Эх сурвалжийг харах

HUE-8756 [docs] Add missing proxy user information

Romain Rigaux 6 жил өмнө
parent
commit
6b8a6f35a4

+ 1 - 2
dist/README

@@ -1,5 +1,5 @@
 =========================================
 =========================================
-          Hue - Hadoop UI
+        Hue - Data-warehouse Editor
 =========================================
 =========================================
 
 
 Instructions to install the tarball release of Hue are available
 Instructions to install the tarball release of Hue are available
@@ -57,4 +57,3 @@ Search or ask questions on the forum and http://groups.google.com/a/cloudera.org
 Some packages might be required during the 'make install': https://github.com/cloudera/hue#development-prerequisites)
 Some packages might be required during the 'make install': https://github.com/cloudera/hue#development-prerequisites)
 
 
 Download a pre-built packaged version (apt-get/yum install...) of Hue on http://gethue.com
 Download a pre-built packaged version (apt-get/yum install...) of Hue on http://gethue.com
-

+ 49 - 1
docs/docs-site/content/administrator/configuration/external/_index.md

@@ -48,7 +48,7 @@ The `[spark]` section details how to point to [Livy](https://livy.incubator.apac
 The configuration is in `[kafka]` but the service is still experiemental.
 The configuration is in `[kafka]` but the service is still experiemental.
 
 
 
 
-## Solr
+## Solr Search
 
 
 In the `[search]` section of the configuration file, you should
 In the `[search]` section of the configuration file, you should
 specify:
 specify:
@@ -64,3 +64,51 @@ specify:
 
 
     [liboozie]
     [liboozie]
       oozie_url=http://oozie-server.com:11000/oozie
       oozie_url=http://oozie-server.com:11000/oozie
+
+Make sure that the [Share Lib](https://oozie.apache.org/docs/5.1.0/DG_QuickStart.html#Oozie_Share_Lib_Installation) is installed.
+
+To configure Hue as a default proxy user, add the following properties to /etc/oozie/conf/oozie-site.xml:
+
+    <!-- Default proxyuser configuration for Hue -->
+    <property>
+        <name>oozie.service.ProxyUserService.proxyuser.hue.hosts</name>
+        <value>*</value>
+    </property>
+    <property>
+        <name>oozie.service.ProxyUserService.proxyuser.hue.groups</name>
+        <value>*</value>
+    </property>
+
+## HBase
+
+Specify the HBase Thrift Server1 in Hue:
+
+    [hbase]
+    hbase_clusters=(Cluster|localhost:9090)
+
+HBase Impersonation:
+
+Enable impersonation for the Thrift server by adding the following properties to hbase-site.xml on each Thrift gateway:
+
+    <property>
+      <name>hbase.regionserver.thrift.http</name>
+      <value>true</value>
+    </property>
+    <property>
+      <name>hbase.thrift.support.proxyuser</name>
+      <value>true/value>
+    </property>
+
+Note: If you use framed transport, you cannot use doAs impersonation, because SASL does not work with Thrift framed transport.
+
+doAs Impersonation provides a flexible way to use the same client to impersonate multiple principals. doAs is supported only in Thrift 1.
+Enable doAs support by adding the following properties to hbase-site.xml on each Thrift gateway:
+
+    <property>
+      <name>hbase.regionserver.thrift.http</name>
+      <value>true</value>
+    </property>
+    <property>
+      <name>hbase.thrift.support.proxyuser</name>
+      <value>true/value>
+    </property>

+ 48 - 2
docs/docs-site/content/administrator/configuration/files/_index.md

@@ -7,8 +7,7 @@ weight: 4
 
 
 ## HDFS
 ## HDFS
 
 
-Hue supports one HDFS cluster. That cluster should be defined
-under the `[[[default]]]` sub-section.
+Hue supports one HDFS cluster. That cluster should be defined under the `[[[default]]]` sub-section.
 
 
     [hadoop]
     [hadoop]
 
 
@@ -22,6 +21,53 @@ under the `[[[default]]]` sub-section.
 
 
 HA is supported by pointing to the HttpFs service instead of the NameNode.
 HA is supported by pointing to the HttpFs service instead of the NameNode.
 
 
+
+Make sure the HDFS service has in it `hdfs-site.xml`:
+
+    <property>
+    <name>dfs.webhdfs.enable</name>
+    <value>true</value>
+    </property>
+
+Configure Hue as a proxy user for all other users and groups, meaning it may submit a request on behalf of any other user:
+
+WebHDFS: Add to core-site.xml:
+
+        <!-- Hue WebHDFS proxy user setting -->
+        <property>
+        <name>hadoop.proxyuser.hue.hosts</name>
+        <value>*</value>
+        </property>
+        <property>
+        <name>hadoop.proxyuser.hue.groups</name>
+        <value>*</value>
+        </property>
+
+HttpFS: Verify that /etc/hadoop-httpfs/conf/httpfs-site.xml has the following configuration:
+
+        <!-- Hue HttpFS proxy user setting -->
+        <property>
+        <name>httpfs.proxyuser.hue.hosts</name>
+        <value>*</value>
+        </property>
+        <property>
+        <name>httpfs.proxyuser.hue.groups</name>
+        <value>*</value>
+        </property>
+
+If the configuration is not present, add it to /etc/hadoop-httpfs/conf/httpfs-site.xml and restart the HttpFS daemon.
+Verify that core-site.xml has the following configuration:
+
+        <property>
+        <name>hadoop.proxyuser.httpfs.hosts</name>
+        <value>*</value>
+        </property>
+        <property>
+        <name>hadoop.proxyuser.httpfs.groups</name>
+        <value>*</value>
+        </property>
+
+If the configuration is not present, add it to /etc/hadoop/conf/core-site.xml and restart Hadoop.
 ## S3
 ## S3
 
 
 Hue's filebrowser can now allow users to explore, manage, and upload data in an S3 account, in addition to HDFS.
 Hue's filebrowser can now allow users to explore, manage, and upload data in an S3 account, in addition to HDFS.