Clik here to view.
Securing Apache Hive - part II
This is the second post in a series of articles on securing Apache Hive. The first post looked at installing Apache Hive and doing some queries on data stored in HDFS. In this post we will show how to...
View ArticleClik here to view.
Securing Apache Hive - part III
This is the third in a series of blog posts on securing Apache Hive. The first post looked at installing Apache Hive and doing some queries on data stored in HDFS. The second post looked at how to add...
View ArticleIntegrating JSON Web Tokens with Kerberos using Apache Kerby
JSON Web Tokens (JWTs) are a standard way of encapsulating a number of claims about a particular subject. Kerberos is a long-established and widely-deployed SSO protocol, used extensively in the...
View ArticleClik here to view.
Securing Apache Hive - part IV
This is the fourth in a series of blog posts on securing Apache Hive. The first post looked at installing Apache Hive and doing some queries on data stored in HDFS. The second post looked at how to add...
View ArticleSecuring Apache Hive - part V
This is the fifth in a series of blog posts on securing Apache Hive. The first post looked at installing Apache Hive and doing some queries on data stored in HDFS. The second post looked at how to add...
View ArticleSecuring Apache Hive - part VI
This the sixth and final blog post in a series of articles on securing Apache Hive. The first post looked at installing Apache Hive and doing some queries on data stored in HDFS. The second post looked...
View ArticleClik here to view.
Configuring Kerberos for Hive in Talend Open Studio for Big Data
Earlier this year, I showed how to use Talend Open Studio for Big Data to access data stored in HDFS, where HDFS had been configured to authenticate users using Kerberos. A similar blog post showed how...
View ArticleInstalling the Apache Kerby KDC
Apache Kerby is a subproject of the Apache Directory project, and is a complete open-source KDC written entirely in Java. Apache Kerby 1.1.0 has just been released. This release contains two major new...
View ArticleClik here to view.
Authorizing access to Apache Yarn using Apache Ranger
Earlier this year, I wrote a series of blog posts on how to secure access to the Apache Hadoop filesystem (HDFS), using tools like Apache Ranger and Apache Atlas. In this post, we will go further and...
View ArticleKerberos cross-realm support in Apache Kerby 1.1.0
A recent blog post covered how to install the Apache Kerby KDC. In this post we will build on that tutorial to show how to get a major new feature of Apache Kerby 1.1.0 to work - namely kerberos...
View ArticleClik here to view.
SAML SSO support for the Apache Syncope web console
Apache Syncope is a powerful open source Identity Management project, that has recently celebrated 5 years as an Apache top level project. Up to recently, a username and password must be supplied to...
View ArticleA fast way to get membership counts in Apache Syncope
Apache Syncope is a powerful open source Identity Management project, covered extensively on this blog. Amongst many other features, it allows the management of three core types - Users, Groups and...
View ArticleSecuring Apache Solr with Apache Sentry
Last year I wrote a series of posts on securing Apache Solr, firstly using basic authentication and then using Apache Ranger for authorization. In this post we will look at an alternative authorization...
View ArticleSecuring Apache Sqoop - part I
This is the first in a series of posts on how to secure Apache Sqoop. Apache Sqoop is a tool to transfer bulk data mainly between HDFS and relational databases, but also supporting other projects such...
View ArticleClik here to view.
Securing Apache Sqoop - part II
This is the second in a series of posts on how to secure Apache Sqoop. The first post looked at how to set up Apache Sqoop to perform a simple use-case of transferring a file from HDFS to Apache Kafka....
View ArticleSecuring Apache Sqoop - part III
This is the third and final post about securing Apache Sqoop. The first post looked at how to set up Apache Sqoop to perform a simple use-case of transferring a file from HDFS to Apache Kafka. The...
View ArticleThe Apache Sentry security service - part I
Apache Sentry is a role-based authorization solution for a number of big-data projects. I have previously blogged about how to install the authorization plugin to secure various deployments,...
View ArticleClik here to view.
The Apache Sentry security service - part II
This is the second in a series of blog posts on the Apache Sentry security service. The first post looked at how to get started with the Apache Sentry security service, both from scratch and via a...
View ArticleEnabling Apache CXF Fediz plugin logging in Apache Tomcat
The Apache CXF Fediz subproject provides an easy way to secure your web applications via the WS-Federation Passive Requestor Profile. An earlier tutorial I wrote covers how to deploy and secure a...
View ArticleThe Apache Sentry security service - part III
This is the third in a series of blog posts on the Apache Sentry security service. The first post looked at how to get started with the Apache Sentry security service, both from scratch and via a...
View Article