Author: lmccay Date: Wed May 6 19:15:01 2015 New Revision: 1678065 URL: http://svn.apache.org/r1678065 Log: corrected the secure clusters section and published links for release 0.6.0
Modified: knox/site/books/knox-0-6-0/user-guide.html knox/site/index.html knox/site/issue-tracking.html knox/site/license.html knox/site/mail-lists.html knox/site/project-info.html knox/site/team-list.html knox/trunk/books/0.6.0/config.md knox/trunk/books/0.6.0/config_kerberos.md knox/trunk/src/site/site.xml Modified: knox/site/books/knox-0-6-0/user-guide.html URL: http://svn.apache.org/viewvc/knox/site/books/knox-0-6-0/user-guide.html?rev=1678065&r1=1678064&r2=1678065&view=diff ============================================================================== --- knox/site/books/knox-0-6-0/user-guide.html (original) +++ knox/site/books/knox-0-6-0/user-guide.html Wed May 6 19:15:01 2015 @@ -354,7 +354,57 @@ https://{gateway-host}:{gateway-port}/{g <li>Gateway: jdbc:hive2://{gateway-host}:{gateway-port}/;ssl=true;sslTrustStore={gateway-trust-store-path};trustStorePassword={gateway-trust-store-password}?hive.server2.transport.mode=http;hive.server2.thrift.http.path={gateway-path}/{cluster-name}/hive</li> <li>Cluster: <code>http://{hive-host}:10001/cliservice</code></li> </ul></li> -</ul><p>The values for <code>{gateway-host}</code>, <code>{gateway-port}</code>, <code>{gateway-path}</code> are provided via the gateway configuration file (i.e. <code>{GATEWAY_HOME}/conf/gateway-site.xml</code>).</p><p>The value for <code>{cluster-name}</code> is derived from the file name of the cluster topology descriptor (e.g. <code>{GATEWAY_HOME}/deployments/{cluster-name}.xml</code>).</p><p>The value for <code>{webhdfs-host}</code>, <code>{webhcat-host}</code>, <code>{oozie-host}</code>, <code>{hbase-host}</code> and <code>{hive-host}</code> are provided via the cluster topology descriptor (e.g. <code>{GATEWAY_HOME}/conf/topologies/{cluster-name}.xml</code>).</p><p>Note: The ports 50070, 50111, 11000, 60080 (default 8080) and 10001 are the defaults for WebHDFS, WebHCat, Oozie, Stargate/HBase and Hive respectively. Their values can also be provided via the cluster topology descriptor if your Hadoop cluster uses different ports.</p><h3><a id="Configuration"></a>Configuration</h 3><h4><a id="Topology+Descriptors"></a>Topology Descriptors</h4><p>The topology descriptor files provide the gateway with per-cluster configuration information. This includes configuration for both the providers within the gateway and the services within the Hadoop cluster. These files are located in <code>{GATEWAY_HOME}/conf/topologies</code>. The general outline of this document looks like this.</p> +</ul><p>The values for <code>{gateway-host}</code>, <code>{gateway-port}</code>, <code>{gateway-path}</code> are provided via the gateway configuration file (i.e. <code>{GATEWAY_HOME}/conf/gateway-site.xml</code>).</p><p>The value for <code>{cluster-name}</code> is derived from the file name of the cluster topology descriptor (e.g. <code>{GATEWAY_HOME}/deployments/{cluster-name}.xml</code>).</p><p>The value for <code>{webhdfs-host}</code>, <code>{webhcat-host}</code>, <code>{oozie-host}</code>, <code>{hbase-host}</code> and <code>{hive-host}</code> are provided via the cluster topology descriptor (e.g. <code>{GATEWAY_HOME}/conf/topologies/{cluster-name}.xml</code>).</p><p>Note: The ports 50070, 50111, 11000, 60080 (default 8080) and 10001 are the defaults for WebHDFS, WebHCat, Oozie, Stargate/HBase and Hive respectively. Their values can also be provided via the cluster topology descriptor if your Hadoop cluster uses different ports.</p><h3><a id="Configuration"></a>Configuration</h 3><h3><a id="Related+Cluster+Configuration"></a>Related Cluster Configuration</h3><p>The following configuration changes must be made to your cluster to allow Apache Knox to dispatch requests to the various service components on behalf of end users.</p><h4><a id="Grant+Proxy+privileges+for+Knox+user+in+`core-site.xml`+on+Hadoop+master+nodes"></a>Grant Proxy privileges for Knox user in <code>core-site.xml</code> on Hadoop master nodes</h4><p>Update <code>core-site.xml</code> and add the following lines towards the end of the file.</p><p>Replace FQDN_OF_KNOX_HOST with the fully qualified domain name of the host running the gateway. You can usually find this by running <code>hostname -f</code> on that host.</p><p>You could use * for local developer testing if Knox host does not have static IP.</p> +<pre><code><property> + <name>hadoop.proxyuser.knox.groups</name> + <value>users</value> +</property> +<property> + <name>hadoop.proxyuser.knox.hosts</name> + <value>FQDN_OF_KNOX_HOST</value> +</property> +</code></pre><h4><a id="Grant+proxy+privilege+for+Knox+in+`webhcat-site.xml`+on+Hadoop+master+nodes"></a>Grant proxy privilege for Knox in <code>webhcat-site.xml</code> on Hadoop master nodes</h4><p>Update <code>webhcat-site.xml</code> and add the following lines towards the end of the file.</p><p>Replace FQDN_OF_KNOX_HOST with right value in your cluster. You could use * for local developer testing if Knox host does not have static IP.</p> +<pre><code><property> + <name>webhcat.proxyuser.knox.groups</name> + <value>users</value> +</property> +<property> + <name>webhcat.proxyuser.knox.hosts</name> + <value>FQDN_OF_KNOX_HOST</value> +</property> +</code></pre><h4><a id="Grant+proxy+privilege+for+Knox+in+`oozie-site.xml`+on+Oozie+host"></a>Grant proxy privilege for Knox in <code>oozie-site.xml</code> on Oozie host</h4><p>Update <code>oozie-site.xml</code> and add the following lines towards the end of the file.</p><p>Replace FQDN_OF_KNOX_HOST with right value in your cluster. You could use * for local developer testing if Knox host does not have static IP.</p> +<pre><code><property> + <name>oozie.service.ProxyUserService.proxyuser.knox.groups</name> + <value>users</value> +</property> +<property> + <name>oozie.service.ProxyUserService.proxyuser.knox.hosts</name> + <value>FQDN_OF_KNOX_HOST</value> +</property> +</code></pre><h4><a id="Enable+http+transport+mode+and+use+substitution+in+Hive+Server2"></a>Enable http transport mode and use substitution in Hive Server2</h4><p>Update <code>hive-site.xml</code> and set the following properties on Hive Server2 hosts. Some of the properties may already be in the hive-site.xml. Ensure that the values match the ones below.</p> +<pre><code><property> + <name>hive.server2.allow.user.substitution</name> + <value>true</value> +</property> + +<property> + <name>hive.server2.transport.mode</name> + <value>http</value> + <description>Server transport mode. "binary" or "http".</description> +</property> + +<property> + <name>hive.server2.thrift.http.port</name> + <value>10001</value> + <description>Port number when in HTTP mode.</description> +</property> + +<property> + <name>hive.server2.thrift.http.path</name> + <value>cliservice</value> + <description>Path component of URL endpoint when in HTTP mode.</description> +</property> +</code></pre><h4><a id="Topology+Descriptors"></a>Topology Descriptors</h4><p>The topology descriptor files provide the gateway with per-cluster configuration information. This includes configuration for both the providers within the gateway and the services within the Hadoop cluster. These files are located in <code>{GATEWAY_HOME}/conf/topologies</code>. The general outline of this document looks like this.</p> <pre><code><topology> <gateway> <provider> @@ -1475,34 +1525,7 @@ add_principal -randkey knox/knox@EXAMPLE ktadd -norandkey -k /etc/security/keytabs/knox.service.keytab ktadd -k /etc/security/keytabs/knox.service.keytab -norandkey knox/k...@example.com exit -</code></pre><h4><a id="Grant+Proxy+privileges+for+Knox+user+in+`core-site.xml`+on+Hadoop+master+nodes"></a>Grant Proxy privileges for Knox user in <code>core-site.xml</code> on Hadoop master nodes</h4><p>Update <code>core-site.xml</code> and add the following lines towards the end of the file.</p><p>Replace FQDN_OF_KNOX_HOST with the fully qualified domain name of the host running the gateway. You can usually find this by running <code>hostname -f</code> on that host.</p><p>You could use * for local developer testing if Knox host does not have static IP.</p> -<pre><code><property> - <name>hadoop.proxyuser.knox.groups</name> - <value>users</value> -</property> -<property> - <name>hadoop.proxyuser.knox.hosts</name> - <value>FQDN_OF_KNOX_HOST</value> -</property> -</code></pre><h4><a id="Grant+proxy+privilege+for+Knox+in+`webhcat-site.xml`+on+Hadoop+master+nodes"></a>Grant proxy privilege for Knox in <code>webhcat-site.xml</code> on Hadoop master nodes</h4><p>Update <code>webhcat-site.xml</code> and add the following lines towards the end of the file.</p><p>Replace FQDN_OF_KNOX_HOST with right value in your cluster. You could use * for local developer testing if Knox host does not have static IP.</p> -<pre><code><property> - <name>webhcat.proxyuser.knox.groups</name> - <value>users</value> -</property> -<property> - <name>webhcat.proxyuser.knox.hosts</name> - <value>FQDN_OF_KNOX_HOST</value> -</property> -</code></pre><h4><a id="Grant+proxy+privilege+for+Knox+in+`oozie-site.xml`+on+Oozie+host"></a>Grant proxy privilege for Knox in <code>oozie-site.xml</code> on Oozie host</h4><p>Update <code>oozie-site.xml</code> and add the following lines towards the end of the file.</p><p>Replace FQDN_OF_KNOX_HOST with right value in your cluster. You could use * for local developer testing if Knox host does not have static IP.</p> -<pre><code><property> - <name>oozie.service.ProxyUserService.proxyuser.knox.groups</name> - <value>users</value> -</property> -<property> - <name>oozie.service.ProxyUserService.proxyuser.knox.hosts</name> - <value>FQDN_OF_KNOX_HOST</value> -</property> -</code></pre><h4><a id="Enable+http+transport+mode+and+use+substitution+in+Hive+Server2"></a>Enable http transport mode and use substitution in Hive Server2</h4><p>Update <code>hive-site.xml</code> and set the following properties on Hive Server2 hosts. Some of the properties may already be in the hive-site.xml. Ensure that the values match the ones below.</p><p><property> <name>hive.server2.allow.user.substitution</name> <value>true</value> </property></p><p><property> <name>hive.server2.transport.mode</name> <value>http</value> <description>Server transport mode. “binary” or “http”.</description> </property></p><p><property> <name>hive.server2.thrift.http.port</name> <value>10001</value> <description>Port number when in HTTP mode.</description> </property></p><p><property> <name>hive.server2.thrift.http.path</name> <value>cliservice</value> <description>Path component of URL endpoint when in HTTP mode.</description> </property></p><h4><a id="Copy +knox+keytab+to+Knox+host"></a>Copy knox keytab to Knox host</h4><p>Add unix account for the knox user on Knox host</p> +</code></pre><h4><a id="Copy+knox+keytab+to+Knox+host"></a>Copy knox keytab to Knox host</h4><p>Add unix account for the knox user on Knox host</p> <pre><code>useradd -g hadoop knox </code></pre><p>Copy knox.service.keytab created on KDC host on to your Knox host /etc/knox/conf/knox.service.keytab</p> <pre><code>chown knox knox.service.keytab Modified: knox/site/index.html URL: http://svn.apache.org/viewvc/knox/site/index.html?rev=1678065&r1=1678064&r2=1678065&view=diff ============================================================================== --- knox/site/index.html (original) +++ knox/site/index.html Wed May 6 19:15:01 2015 @@ -83,13 +83,13 @@ <h5>Documentation</h5> <ul> <li class="none"> - <a href="books/knox-0-5-0/knox-0-5-0.html" title="User's Guide">User's Guide</a> + <a href="books/knox-0-6-0/user-guide.html" title="User's Guide">User's Guide</a> </li> <li class="none"> - <a href="books/knox-0-5-0/dev-guide.html" title="Developer's Guide">Developer's Guide</a> + <a href="books/knox-0-6-0/dev-guide.html" title="Developer's Guide">Developer's Guide</a> </li> <li class="none"> - <a href="books/knox-0-5-0/knox-0-5-0.html#Quick+Start" title="Quick Start">Quick Start</a> + <a href="books/knox-0-6-0/user-guide.html#Quick+Start" title="Quick Start">Quick Start</a> </li> <li class="none"> <a href="https://cwiki.apache.org/confluence/display/KNOX/Dependencies" class="externalLink" title="Dependencies">Dependencies</a> @@ -101,6 +101,9 @@ <h5>Releases</h5> <ul> <li class="none"> + <a href="https://cwiki.apache.org/confluence/display/KNOX/Release+0.6.0" class="externalLink" title="0.6.0">0.6.0</a> + </li> + <li class="none"> <a href="https://cwiki.apache.org/confluence/display/KNOX/Release+0.5.1" class="externalLink" title="0.5.1">0.5.1</a> </li> <li class="none"> Modified: knox/site/issue-tracking.html URL: http://svn.apache.org/viewvc/knox/site/issue-tracking.html?rev=1678065&r1=1678064&r2=1678065&view=diff ============================================================================== --- knox/site/issue-tracking.html (original) +++ knox/site/issue-tracking.html Wed May 6 19:15:01 2015 @@ -83,13 +83,13 @@ <h5>Documentation</h5> <ul> <li class="none"> - <a href="books/knox-0-5-0/knox-0-5-0.html" title="User's Guide">User's Guide</a> + <a href="books/knox-0-6-0/user-guide.html" title="User's Guide">User's Guide</a> </li> <li class="none"> - <a href="books/knox-0-5-0/dev-guide.html" title="Developer's Guide">Developer's Guide</a> + <a href="books/knox-0-6-0/dev-guide.html" title="Developer's Guide">Developer's Guide</a> </li> <li class="none"> - <a href="books/knox-0-5-0/knox-0-5-0.html#Quick+Start" title="Quick Start">Quick Start</a> + <a href="books/knox-0-6-0/user-guide.html#Quick+Start" title="Quick Start">Quick Start</a> </li> <li class="none"> <a href="https://cwiki.apache.org/confluence/display/KNOX/Dependencies" class="externalLink" title="Dependencies">Dependencies</a> @@ -101,6 +101,9 @@ <h5>Releases</h5> <ul> <li class="none"> + <a href="https://cwiki.apache.org/confluence/display/KNOX/Release+0.6.0" class="externalLink" title="0.6.0">0.6.0</a> + </li> + <li class="none"> <a href="https://cwiki.apache.org/confluence/display/KNOX/Release+0.5.1" class="externalLink" title="0.5.1">0.5.1</a> </li> <li class="none"> Modified: knox/site/license.html URL: http://svn.apache.org/viewvc/knox/site/license.html?rev=1678065&r1=1678064&r2=1678065&view=diff ============================================================================== --- knox/site/license.html (original) +++ knox/site/license.html Wed May 6 19:15:01 2015 @@ -83,13 +83,13 @@ <h5>Documentation</h5> <ul> <li class="none"> - <a href="books/knox-0-5-0/knox-0-5-0.html" title="User's Guide">User's Guide</a> + <a href="books/knox-0-6-0/user-guide.html" title="User's Guide">User's Guide</a> </li> <li class="none"> - <a href="books/knox-0-5-0/dev-guide.html" title="Developer's Guide">Developer's Guide</a> + <a href="books/knox-0-6-0/dev-guide.html" title="Developer's Guide">Developer's Guide</a> </li> <li class="none"> - <a href="books/knox-0-5-0/knox-0-5-0.html#Quick+Start" title="Quick Start">Quick Start</a> + <a href="books/knox-0-6-0/user-guide.html#Quick+Start" title="Quick Start">Quick Start</a> </li> <li class="none"> <a href="https://cwiki.apache.org/confluence/display/KNOX/Dependencies" class="externalLink" title="Dependencies">Dependencies</a> @@ -101,6 +101,9 @@ <h5>Releases</h5> <ul> <li class="none"> + <a href="https://cwiki.apache.org/confluence/display/KNOX/Release+0.6.0" class="externalLink" title="0.6.0">0.6.0</a> + </li> + <li class="none"> <a href="https://cwiki.apache.org/confluence/display/KNOX/Release+0.5.1" class="externalLink" title="0.5.1">0.5.1</a> </li> <li class="none"> Modified: knox/site/mail-lists.html URL: http://svn.apache.org/viewvc/knox/site/mail-lists.html?rev=1678065&r1=1678064&r2=1678065&view=diff ============================================================================== --- knox/site/mail-lists.html (original) +++ knox/site/mail-lists.html Wed May 6 19:15:01 2015 @@ -83,13 +83,13 @@ <h5>Documentation</h5> <ul> <li class="none"> - <a href="books/knox-0-5-0/knox-0-5-0.html" title="User's Guide">User's Guide</a> + <a href="books/knox-0-6-0/user-guide.html" title="User's Guide">User's Guide</a> </li> <li class="none"> - <a href="books/knox-0-5-0/dev-guide.html" title="Developer's Guide">Developer's Guide</a> + <a href="books/knox-0-6-0/dev-guide.html" title="Developer's Guide">Developer's Guide</a> </li> <li class="none"> - <a href="books/knox-0-5-0/knox-0-5-0.html#Quick+Start" title="Quick Start">Quick Start</a> + <a href="books/knox-0-6-0/user-guide.html#Quick+Start" title="Quick Start">Quick Start</a> </li> <li class="none"> <a href="https://cwiki.apache.org/confluence/display/KNOX/Dependencies" class="externalLink" title="Dependencies">Dependencies</a> @@ -101,6 +101,9 @@ <h5>Releases</h5> <ul> <li class="none"> + <a href="https://cwiki.apache.org/confluence/display/KNOX/Release+0.6.0" class="externalLink" title="0.6.0">0.6.0</a> + </li> + <li class="none"> <a href="https://cwiki.apache.org/confluence/display/KNOX/Release+0.5.1" class="externalLink" title="0.5.1">0.5.1</a> </li> <li class="none"> Modified: knox/site/project-info.html URL: http://svn.apache.org/viewvc/knox/site/project-info.html?rev=1678065&r1=1678064&r2=1678065&view=diff ============================================================================== --- knox/site/project-info.html (original) +++ knox/site/project-info.html Wed May 6 19:15:01 2015 @@ -83,13 +83,13 @@ <h5>Documentation</h5> <ul> <li class="none"> - <a href="books/knox-0-5-0/knox-0-5-0.html" title="User's Guide">User's Guide</a> + <a href="books/knox-0-6-0/user-guide.html" title="User's Guide">User's Guide</a> </li> <li class="none"> - <a href="books/knox-0-5-0/dev-guide.html" title="Developer's Guide">Developer's Guide</a> + <a href="books/knox-0-6-0/dev-guide.html" title="Developer's Guide">Developer's Guide</a> </li> <li class="none"> - <a href="books/knox-0-5-0/knox-0-5-0.html#Quick+Start" title="Quick Start">Quick Start</a> + <a href="books/knox-0-6-0/user-guide.html#Quick+Start" title="Quick Start">Quick Start</a> </li> <li class="none"> <a href="https://cwiki.apache.org/confluence/display/KNOX/Dependencies" class="externalLink" title="Dependencies">Dependencies</a> @@ -101,6 +101,9 @@ <h5>Releases</h5> <ul> <li class="none"> + <a href="https://cwiki.apache.org/confluence/display/KNOX/Release+0.6.0" class="externalLink" title="0.6.0">0.6.0</a> + </li> + <li class="none"> <a href="https://cwiki.apache.org/confluence/display/KNOX/Release+0.5.1" class="externalLink" title="0.5.1">0.5.1</a> </li> <li class="none"> Modified: knox/site/team-list.html URL: http://svn.apache.org/viewvc/knox/site/team-list.html?rev=1678065&r1=1678064&r2=1678065&view=diff ============================================================================== --- knox/site/team-list.html (original) +++ knox/site/team-list.html Wed May 6 19:15:01 2015 @@ -83,13 +83,13 @@ <h5>Documentation</h5> <ul> <li class="none"> - <a href="books/knox-0-5-0/knox-0-5-0.html" title="User's Guide">User's Guide</a> + <a href="books/knox-0-6-0/user-guide.html" title="User's Guide">User's Guide</a> </li> <li class="none"> - <a href="books/knox-0-5-0/dev-guide.html" title="Developer's Guide">Developer's Guide</a> + <a href="books/knox-0-6-0/dev-guide.html" title="Developer's Guide">Developer's Guide</a> </li> <li class="none"> - <a href="books/knox-0-5-0/knox-0-5-0.html#Quick+Start" title="Quick Start">Quick Start</a> + <a href="books/knox-0-6-0/user-guide.html#Quick+Start" title="Quick Start">Quick Start</a> </li> <li class="none"> <a href="https://cwiki.apache.org/confluence/display/KNOX/Dependencies" class="externalLink" title="Dependencies">Dependencies</a> @@ -101,6 +101,9 @@ <h5>Releases</h5> <ul> <li class="none"> + <a href="https://cwiki.apache.org/confluence/display/KNOX/Release+0.6.0" class="externalLink" title="0.6.0">0.6.0</a> + </li> + <li class="none"> <a href="https://cwiki.apache.org/confluence/display/KNOX/Release+0.5.1" class="externalLink" title="0.5.1">0.5.1</a> </li> <li class="none"> Modified: knox/trunk/books/0.6.0/config.md URL: http://svn.apache.org/viewvc/knox/trunk/books/0.6.0/config.md?rev=1678065&r1=1678064&r2=1678065&view=diff ============================================================================== --- knox/trunk/books/0.6.0/config.md (original) +++ knox/trunk/books/0.6.0/config.md Wed May 6 19:15:01 2015 @@ -17,6 +17,90 @@ ### Configuration ### +### Related Cluster Configuration ### + +The following configuration changes must be made to your cluster to allow Apache Knox to +dispatch requests to the various service components on behalf of end users. + +#### Grant Proxy privileges for Knox user in `core-site.xml` on Hadoop master nodes #### + +Update `core-site.xml` and add the following lines towards the end of the file. + +Replace FQDN_OF_KNOX_HOST with the fully qualified domain name of the host running the gateway. +You can usually find this by running `hostname -f` on that host. + +You could use * for local developer testing if Knox host does not have static IP. + + <property> + <name>hadoop.proxyuser.knox.groups</name> + <value>users</value> + </property> + <property> + <name>hadoop.proxyuser.knox.hosts</name> + <value>FQDN_OF_KNOX_HOST</value> + </property> + +#### Grant proxy privilege for Knox in `webhcat-site.xml` on Hadoop master nodes #### + +Update `webhcat-site.xml` and add the following lines towards the end of the file. + +Replace FQDN_OF_KNOX_HOST with right value in your cluster. +You could use * for local developer testing if Knox host does not have static IP. + + <property> + <name>webhcat.proxyuser.knox.groups</name> + <value>users</value> + </property> + <property> + <name>webhcat.proxyuser.knox.hosts</name> + <value>FQDN_OF_KNOX_HOST</value> + </property> + +#### Grant proxy privilege for Knox in `oozie-site.xml` on Oozie host #### + +Update `oozie-site.xml` and add the following lines towards the end of the file. + +Replace FQDN_OF_KNOX_HOST with right value in your cluster. +You could use * for local developer testing if Knox host does not have static IP. + + <property> + <name>oozie.service.ProxyUserService.proxyuser.knox.groups</name> + <value>users</value> + </property> + <property> + <name>oozie.service.ProxyUserService.proxyuser.knox.hosts</name> + <value>FQDN_OF_KNOX_HOST</value> + </property> + +#### Enable http transport mode and use substitution in Hive Server2 #### + +Update `hive-site.xml` and set the following properties on Hive Server2 hosts. +Some of the properties may already be in the hive-site.xml. +Ensure that the values match the ones below. + + <property> + <name>hive.server2.allow.user.substitution</name> + <value>true</value> + </property> + + <property> + <name>hive.server2.transport.mode</name> + <value>http</value> + <description>Server transport mode. "binary" or "http".</description> + </property> + + <property> + <name>hive.server2.thrift.http.port</name> + <value>10001</value> + <description>Port number when in HTTP mode.</description> + </property> + + <property> + <name>hive.server2.thrift.http.path</name> + <value>cliservice</value> + <description>Path component of URL endpoint when in HTTP mode.</description> + </property> + #### Topology Descriptors #### The topology descriptor files provide the gateway with per-cluster configuration information. Modified: knox/trunk/books/0.6.0/config_kerberos.md URL: http://svn.apache.org/viewvc/knox/trunk/books/0.6.0/config_kerberos.md?rev=1678065&r1=1678064&r2=1678065&view=diff ============================================================================== --- knox/trunk/books/0.6.0/config_kerberos.md (original) +++ knox/trunk/books/0.6.0/config_kerberos.md Wed May 6 19:15:01 2015 @@ -40,85 +40,6 @@ ssh into your host running KDC ktadd -k /etc/security/keytabs/knox.service.keytab -norandkey knox/k...@example.com exit -#### Grant Proxy privileges for Knox user in `core-site.xml` on Hadoop master nodes #### - -Update `core-site.xml` and add the following lines towards the end of the file. - -Replace FQDN_OF_KNOX_HOST with the fully qualified domain name of the host running the gateway. -You can usually find this by running `hostname -f` on that host. - -You could use * for local developer testing if Knox host does not have static IP. - - <property> - <name>hadoop.proxyuser.knox.groups</name> - <value>users</value> - </property> - <property> - <name>hadoop.proxyuser.knox.hosts</name> - <value>FQDN_OF_KNOX_HOST</value> - </property> - -#### Grant proxy privilege for Knox in `webhcat-site.xml` on Hadoop master nodes #### - -Update `webhcat-site.xml` and add the following lines towards the end of the file. - -Replace FQDN_OF_KNOX_HOST with right value in your cluster. -You could use * for local developer testing if Knox host does not have static IP. - - <property> - <name>webhcat.proxyuser.knox.groups</name> - <value>users</value> - </property> - <property> - <name>webhcat.proxyuser.knox.hosts</name> - <value>FQDN_OF_KNOX_HOST</value> - </property> - -#### Grant proxy privilege for Knox in `oozie-site.xml` on Oozie host #### - -Update `oozie-site.xml` and add the following lines towards the end of the file. - -Replace FQDN_OF_KNOX_HOST with right value in your cluster. -You could use * for local developer testing if Knox host does not have static IP. - - <property> - <name>oozie.service.ProxyUserService.proxyuser.knox.groups</name> - <value>users</value> - </property> - <property> - <name>oozie.service.ProxyUserService.proxyuser.knox.hosts</name> - <value>FQDN_OF_KNOX_HOST</value> - </property> - -#### Enable http transport mode and use substitution in Hive Server2 #### - -Update `hive-site.xml` and set the following properties on Hive Server2 hosts. -Some of the properties may already be in the hive-site.xml. -Ensure that the values match the ones below. - -<property> - <name>hive.server2.allow.user.substitution</name> - <value>true</value> -</property> - -<property> - <name>hive.server2.transport.mode</name> - <value>http</value> - <description>Server transport mode. "binary" or "http".</description> -</property> - -<property> - <name>hive.server2.thrift.http.port</name> - <value>10001</value> - <description>Port number when in HTTP mode.</description> -</property> - -<property> - <name>hive.server2.thrift.http.path</name> - <value>cliservice</value> - <description>Path component of URL endpoint when in HTTP mode.</description> -</property> - #### Copy knox keytab to Knox host #### Modified: knox/trunk/src/site/site.xml URL: http://svn.apache.org/viewvc/knox/trunk/src/site/site.xml?rev=1678065&r1=1678064&r2=1678065&view=diff ============================================================================== --- knox/trunk/src/site/site.xml (original) +++ knox/trunk/src/site/site.xml Wed May 6 19:15:01 2015 @@ -92,14 +92,15 @@ </menu> <menu name="Documentation"> - <item name="User's Guide" href="http://knox.apache.org/books/knox-0-5-0/knox-0-5-0.html"/> - <item name="Developer's Guide" href="http://knox.apache.org/books/knox-0-5-0/dev-guide.html"/> - <item name="Quick Start" href="http://knox.apache.org/books/knox-0-5-0/knox-0-5-0.html#Quick+Start"/> + <item name="User's Guide" href="http://knox.apache.org/books/knox-0-6-0/user-guide.html"/> + <item name="Developer's Guide" href="http://knox.apache.org/books/knox-0-6-0/dev-guide.html"/> + <item name="Quick Start" href="http://knox.apache.org/books/knox-0-6-0/user-guide.html#Quick+Start"/> <item name="Dependencies" href="https://cwiki.apache.org/confluence/display/KNOX/Dependencies"/> <item name="Wiki" href="https://cwiki.apache.org/confluence/display/KNOX/Index"/> </menu> <menu name="Releases"> + <item name="0.6.0" href="https://cwiki.apache.org/confluence/display/KNOX/Release+0.6.0"/> <item name="0.5.1" href="https://cwiki.apache.org/confluence/display/KNOX/Release+0.5.1"/> <item name="0.5.0" href="https://cwiki.apache.org/confluence/display/KNOX/Release+0.5.0"/> <item name="0.4.0" href="https://cwiki.apache.org/confluence/display/KNOX/Release+0.4.0"/>