Securing Hadoop - Narayanan, Sudheesh (Packt Publishing, 2013)
This book is a step-by-step tutorial filled with practical examples which will focus mainly on the key security tools and implementation techniques of Hadoop security. This book is great for Hadoop practitioners (solution architects, Hadoop administrators, developers, and Hadoop project managers) who are looking to get a good grounding in what Kerberos is all about and who wish to learn how to implement end-to-end Hadoop security within an enterprise setup. It's assumed that you will have some basic understanding of Hadoop as well as be familiar with some basic security concepts
Cover; Copyright; Credits; About the Author; About the Reviewers; www.PacktPub.com; Table of Contents; Preface; Chapter 1: Hadoop Security Overview; Why do we need to secure Hadoop?; Challenges for securing the Hadoop ecosystem; Key security considerations; Reference architecture for Big Data security; Summary; Chapter 2: Hadoop Security Design; What is Kerberos?; Key Kerberos terminologies; How Kerberos works?; Kerberos advantages; The Hadoop default security model with Kerberos; Hadoop Kerberos security implementation; User-level access controls; Service-level access controls
User and service authenticationDelegation Token; Job Token; Block Access Token; Summary; Chapter 3: Setting up a Secured Hadoop Cluster; Prerequisites; Setting up Kerberos; Installing the Key Distribution Center; Configuring the Key Distribution Center; Establishing the KDC database; Setting up the administrator principal for KDC; Starting the Kerberos daemons; Setting up the first Kerberos administrator; Adding the user or service principals; Configuring LDAP as the Kerberos database; Supporting AES-256 encryption for a Kerberos ticket; Configuring Hadoop with Kerberos authentication
Setting up the Kerberos client on all the Hadoop nodesSetting up the Hadoop service principals; Creating a keytab file for the Hadoop services; Distributing the keytab file for all slaves; Setting up the Hadoop configuration files; HDFS-related configurations; MRV1-related configurations; MRV2-related configurations; Setting up secured DataNode; Setting up the TaskController class; Configuring users for Hadoop; Automation of secured Hadoop deployment; Summary; Chapter 4: Securing the Hadoop Ecosystem; Configuring Kerberos for Hadoop ecosystem components; Securing Hive
Securing Hive using SentrySecuring Oozie; Securing Flume; Securing Flume sources; Securing Hadoop sink; Securing a Flume channel; Securing HBase; Securing Sqoop; Securing Pig; Best practices for securing the Hadoop ecosystem components; Summary; Chapter 5: Integrating Hadoop with Enterprise Security Systems; Integrating Enterprise Identity Management systems; Configuring EIM integration with Hadoop; Integrating Active Directory-based EIM with the Hadoop ecosystem; Accessing a secured Hadoop cluster from an enterprise network; HttpFS; HUE; Knox Gateway Server; Summary