Эх сурвалжийг харах

HUE-8756 [docs] Add missing proxy user information

Romain Rigaux 6 жил өмнө
parent
commit
6b8a6f35a4

+ 1 - 2
dist/README

@@ -1,5 +1,5 @@
 =========================================
-          Hue - Hadoop UI
+        Hue - Data-warehouse Editor
 =========================================
 
 Instructions to install the tarball release of Hue are available
@@ -57,4 +57,3 @@ Search or ask questions on the forum and http://groups.google.com/a/cloudera.org
 Some packages might be required during the 'make install': https://github.com/cloudera/hue#development-prerequisites)
 
 Download a pre-built packaged version (apt-get/yum install...) of Hue on http://gethue.com
-

+ 49 - 1
docs/docs-site/content/administrator/configuration/external/_index.md

@@ -48,7 +48,7 @@ The `[spark]` section details how to point to [Livy](https://livy.incubator.apac
 The configuration is in `[kafka]` but the service is still experiemental.
 
 
-## Solr
+## Solr Search
 
 In the `[search]` section of the configuration file, you should
 specify:
@@ -64,3 +64,51 @@ specify:
 
     [liboozie]
       oozie_url=http://oozie-server.com:11000/oozie
+
+Make sure that the [Share Lib](https://oozie.apache.org/docs/5.1.0/DG_QuickStart.html#Oozie_Share_Lib_Installation) is installed.
+
+To configure Hue as a default proxy user, add the following properties to /etc/oozie/conf/oozie-site.xml:
+
+    <!-- Default proxyuser configuration for Hue -->
+    <property>
+        <name>oozie.service.ProxyUserService.proxyuser.hue.hosts</name>
+        <value>*</value>
+    </property>
+    <property>
+        <name>oozie.service.ProxyUserService.proxyuser.hue.groups</name>
+        <value>*</value>
+    </property>
+
+## HBase
+
+Specify the HBase Thrift Server1 in Hue:
+
+    [hbase]
+    hbase_clusters=(Cluster|localhost:9090)
+
+HBase Impersonation:
+
+Enable impersonation for the Thrift server by adding the following properties to hbase-site.xml on each Thrift gateway:
+
+    <property>
+      <name>hbase.regionserver.thrift.http</name>
+      <value>true</value>
+    </property>
+    <property>
+      <name>hbase.thrift.support.proxyuser</name>
+      <value>true/value>
+    </property>
+
+Note: If you use framed transport, you cannot use doAs impersonation, because SASL does not work with Thrift framed transport.
+
+doAs Impersonation provides a flexible way to use the same client to impersonate multiple principals. doAs is supported only in Thrift 1.
+Enable doAs support by adding the following properties to hbase-site.xml on each Thrift gateway:
+
+    <property>
+      <name>hbase.regionserver.thrift.http</name>
+      <value>true</value>
+    </property>
+    <property>
+      <name>hbase.thrift.support.proxyuser</name>
+      <value>true/value>
+    </property>

+ 48 - 2
docs/docs-site/content/administrator/configuration/files/_index.md

@@ -7,8 +7,7 @@ weight: 4
 
 ## HDFS
 
-Hue supports one HDFS cluster. That cluster should be defined
-under the `[[[default]]]` sub-section.
+Hue supports one HDFS cluster. That cluster should be defined under the `[[[default]]]` sub-section.
 
     [hadoop]
 
@@ -22,6 +21,53 @@ under the `[[[default]]]` sub-section.
 
 HA is supported by pointing to the HttpFs service instead of the NameNode.
 
+
+Make sure the HDFS service has in it `hdfs-site.xml`:
+
+    <property>
+    <name>dfs.webhdfs.enable</name>
+    <value>true</value>
+    </property>
+
+Configure Hue as a proxy user for all other users and groups, meaning it may submit a request on behalf of any other user:
+
+WebHDFS: Add to core-site.xml:
+
+        <!-- Hue WebHDFS proxy user setting -->
+        <property>
+        <name>hadoop.proxyuser.hue.hosts</name>
+        <value>*</value>
+        </property>
+        <property>
+        <name>hadoop.proxyuser.hue.groups</name>
+        <value>*</value>
+        </property>
+
+HttpFS: Verify that /etc/hadoop-httpfs/conf/httpfs-site.xml has the following configuration:
+
+        <!-- Hue HttpFS proxy user setting -->
+        <property>
+        <name>httpfs.proxyuser.hue.hosts</name>
+        <value>*</value>
+        </property>
+        <property>
+        <name>httpfs.proxyuser.hue.groups</name>
+        <value>*</value>
+        </property>
+
+If the configuration is not present, add it to /etc/hadoop-httpfs/conf/httpfs-site.xml and restart the HttpFS daemon.
+Verify that core-site.xml has the following configuration:
+
+        <property>
+        <name>hadoop.proxyuser.httpfs.hosts</name>
+        <value>*</value>
+        </property>
+        <property>
+        <name>hadoop.proxyuser.httpfs.groups</name>
+        <value>*</value>
+        </property>
+
+If the configuration is not present, add it to /etc/hadoop/conf/core-site.xml and restart Hadoop.
 ## S3
 
 Hue's filebrowser can now allow users to explore, manage, and upload data in an S3 account, in addition to HDFS.