Skip to content

Commit 274f91a

Browse files
raboofsteveloughran
authored andcommitted
HADOOP-18627. Add stronger wording in 'secure mode' introduction (#5406)
Make it more clear that when deploying Hadoop 'secure mode' is generally not optional. Contributed by Arnout Engelen
1 parent 27c5cb5 commit 274f91a

File tree

1 file changed

+3
-1
lines changed
  • hadoop-common-project/hadoop-common/src/site/markdown

1 file changed

+3
-1
lines changed

hadoop-common-project/hadoop-common/src/site/markdown/SecureMode.md

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -20,7 +20,9 @@ Hadoop in Secure Mode
2020
Introduction
2121
------------
2222

23-
This document describes how to configure authentication for Hadoop in secure mode. When Hadoop is configured to run in secure mode, each Hadoop service and each user must be authenticated by Kerberos.
23+
In its default configuration, we expect you to make sure attackers don't have access to your Hadoop cluster by restricting all network access. If you want any restrictions on who can remotely access data or submit work, you MUST secure authentication and access for your Hadoop cluster as described in this document.
24+
25+
When Hadoop is configured to run in secure mode, each Hadoop service and each user must be authenticated by Kerberos.
2426

2527
Forward and reverse host lookup for all service hosts must be configured correctly to allow services to authenticate with each other. Host lookups may be configured using either DNS or `/etc/hosts` files. Working knowledge of Kerberos and DNS is recommended before attempting to configure Hadoop services in Secure Mode.
2628

0 commit comments

Comments
 (0)