hue.ini 36 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799800801802803804805806807808809810811812813814815816817818819820821822823824825826827828829830831832833834835836837838839840841842843844845846847848849850851852853854855856857858859860861862863864865866867868869870871872873874875876877878879880881882883884885886887888889890891892893894895896897898899900901902903904905906907908909910911912913914915916917918919920921922923924925926927928929930931932933934935936937938939940941942943944945946947948949950951952953954955956957958959960961962963964965966967968969970971972973974975976977978979980981982983984985986987988989990991992993994995996997998999100010011002100310041005100610071008100910101011101210131014101510161017101810191020102110221023102410251026102710281029103010311032103310341035103610371038103910401041104210431044104510461047104810491050105110521053105410551056105710581059106010611062
  1. # Hue configuration file
  2. # ===================================
  3. #
  4. # For complete documentation about the contents of this file, run
  5. # $ <hue_root>/build/env/bin/hue config_help
  6. #
  7. # All .ini files under the current directory are treated equally. Their
  8. # contents are merged to form the Hue configuration, which can
  9. # can be viewed on the Hue at
  10. # http://<hue_host>:<port>/dump_config
  11. ###########################################################################
  12. # General configuration for core Desktop features (authentication, etc)
  13. ###########################################################################
  14. [desktop]
  15. # Set this to a random string, the longer the better.
  16. # This is used for secure hashing in the session store.
  17. secret_key=
  18. # Webserver listens on this address and port
  19. http_host=0.0.0.0
  20. http_port=8888
  21. # Time zone name
  22. time_zone=America/Los_Angeles
  23. # Enable or disable Django debug mode.
  24. django_debug_mode=false
  25. # Enable or disable database debug mode.
  26. ## database_logging=false
  27. # Enable or disable backtrace for server error
  28. http_500_debug_mode=false
  29. # Enable or disable memory profiling.
  30. ## memory_profiler=false
  31. # Server email for internal error messages
  32. ## django_server_email='hue@localhost.localdomain'
  33. # Email backend
  34. ## django_email_backend=django.core.mail.backends.smtp.EmailBackend
  35. # Webserver runs as this user
  36. ## server_user=hue
  37. ## server_group=hue
  38. # This should be the Hue admin and proxy user
  39. ## default_user=hue
  40. # This should be the hadoop cluster admin
  41. ## default_hdfs_superuser=hdfs
  42. # If set to false, runcpserver will not actually start the web server.
  43. # Used if Apache is being used as a WSGI container.
  44. ## enable_server=yes
  45. # Number of threads used by the CherryPy web server
  46. ## cherrypy_server_threads=40
  47. # Filename of SSL Certificate
  48. ## ssl_certificate=
  49. # Filename of SSL RSA Private Key
  50. ## ssl_private_key=
  51. # SSL certificate password
  52. ## ssl_password=
  53. # Execute this script to produce the SSL password. This will be used when `ssl_password` is not set.
  54. ## ssl_password_script=
  55. # List of allowed and disallowed ciphers in cipher list format.
  56. # See http://www.openssl.org/docs/apps/ciphers.html for more information on cipher list format.
  57. ## ssl_cipher_list=DEFAULT:!aNULL:!eNULL:!LOW:!EXPORT:!SSLv2
  58. # LDAP username and password of the hue user used for LDAP authentications.
  59. # Set it to use LDAP Authentication with HiveServer2 and Impala.
  60. ## ldap_username=hue
  61. ## ldap_password=
  62. # Default encoding for site data
  63. ## default_site_encoding=utf-8
  64. # Help improve Hue with anonymous usage analytics.
  65. # Use Google Analytics to see how many times an application or specific section of an application is used, nothing more.
  66. ## collect_usage=true
  67. # Support for HTTPS termination at the load-balancer level with SECURE_PROXY_SSL_HEADER.
  68. ## secure_proxy_ssl_header=false
  69. # Comma-separated list of Django middleware classes to use.
  70. # See https://docs.djangoproject.com/en/1.4/ref/middleware/ for more details on middlewares in Django.
  71. ## middleware=desktop.auth.backend.LdapSynchronizationBackend
  72. # Comma-separated list of regular expressions, which match the redirect URL.
  73. # For example, to restrict to your local domain and FQDN, the following value can be used:
  74. # ^\/.*$,^http:\/\/www.mydomain.com\/.*$
  75. ## redirect_whitelist=^\/.*$
  76. # Comma separated list of apps to not load at server startup.
  77. # e.g.: pig,zookeeper
  78. ## app_blacklist=
  79. # The directory where to store the auditing logs. Auditing is disable if the value is empty.
  80. # e.g. /var/log/hue/audit.log
  81. ## audit_event_log_dir=
  82. # Size in KB/MB/GB for audit log to rollover.
  83. ## audit_log_max_file_size=100MB
  84. # A json file containing a list of log redaction rules for cleaning sensitive data
  85. # from log files. It is defined as:
  86. #
  87. # {
  88. # "version": 1,
  89. # "rules": [
  90. # {
  91. # "description": "This is the first rule",
  92. # "trigger": "triggerstring 1",
  93. # "search": "regex 1",
  94. # "replace": "replace 1"
  95. # },
  96. # {
  97. # "description": "This is the second rule",
  98. # "trigger": "triggerstring 2",
  99. # "search": "regex 2",
  100. # "replace": "replace 2"
  101. # }
  102. # ]
  103. # }
  104. #
  105. # Redaction works by searching a string for the [TRIGGER] string. If found,
  106. # the [REGEX] is used to replace sensitive information with the
  107. # [REDACTION_MASK]. If specified with `log_redaction_string`, the
  108. # `log_redaction_string` rules will be executed after the
  109. # `log_redaction_file` rules.
  110. #
  111. # For example, here is a file that would redact passwords and social security numbers:
  112. # {
  113. # "version": 1,
  114. # "rules": [
  115. # {
  116. # "description": "Redact passwords",
  117. # "trigger": "password",
  118. # "search": "password=\".*\"",
  119. # "replace": "password=\"???\""
  120. # },
  121. # {
  122. # "description": "Redact social security numbers",
  123. # "trigger": "",
  124. # "search": "\d{3}-\d{2}-\d{4}",
  125. # "replace": "XXX-XX-XXXX"
  126. # }
  127. # ]
  128. # }
  129. ## log_redaction_file=
  130. # Comma separated list of strings representing the host/domain names that the Hue server can serve.
  131. # e.g.: localhost,domain1,*
  132. ## allowed_hosts=*
  133. # Administrators
  134. # ----------------
  135. [[django_admins]]
  136. ## [[[admin1]]]
  137. ## name=john
  138. ## email=john@doe.com
  139. # UI customizations
  140. # -------------------
  141. [[custom]]
  142. # Top banner HTML code
  143. # e.g. <H2>Test Lab A2 Hue Services</H2>
  144. ## banner_top_html=
  145. # Configuration options for user authentication into the web application
  146. # ------------------------------------------------------------------------
  147. [[auth]]
  148. # Authentication backend. Common settings are:
  149. # - django.contrib.auth.backends.ModelBackend (entirely Django backend)
  150. # - desktop.auth.backend.AllowAllBackend (allows everyone)
  151. # - desktop.auth.backend.AllowFirstUserDjangoBackend
  152. # (Default. Relies on Django and user manager, after the first login)
  153. # - desktop.auth.backend.LdapBackend
  154. # - desktop.auth.backend.PamBackend
  155. # - desktop.auth.backend.SpnegoDjangoBackend
  156. # - desktop.auth.backend.RemoteUserDjangoBackend
  157. # - libsaml.backend.SAML2Backend
  158. # - libopenid.backend.OpenIDBackend
  159. # - liboauth.backend.OAuthBackend
  160. # (Support Twitter, Facebook, Google+ and Linkedin
  161. ## backend=desktop.auth.backend.AllowFirstUserDjangoBackend
  162. # The service to use when querying PAM.
  163. ## pam_service=login
  164. # When using the desktop.auth.backend.RemoteUserDjangoBackend, this sets
  165. # the normalized name of the header that contains the remote user.
  166. # The HTTP header in the request is converted to a key by converting
  167. # all characters to uppercase, replacing any hyphens with underscores
  168. # and adding an HTTP_ prefix to the name. So, for example, if the header
  169. # is called Remote-User that would be configured as HTTP_REMOTE_USER
  170. #
  171. # Defaults to HTTP_REMOTE_USER
  172. ## remote_user_header=HTTP_REMOTE_USER
  173. # Synchronize a users groups when they login
  174. ## sync_groups_on_login=false
  175. # Ignore the case of usernames when searching for existing users.
  176. # Only supported in remoteUserDjangoBackend.
  177. ## ignore_username_case=true
  178. # Ignore the case of usernames when searching for existing users to authenticate with.
  179. # Only supported in remoteUserDjangoBackend.
  180. ## force_username_lowercase=true
  181. # Users will expire after they have not logged in for 'n' amount of seconds.
  182. # A negative number means that users will never expire.
  183. ## expires_after=-1
  184. # Apply 'expires_after' to superusers.
  185. ## expire_superusers=true
  186. # Configuration options for connecting to LDAP and Active Directory
  187. # -------------------------------------------------------------------
  188. [[ldap]]
  189. # The search base for finding users and groups
  190. ## base_dn="DC=mycompany,DC=com"
  191. # URL of the LDAP server
  192. ## ldap_url=ldap://auth.mycompany.com
  193. # A PEM-format file containing certificates for the CA's that
  194. # Hue will trust for authentication over TLS.
  195. # The certificate for the CA that signed the
  196. # LDAP server certificate must be included among these certificates.
  197. # See more here http://www.openldap.org/doc/admin24/tls.html.
  198. ## ldap_cert=
  199. ## use_start_tls=true
  200. # Distinguished name of the user to bind as -- not necessary if the LDAP server
  201. # supports anonymous searches
  202. ## bind_dn="CN=ServiceAccount,DC=mycompany,DC=com"
  203. # Password of the bind user -- not necessary if the LDAP server supports
  204. # anonymous searches
  205. ## bind_password=
  206. # Execute this script to produce the bind user password. This will be used
  207. # when `bind_password` is not set.
  208. ## bind_password_script=
  209. # Pattern for searching for usernames -- Use <username> for the parameter
  210. # For use when using LdapBackend for Hue authentication
  211. ## ldap_username_pattern="uid=<username>,ou=People,dc=mycompany,dc=com"
  212. # Create users in Hue when they try to login with their LDAP credentials
  213. # For use when using LdapBackend for Hue authentication
  214. ## create_users_on_login = true
  215. # Ignore the case of usernames when searching for existing users in Hue.
  216. ## ignore_username_case=false
  217. # Force usernames to lowercase when creating new users from LDAP.
  218. ## force_username_lowercase=false
  219. # Use search bind authentication.
  220. ## search_bind_authentication=true
  221. # Choose which kind of subgrouping to use: nested or suboordinate (deprecated).
  222. ## subgroups=suboordinate
  223. # Define the number of levels to search for nested members.
  224. ## nested_members_search_depth=10
  225. # Whether or not to follow referrals
  226. ## follow_referrals=false
  227. # Enable python-ldap debugging.
  228. ## debug=false
  229. # Sets the debug level within the underlying LDAP C lib.
  230. ## debug_level=255
  231. # Possible values for trace_level are 0 for no logging, 1 for only logging the method calls with arguments,
  232. # 2 for logging the method calls with arguments and the complete results and 9 for also logging the traceback of method calls.
  233. ## trace_level=0
  234. [[[users]]]
  235. # Base filter for searching for users
  236. ## user_filter="objectclass=*"
  237. # The username attribute in the LDAP schema
  238. ## user_name_attr=sAMAccountName
  239. [[[groups]]]
  240. # Base filter for searching for groups
  241. ## group_filter="objectclass=*"
  242. # The group name attribute in the LDAP schema
  243. ## group_name_attr=cn
  244. # The attribute of the group object which identifies the members of the group
  245. ## group_member_attr=members
  246. [[[ldap_servers]]]
  247. ## [[[[mycompany]]]]
  248. # The search base for finding users and groups
  249. ## base_dn="DC=mycompany,DC=com"
  250. # URL of the LDAP server
  251. ## ldap_url=ldap://auth.mycompany.com
  252. # A PEM-format file containing certificates for the CA's that
  253. # Hue will trust for authentication over TLS.
  254. # The certificate for the CA that signed the
  255. # LDAP server certificate must be included among these certificates.
  256. # See more here http://www.openldap.org/doc/admin24/tls.html.
  257. ## ldap_cert=
  258. ## use_start_tls=true
  259. # Distinguished name of the user to bind as -- not necessary if the LDAP server
  260. # supports anonymous searches
  261. ## bind_dn="CN=ServiceAccount,DC=mycompany,DC=com"
  262. # Password of the bind user -- not necessary if the LDAP server supports
  263. # anonymous searches
  264. ## bind_password=
  265. # Execute this script to produce the bind user password. This will be used
  266. # when `bind_password` is not set.
  267. ## bind_password_script=
  268. # Pattern for searching for usernames -- Use <username> for the parameter
  269. # For use when using LdapBackend for Hue authentication
  270. ## ldap_username_pattern="uid=<username>,ou=People,dc=mycompany,dc=com"
  271. ## Use search bind authentication.
  272. ## search_bind_authentication=true
  273. # Whether or not to follow referrals
  274. ## follow_referrals=false
  275. ## [[[[[users]]]]]
  276. # Base filter for searching for users
  277. ## user_filter="objectclass=Person"
  278. # The username attribute in the LDAP schema
  279. ## user_name_attr=sAMAccountName
  280. ## [[[[[groups]]]]]
  281. # Base filter for searching for groups
  282. ## group_filter="objectclass=groupOfNames"
  283. # The username attribute in the LDAP schema
  284. ## group_name_attr=cn
  285. # Configuration options for specifying the Desktop Database. For more info,
  286. # see http://docs.djangoproject.com/en/1.4/ref/settings/#database-engine
  287. # ------------------------------------------------------------------------
  288. [[database]]
  289. # Database engine is typically one of:
  290. # postgresql_psycopg2, mysql, sqlite3 or oracle.
  291. #
  292. # Note that for sqlite3, 'name', below is a path to the filename. For other backends, it is the database name.
  293. # Note for Oracle, options={'threaded':true} must be set in order to avoid crashes.
  294. # Note for Oracle, you can use the Oracle Service Name by setting "port=0" and then "name=<host>:<port>/<service_name>".
  295. ## engine=sqlite3
  296. ## host=
  297. ## port=
  298. ## user=
  299. ## password=
  300. ## name=desktop/desktop.db
  301. ## options={}
  302. # Configuration options for specifying the Desktop session.
  303. # For more info, see https://docs.djangoproject.com/en/1.4/topics/http/sessions/
  304. # ------------------------------------------------------------------------
  305. [[session]]
  306. # The cookie containing the users' session ID will expire after this amount of time in seconds.
  307. # Default is 2 weeks.
  308. ## ttl=1209600
  309. # The cookie containing the users' session ID will be secure.
  310. # Should only be enabled with HTTPS.
  311. ## secure=false
  312. # The cookie containing the users' session ID will use the HTTP only flag.
  313. ## http_only=false
  314. # Use session-length cookies. Logs out the user when she closes the browser window.
  315. ## expire_at_browser_close=false
  316. # Configuration options for connecting to an external SMTP server
  317. # ------------------------------------------------------------------------
  318. [[smtp]]
  319. # The SMTP server information for email notification delivery
  320. host=localhost
  321. port=25
  322. user=
  323. password=
  324. # Whether to use a TLS (secure) connection when talking to the SMTP server
  325. tls=no
  326. # Default email address to use for various automated notification from Hue
  327. ## default_from_email=hue@localhost
  328. # Configuration options for Kerberos integration for secured Hadoop clusters
  329. # ------------------------------------------------------------------------
  330. [[kerberos]]
  331. # Path to Hue's Kerberos keytab file
  332. ## hue_keytab=
  333. # Kerberos principal name for Hue
  334. ## hue_principal=hue/hostname.foo.com
  335. # Path to kinit
  336. ## kinit_path=/path/to/kinit
  337. # Configuration options for using OAuthBackend (core) login
  338. # ------------------------------------------------------------------------
  339. [[oauth]]
  340. # The Consumer key of the application
  341. ## consumer_key=XXXXXXXXXXXXXXXXXXXXX
  342. # The Consumer secret of the application
  343. ## consumer_secret=XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
  344. # The Request token URL
  345. ## request_token_url=https://api.twitter.com/oauth/request_token
  346. # The Access token URL
  347. ## access_token_url=https://api.twitter.com/oauth/access_token
  348. # The Authorize URL
  349. ## authenticate_url=https://api.twitter.com/oauth/authorize
  350. ###########################################################################
  351. # Settings to configure SAML
  352. ###########################################################################
  353. [libsaml]
  354. # Xmlsec1 binary path. This program should be executable by the user running Hue.
  355. ## xmlsec_binary=/usr/local/bin/xmlsec1
  356. # Entity ID for Hue acting as service provider.
  357. # Can also accept a pattern where '<base_url>' will be replaced with server URL base.
  358. ## entity_id="<base_url>/saml2/metadata/"
  359. # Create users from SSO on login.
  360. ## create_users_on_login=true
  361. # Required attributes to ask for from IdP.
  362. # This requires a comma separated list.
  363. ## required_attributes=uid
  364. # Optional attributes to ask for from IdP.
  365. # This requires a comma separated list.
  366. ## optional_attributes=
  367. # IdP metadata in the form of a file. This is generally an XML file containing metadata that the Identity Provider generates.
  368. ## metadata_file=
  369. # Private key to encrypt metadata with.
  370. ## key_file=
  371. # Signed certificate to send along with encrypted metadata.
  372. ## cert_file=
  373. # A mapping from attributes in the response from the IdP to django user attributes.
  374. ## user_attribute_mapping={'uid':'username'}
  375. # Have Hue initiated authn requests be signed and provide a certificate.
  376. ## authn_requests_signed=false
  377. # Have Hue initiated logout requests be signed and provide a certificate.
  378. ## logout_requests_signed=false
  379. ## Username can be sourced from 'attributes' or 'nameid'.
  380. ## username_source=attributes
  381. # Performs the logout or not.
  382. ## logout_enabled=true
  383. ###########################################################################
  384. # Settings to configure OPENID
  385. ###########################################################################
  386. [libopenid]
  387. # (Required) OpenId SSO endpoint url.
  388. ## server_endpoint_url=https://www.google.com/accounts/o8/id
  389. # OpenId 1.1 identity url prefix to be used instead of SSO endpoint url
  390. # This is only supported if you are using an OpenId 1.1 endpoint
  391. ## identity_url_prefix=https://app.onelogin.com/openid/your_company.com/
  392. # Create users from OPENID on login.
  393. ## create_users_on_login=true
  394. # Use email for username
  395. ## use_email_for_username=true
  396. ###########################################################################
  397. # Settings to configure OAuth
  398. ###########################################################################
  399. [liboauth]
  400. # NOTE:
  401. # To work, each of the active (i.e. uncommented) service must have
  402. # applications created on the social network.
  403. # Then the "consumer key" and "consumer secret" must be provided here.
  404. #
  405. # The addresses where to do so are:
  406. # Twitter: https://dev.twitter.com/apps
  407. # Google+ : https://cloud.google.com/
  408. # Facebook: https://developers.facebook.com/apps
  409. # Linkedin: https://www.linkedin.com/secure/developer
  410. #
  411. # Additionnaly, the following must be set in the application settings:
  412. # Twitter: Callback URL (aka Redirect URL) must be set to http://YOUR_HUE_IP_OR_DOMAIN_NAME/oauth/social_login/oauth_authenticated
  413. # Google+ : CONSENT SCREEN must have email address
  414. # Facebook: Sandbox Mode must be DISABLED
  415. # Linkedin: "In OAuth User Agreement", r_emailaddress is REQUIRED
  416. # The Consumer key of the application
  417. ## consumer_key_twitter=
  418. ## consumer_key_google=
  419. ## consumer_key_facebook=
  420. ## consumer_key_linkedin=
  421. # The Consumer secret of the application
  422. ## consumer_secret_twitter=
  423. ## consumer_secret_google=
  424. ## consumer_secret_facebook=
  425. ## consumer_secret_linkedin=
  426. # The Request token URL
  427. ## request_token_url_twitter=https://api.twitter.com/oauth/request_token
  428. ## request_token_url_google=https://accounts.google.com/o/oauth2/auth
  429. ## request_token_url_linkedin=https://www.linkedin.com/uas/oauth2/authorization
  430. ## request_token_url_facebook=https://graph.facebook.com/oauth/authorize
  431. # The Access token URL
  432. ## access_token_url_twitter=https://api.twitter.com/oauth/access_token
  433. ## access_token_url_google=https://accounts.google.com/o/oauth2/token
  434. ## access_token_url_facebook=https://graph.facebook.com/oauth/access_token
  435. ## access_token_url_linkedin=https://api.linkedin.com/uas/oauth2/accessToken
  436. # The Authenticate URL
  437. ## authenticate_url_twitter=https://api.twitter.com/oauth/authorize
  438. ## authenticate_url_google=https://www.googleapis.com/oauth2/v1/userinfo?access_token=
  439. ## authenticate_url_facebook=https://graph.facebook.com/me?access_token=
  440. ## authenticate_url_linkedin=https://api.linkedin.com/v1/people/~:(email-address)?format=json&oauth2_access_token=
  441. # Username Map. Json Hash format.
  442. # Replaces username parts in order to simplify usernames obtained
  443. # Example: {"@sub1.domain.com":"_S1", "@sub2.domain.com":"_S2"}
  444. # converts 'email@sub1.domain.com' to 'email_S1'
  445. ## username_map={}
  446. # Whitelisted domains (only applies to Google OAuth). CSV format.
  447. ## whitelisted_domains_google=
  448. ###########################################################################
  449. # Settings for the RDBMS application
  450. ###########################################################################
  451. [librdbms]
  452. # The RDBMS app can have any number of databases configured in the databases
  453. # section. A database is known by its section name
  454. # (IE sqlite, mysql, psql, and oracle in the list below).
  455. [[databases]]
  456. # sqlite configuration.
  457. ## [[[sqlite]]]
  458. # Name to show in the UI.
  459. ## nice_name=SQLite
  460. # For SQLite, name defines the path to the database.
  461. ## name=/tmp/sqlite.db
  462. # Database backend to use.
  463. ## engine=sqlite
  464. # Database options to send to the server when connecting.
  465. # https://docs.djangoproject.com/en/1.4/ref/databases/
  466. ## options={}
  467. # mysql, oracle, or postgresql configuration.
  468. ## [[[mysql]]]
  469. # Name to show in the UI.
  470. ## nice_name="My SQL DB"
  471. # For MySQL and PostgreSQL, name is the name of the database.
  472. # For Oracle, Name is instance of the Oracle server. For express edition
  473. # this is 'xe' by default.
  474. ## name=mysqldb
  475. # Database backend to use. This can be:
  476. # 1. mysql
  477. # 2. postgresql
  478. # 3. oracle
  479. ## engine=mysql
  480. # IP or hostname of the database to connect to.
  481. ## host=localhost
  482. # Port the database server is listening to. Defaults are:
  483. # 1. MySQL: 3306
  484. # 2. PostgreSQL: 5432
  485. # 3. Oracle Express Edition: 1521
  486. ## port=3306
  487. # Username to authenticate with when connecting to the database.
  488. ## user=example
  489. # Password matching the username to authenticate with when
  490. # connecting to the database.
  491. ## password=example
  492. # Database options to send to the server when connecting.
  493. # https://docs.djangoproject.com/en/1.4/ref/databases/
  494. ## options={}
  495. ###########################################################################
  496. # Settings to configure your Hadoop cluster.
  497. ###########################################################################
  498. [hadoop]
  499. # Configuration for HDFS NameNode
  500. # ------------------------------------------------------------------------
  501. [[hdfs_clusters]]
  502. # HA support by using HttpFs
  503. [[[default]]]
  504. # Enter the filesystem uri
  505. fs_defaultfs=hdfs://localhost:8020
  506. # NameNode logical name.
  507. ## logical_name=
  508. # Use WebHdfs/HttpFs as the communication mechanism.
  509. # Domain should be the NameNode or HttpFs host.
  510. # Default port is 14000 for HttpFs.
  511. ## webhdfs_url=http://localhost:50070/webhdfs/v1
  512. # Change this if your HDFS cluster is Kerberos-secured
  513. ## security_enabled=false
  514. # In secure mode (HTTPS), if SSL certificates from YARN Rest APIs
  515. # have to be verified against certificate authority
  516. ## ssl_cert_ca_verify=True
  517. # Directory of the Hadoop configuration
  518. ## hadoop_conf_dir=$HADOOP_CONF_DIR when set or '/etc/hadoop/conf'
  519. # Configuration for YARN (MR2)
  520. # ------------------------------------------------------------------------
  521. [[yarn_clusters]]
  522. [[[default]]]
  523. # Enter the host on which you are running the ResourceManager
  524. ## resourcemanager_host=localhost
  525. # The port where the ResourceManager IPC listens on
  526. ## resourcemanager_port=8032
  527. # Whether to submit jobs to this cluster
  528. submit_to=True
  529. # Resource Manager logical name (required for HA)
  530. ## logical_name=
  531. # Change this if your YARN cluster is Kerberos-secured
  532. ## security_enabled=false
  533. # URL of the ResourceManager API
  534. ## resourcemanager_api_url=http://localhost:8088
  535. # URL of the ProxyServer API
  536. ## proxy_api_url=http://localhost:8088
  537. # URL of the HistoryServer API
  538. ## history_server_api_url=http://localhost:19888
  539. # In secure mode (HTTPS), if SSL certificates from from YARN Rest APIs
  540. # have to be verified against certificate authority
  541. ## ssl_cert_ca_verify=True
  542. # HA support by specifying multiple clusters
  543. # e.g.
  544. # [[[ha]]]
  545. # Resource Manager logical name (required for HA)
  546. ## logical_name=my-rm-name
  547. # Configuration for MapReduce (MR1)
  548. # ------------------------------------------------------------------------
  549. [[mapred_clusters]]
  550. [[[default]]]
  551. # Enter the host on which you are running the Hadoop JobTracker
  552. ## jobtracker_host=localhost
  553. # The port where the JobTracker IPC listens on
  554. ## jobtracker_port=8021
  555. # JobTracker logical name for HA
  556. ## logical_name=
  557. # Thrift plug-in port for the JobTracker
  558. ## thrift_port=9290
  559. # Whether to submit jobs to this cluster
  560. submit_to=False
  561. # Change this if your MapReduce cluster is Kerberos-secured
  562. ## security_enabled=false
  563. # HA support by specifying multiple clusters
  564. # e.g.
  565. # [[[ha]]]
  566. # Enter the logical name of the JobTrackers
  567. ## logical_name=my-jt-name
  568. ###########################################################################
  569. # Settings to configure the Filebrowser app
  570. ###########################################################################
  571. [filebrowser]
  572. # Location on local filesystem where the uploaded archives are temporary stored.
  573. ## archive_upload_tempdir=/tmp
  574. ###########################################################################
  575. # Settings to configure liboozie
  576. ###########################################################################
  577. [liboozie]
  578. # The URL where the Oozie service runs on. This is required in order for
  579. # users to submit jobs. Empty value disables the config check.
  580. ## oozie_url=http://localhost:11000/oozie
  581. # Requires FQDN in oozie_url if enabled
  582. ## security_enabled=false
  583. # Location on HDFS where the workflows/coordinator are deployed when submitted.
  584. ## remote_deployement_dir=/user/hue/oozie/deployments
  585. ###########################################################################
  586. # Settings to configure the Oozie app
  587. ###########################################################################
  588. [oozie]
  589. # Location on local FS where the examples are stored.
  590. ## local_data_dir=..../examples
  591. # Location on local FS where the data for the examples is stored.
  592. ## sample_data_dir=...thirdparty/sample_data
  593. # Location on HDFS where the oozie examples and workflows are stored.
  594. ## remote_data_dir=/user/hue/oozie/workspaces
  595. # Maximum of Oozie workflows or coodinators to retrieve in one API call.
  596. ## oozie_jobs_count=100
  597. # Use Cron format for defining the frequency of a Coordinator instead of the old frequency number/unit.
  598. ## enable_cron_scheduling=true
  599. ###########################################################################
  600. # Settings to configure Beeswax with Hive
  601. ###########################################################################
  602. [beeswax]
  603. # Host where HiveServer2 is running.
  604. # If Kerberos security is enabled, use fully-qualified domain name (FQDN).
  605. ## hive_server_host=localhost
  606. # Port where HiveServer2 Thrift server runs on.
  607. ## hive_server_port=10000
  608. # Hive configuration directory, where hive-site.xml is located
  609. ## hive_conf_dir=/etc/hive/conf
  610. # Timeout in seconds for thrift calls to Hive service
  611. ## server_conn_timeout=120
  612. # Choose whether to use the old GetLog() thrift call from before Hive 0.14 to retrieve the logs.
  613. # If false, use the FetchResults() thrift call from Hive 1.0 or more instead.
  614. ## use_get_log_api=false
  615. # Set a LIMIT clause when browsing a partitioned table.
  616. # A positive value will be set as the LIMIT. If 0 or negative, do not set any limit.
  617. ## browse_partitioned_table_limit=250
  618. # A limit to the number of rows that can be downloaded from a query.
  619. # A value of -1 means there will be no limit.
  620. # A maximum of 65,000 is applied to XLS downloads.
  621. ## download_row_limit=1000000
  622. # Hue will try to close the Hive query when the user leaves the editor page.
  623. # This will free all the query resources in HiveServer2, but also make its results inaccessible.
  624. ## close_queries=false
  625. # Thrift version to use when communicating with HiveServer2.
  626. # New column format is from version 7.
  627. ## thrift_version=7
  628. [[ssl]]
  629. # Path to Certificate Authority certificates.
  630. ## cacerts=/etc/hue/cacerts.pem
  631. # Choose whether Hue should validate certificates received from the server.
  632. ## validate=true
  633. ###########################################################################
  634. # Settings to configure Impala
  635. ###########################################################################
  636. [impala]
  637. # Host of the Impala Server (one of the Impalad)
  638. ## server_host=localhost
  639. # Port of the Impala Server
  640. ## server_port=21050
  641. # Kerberos principal
  642. ## impala_principal=impala/hostname.foo.com
  643. # Turn on/off impersonation mechanism when talking to Impala
  644. ## impersonation_enabled=False
  645. # Number of initial rows of a result set to ask Impala to cache in order
  646. # to support re-fetching them for downloading them.
  647. # Set to 0 for disabling the option and backward compatibility.
  648. ## querycache_rows=50000
  649. # Timeout in seconds for thrift calls
  650. ## server_conn_timeout=120
  651. # Hue will try to close the Impala query when the user leaves the editor page.
  652. # This will free all the query resources in Impala, but also make its results inaccessible.
  653. ## close_queries=true
  654. # If QUERY_TIMEOUT_S > 0, the query will be timed out (i.e. cancelled) if Impala does not do any work
  655. # (compute or send back results) for that query within QUERY_TIMEOUT_S seconds.
  656. ## query_timeout_s=600
  657. [[ssl]]
  658. # SSL communication enabled for this server.
  659. ## enabled=false
  660. # Path to Certificate Authority certificates.
  661. ## cacerts=/etc/hue/cacerts.pem
  662. # Choose whether Hue should validate certificates received from the server.
  663. ## validate=true
  664. ###########################################################################
  665. # Settings to configure Pig
  666. ###########################################################################
  667. [pig]
  668. # Location of piggybank.jar on local filesystem.
  669. ## local_sample_dir=/usr/share/hue/apps/pig/examples
  670. # Location piggybank.jar will be copied to in HDFS.
  671. ## remote_data_dir=/user/hue/pig/examples
  672. ###########################################################################
  673. # Settings to configure Sqoop
  674. ###########################################################################
  675. [sqoop]
  676. # For autocompletion, fill out the librdbms section.
  677. # Sqoop server URL
  678. ## server_url=http://localhost:12000/sqoop
  679. ###########################################################################
  680. # Settings to configure Proxy
  681. ###########################################################################
  682. [proxy]
  683. # Comma-separated list of regular expressions,
  684. # which match 'host:port' of requested proxy target.
  685. ## whitelist=(localhost|127\.0\.0\.1):(50030|50070|50060|50075)
  686. # Comma-separated list of regular expressions,
  687. # which match any prefix of 'host:port/path' of requested proxy target.
  688. # This does not support matching GET parameters.
  689. ## blacklist=
  690. ###########################################################################
  691. # Settings to configure HBase Browser
  692. ###########################################################################
  693. [hbase]
  694. # Comma-separated list of HBase Thrift servers for clusters in the format of '(name|host:port)'.
  695. # Use full hostname with security.
  696. # If using Kerberos we assume GSSAPI SASL, not PLAIN.
  697. ## hbase_clusters=(Cluster|localhost:9090)
  698. # HBase configuration directory, where hbase-site.xml is located.
  699. ## hbase_conf_dir=/etc/hbase/conf
  700. # Hard limit of rows or columns per row fetched before truncating.
  701. ## truncate_limit = 500
  702. # 'buffered' is the default of the HBase Thrift Server and supports security.
  703. # 'framed' can be used to chunk up responses,
  704. # which is useful when used in conjunction with the nonblocking server in Thrift.
  705. ## thrift_transport=buffered
  706. ###########################################################################
  707. # Settings to configure Solr Search
  708. ###########################################################################
  709. [search]
  710. # URL of the Solr Server
  711. ## solr_url=http://localhost:8983/solr/
  712. # Requires FQDN in solr_url if enabled
  713. ## security_enabled=false
  714. ## Query sent when no term is entered
  715. ## empty_query=*:*
  716. ###########################################################################
  717. # Settings to configure Solr Indexer
  718. ###########################################################################
  719. [indexer]
  720. # Location of the solrctl binary.
  721. ## solrctl_path=/usr/bin/solrctl
  722. # Zookeeper ensemble.
  723. ## solr_zk_ensemble=localhost:2181/solr
  724. ###########################################################################
  725. # Settings to configure Job Designer
  726. ###########################################################################
  727. [jobsub]
  728. # Location on local FS where examples and template are stored.
  729. ## local_data_dir=..../data
  730. # Location on local FS where sample data is stored
  731. ## sample_data_dir=...thirdparty/sample_data
  732. ###########################################################################
  733. # Settings to configure Job Browser.
  734. ###########################################################################
  735. [jobbrowser]
  736. # Share submitted jobs information with all users. If set to false,
  737. # submitted jobs are visible only to the owner and administrators.
  738. ## share_jobs=true
  739. ###########################################################################
  740. # Settings to configure the Zookeeper application.
  741. ###########################################################################
  742. [zookeeper]
  743. [[clusters]]
  744. [[[default]]]
  745. # Zookeeper ensemble. Comma separated list of Host/Port.
  746. # e.g. localhost:2181,localhost:2182,localhost:2183
  747. ## host_ports=localhost:2181
  748. # The URL of the REST contrib service (required for znode browsing).
  749. ## rest_url=http://localhost:9998
  750. # Name of Kerberos principal when using security.
  751. ## principal_name=zookeeper
  752. ###########################################################################
  753. # Settings to configure the Spark application.
  754. ###########################################################################
  755. [spark]
  756. # URL of the REST Spark Job Server.
  757. ## server_url=http://localhost:8090/
  758. # List of available types of snippets
  759. ## languages='[{"name": "Scala", "type": "scala"},{"name": "Python", "type": "python"},{"name": "Impala SQL", "type": "impala"},{"name": "Hive SQL", "type": "hive"},{"name": "Text", "type": "text"}]'
  760. ###########################################################################
  761. # Settings for the User Admin application
  762. ###########################################################################
  763. [useradmin]
  764. # The name of the default user group that users will be a member of
  765. ## default_user_group=default
  766. [[password_policy]]
  767. # Set password policy to all users. The default policy requires password to be at least 8 characters long,
  768. # and contain both uppercase and lowercase letters, numbers, and special characters.
  769. ## is_enabled=false
  770. ## pwd_regex="^(?=.*?[A-Z])(?=(.*[a-z]){1,})(?=(.*[\d]){1,})(?=(.*[\W_]){1,}).{8,}$"
  771. ## pwd_hint="The password must be at least 8 characters long, and must contain both uppercase and lowercase letters, at least one number, and at least one special character."
  772. ## pwd_error_message="The password must be at least 8 characters long, and must contain both uppercase and lowercase letters, at least one number, and at least one special character."
  773. ###########################################################################
  774. # Settings for the Sentry lib
  775. ###########################################################################
  776. [libsentry]
  777. # Hostname or IP of server.
  778. ## hostname=localhost
  779. # Port the sentry service is running on.
  780. ## port=8038
  781. # Sentry configuration directory, where sentry-site.xml is located.
  782. ## sentry_conf_dir=/etc/sentry/conf