to use a DER-encoded certificate, you see the following error:unable to load certificate 140109766494024:error:0906D06C:PEM routines:PEM_read_bio:no start line:pem_lib.c :698:Expecting: TRUSTED CERTIFICATEYou can convert a DER-encoded certificate to a PEM-encoded certificate using the following command:openssl x509 -in cert.crt -inform der -outform pem -out cert.pemwhere cert.crt is the DER-encoded certificate and cert.pem is the resulting PEM-encoded certificate.2、執(zhí)行 ambari-server setup-security命令Select 1 for Enable HTTPS for Ambari server.Respond y to Do you want to configure HTTPS ?Select the port you want to use for SSL. The default port number is 8443.Provide the complete path to your certificate file ($wserver.crt from above) and private key file ($wserver.key from above).Provide the password for the private key.Start or restart the Serverambari-server restart

總結(jié)

以上是生活随笔為你收集整理的Ambari实现HTTPS登陆的全部內(nèi)容，希望文章能夠幫你解決所遇到的問題。

如果覺得生活随笔網(wǎng)站內(nèi)容還不錯，歡迎將生活随笔推薦給好友。