Hi, An KDC can be made to trust an AD, which would solve your need. This https://ccp.cloudera.com/display/CDH4DOC/Integrating+Hadoop+Security+with+Active+Directory is one guide that details on how to set it up.
HBase wraps very little logic over Hadoop's security providing classes, so proper Hadoop security configuration (such as auth_to_local rules, etc.) will work for HBase directly and you can have all your AD users onboard for authentication. Does this answer your question? On Sat, Dec 8, 2012 at 11:43 PM, anil gupta <anilgupt...@gmail.com> wrote: > Hi Harsh, > > Both of the approach you mentioned would be ok for us. We are aware that > Hadoop can be integrated with Active Directory. But, i could not find any > such reference for HBase. Do you have any idea about this? Any link or > documentation on this would be really helpful. > > Thanks, > Anil Gupta > > On Sat, Dec 8, 2012 at 7:54 AM, Harsh J <ha...@cloudera.com> wrote: > >> Do you want to have just AD (via LDAP) based authentication (not sure >> what I'm talking of here, really), or kerberos based authentication >> but with an automatic binding to AD (via LDAP) for all the >> allowed/available users? >> >> On Tue, Dec 4, 2012 at 11:19 AM, anil gupta <anilgupt...@gmail.com> wrote: >> > Hi All, >> > >> > We would like to integrate HBase with our corporate Active Directory for >> > authentication and authorization of HBase users. I have gone through the >> > following links in HBase: >> > >> http://blog.cloudera.com/blog/2012/09/understanding-user-authentication-and-authorization-in-apache-hbase/ >> > http://hbase.apache.org/book/security.html >> > >> > I am a novice at Kerberos and Active Directory(LDAP). So, I would like to >> > know whether HBase can be integrated with Active Directory(LDAP) or not? >> Is >> > anyone using LDAP for Authentication and Authorization in HBase? If yes, >> it >> > would be great if someone can give me high level steps. Is it something >> > similar Kerberos integration with Active Directory in Hadoop? >> > >> > -- >> > Thanks & Regards, >> > Anil Gupta >> >> >> >> -- >> Harsh J >> > > > > -- > Thanks & Regards, > Anil Gupta -- Harsh J
