官网文档关于kerberos介绍很少

添加用户

配置HDFS相关的Kerberos账户

每个节点根据运行的不同组件创建不同的principl及keytab

创建数据目录

每个节点都要创建

设置HDFS的配置文件

hadoop-env.sh

core-site.xml

hdfs-site.xml

启动HDFS测试

使用普通用户来管理Hadoop

node1

kadmin
princ

addprinc nn/node1@HADOOP.COM
addprinc dn/node1@HADOOP.COM
addprinc rm/node1@HADOOP.COM
addprinc nm/node1@HADOOP.COM
addprinc hm/node1@HADOOP.COM
addprinc hr/node1@HADOOP.COM
addprinc jhs/node1@HADOOP.COM
addprinc hs/node1@HADOOP.COM
addprinc HTTP/node1@HADOOP.COM

keytab

ktadd -k /etc/security/keytabs/nn.service.keytab addprinc nn/node1@HADOOP.COM

ktadd -k /etc/security/keytabs/dn.service.keytab addprinc dn/node1@HADOOP.COM

ktadd -k /etc/security/keytabs/rm.service.keytab addprinc rm/node1@HADOOP.COM

ktadd -k /etc/security/keytabs/nm.service.keytab addprinc nm/node1@HADOOP.COM

ktadd -k /etc/security/keytabs/hm.service.keytab addprinc hm/node1@HADOOP.COM

ktadd -k /etc/security/keytabs/hr.service.keytab addprinc hr/node1@HADOOP.COM

ktadd -k /etc/security/keytabs/jhs.service.keytab addprinc jhs/node1@HADOOP.COM

ktadd -k /etc/security/keytabs/hs.service.keytab addprinc hs/node1@HADOOP.COM

ktadd -k /etc/security/keytabs/spnego.service.keytab addprinc HTTP/node1@HADOOP.COM