Enable Impersonation for HBase Thrift Gateway
About this task
To configure the Thrift gateway to authenticate to HBase on the client’s behalf, and to access HBase using a proxy user:
To configure the Thrift gateway to authenticate to HBase on the client’s behalf, and to access HBase using a proxy user:
hbase-site.xml
file for every HBase node:
<property>
<name>hadoop.proxyuser.$USER.groups</name>
<value>$GROUPS</value>
</property>
<property>
<name>hadoop.proxyuser.$USER.hosts</name>
<value>$GROUPS</value>
</property>
doAs feature, add the following to the
hbase-site.xml file for every Thrift gateway:
<property>
<name>hbase.regionserver.thrift.http</name>
<value>true</value>
</property>
<property>
<name>hbase.thrift.support.proxyuser</name>
<value>true/value>
</property>
jps command will list a
ThriftServer process.
maprcli
command:maprcli node services -name hbasethrift -action restart -nodes <node_hostname>