Repository: hbase Updated Branches: refs/heads/master 51334fb95 -> d9f25e30a
HBASE-12528 Document the newly introduced params for providing principal and keytabs. <Srikanth Srungarapu> Project: http://git-wip-us.apache.org/repos/asf/hbase/repo Commit: http://git-wip-us.apache.org/repos/asf/hbase/commit/d9f25e30 Tree: http://git-wip-us.apache.org/repos/asf/hbase/tree/d9f25e30 Diff: http://git-wip-us.apache.org/repos/asf/hbase/diff/d9f25e30 Branch: refs/heads/master Commit: d9f25e30a1044caf9caaca047f954548c2ea8389 Parents: 51334fb Author: Misty Stanley-Jones <[email protected]> Authored: Mon Dec 22 12:18:30 2014 +1000 Committer: Misty Stanley-Jones <[email protected]> Committed: Mon Dec 22 12:19:46 2014 +1000 ---------------------------------------------------------------------- src/main/docbkx/ops_mgt.xml | 48 ++++++++++++++++++++++++++++++++++++++++ 1 file changed, 48 insertions(+) ---------------------------------------------------------------------- http://git-wip-us.apache.org/repos/asf/hbase/blob/d9f25e30/src/main/docbkx/ops_mgt.xml ---------------------------------------------------------------------- diff --git a/src/main/docbkx/ops_mgt.xml b/src/main/docbkx/ops_mgt.xml index 3e38ff7..dedd238 100644 --- a/src/main/docbkx/ops_mgt.xml +++ b/src/main/docbkx/ops_mgt.xml @@ -215,6 +215,54 @@ private static final int ERROR_EXIT_CODE = 4;</programlisting> <screen language="bourne">$ ${HBASE_HOME}/bin/hbase orghapache.hadoop.hbase.tool.Canary -t 600000</screen> </section> + <section> + <title>Running Canary in a Kerberos-enabled Cluster</title> + <para>To run Canary in a Kerberos-enabled cluster, configure the following two properties in + <filename>hbase-site.xml</filename>:</para> + <itemizedlist> + <listitem> + <para><code>hbase.client.keytab.file</code></para> + </listitem> + <listitem> + <para><code>hbase.client.kerberos.principal</code></para> + </listitem> + </itemizedlist> + <para>Kerberos credentials are refreshed every 30 seconds when Canary runs in daemon + mode.</para> + <para>To configure the DNS interface for the client, configure the following optional + properties in <filename>hbase-site.xml</filename>.</para> + <itemizedlist> + <listitem> + <para><code>hbase.client.dns.interface</code></para> + </listitem> + <listitem> + <para><code>hbase.client.dns.nameserver</code></para> + </listitem> + </itemizedlist> + <example> + <title>Canary in a Kerberos-Enabled Cluster</title> + <para>This example shows each of the properties with valid values.</para> + <programlisting language="xml"><![CDATA[ +<property> + <name>hbase.client.kerberos.principal</name> + <value>hbase/[email protected]</value> +</property> +<property> + <name>hbase.client.keytab.file</name> + <value>/etc/hbase/conf/keytab.krb5</value> +</property> +<!-- optional params --> +property> + <name>hbase.client.dns.interface</name> + <value>default</value> +</property> +<property> + <name>hbase.client.dns.nameserver</name> + <value>default</value> +</property> + ]]></programlisting> + </example> + </section> </section> <section
