Accessing kerberized HDFS data

If your Hortonworks or Cloudera Hadoop cluster uses Kerberos authentication to restrict access to HDFS, OpenText™ Analytics Database must be granted access.

If your Hortonworks or Cloudera Hadoop cluster uses Kerberos authentication to restrict access to HDFS, OpenText™ Analytics Database must be granted access. If you use Kerberos authentication for your database, and database users have HDFS access, then you can configure the database to use the same principals to authenticate. However, not all Hadoop administrators want to grant access to all database users, preferring to manage access in other ways. In addition, not all OpenText™ Analytics Databases use Kerberos.

The database provides the following options for accessing Kerberized Hadoop clusters:

  • Using OpenText™ Analytics Database Kerberos principals.

  • Using Hadoop proxy users combined with database users.

  • Using a user-specified delegation token which grants access to HDFS. Delegation tokens are issued by the Hadoop cluster.

Proxy users and delegation tokens both use a session parameter to manage identities. The database need not be Kerberized when using either of these methods.

The database does not support Kerberos for MapR.

To test your Kerberos configuration, see Verifying HDFS configuration.

In this section