Re: How to secure Apache Metron cluster

2020-04-17 Thread Dima Kovalyov
Exactly, without Single Sign-on (SSO) system you will end up with all components in default security configuration. Which is in Nifi for example means none like in Elasticsearch and Storm. While there is still some decentralized security on the Ambari, Grafana and Metron UI side. There are obviou

Re: How to secure Apache Metron cluster

2020-04-17 Thread ThuyT
Thank you Tom for your response. I've been doing some reading about those you suggested; however if I'm not using Kerberos and Active Directory; I'm only using single user account then the multiple layers of security will not work for our environment correct? Thanks, ~ Thuy On Thu, Apr 9, 2020 a

RE: How to secure Apache Metron cluster

2020-04-09 Thread Yerex, Tom
Good morning Thuy, We are focused on multiple layers of security, beginning with the firewall but also local access control and monitoring down to individual processes running in the environment. Kerberos is a mechanism that is discussed as a security mechansim and I have had it working with A