Summary

In this chapter, we looked at the steps to set up the Kerberos authentication protocol and how to add the required principals to the KDC. We then looked at the overall process of configuring the Hadoop security with Kerberos. The Hadoop configurations have to be replicated in all the nodes of the cluster. All users running MapReduce need to set up on all nodes of the cluster. Setting up users across the entire cluster nodes can be challenging and setting up an Active Directory- or LDAP-based authentication mechanism avoids the problem of manually creating the users in each of the cluster nodes.

In the next chapter, we will look at how we can configure Kerberos security for the rest of the Hadoop ecosystem such as Hive, WebHDFS, Oozie, and Flume.