Security Reference
Also available as:
PDF
loading table of contents...

mapred-site.xml

Reference material for adding security information to the mapred-site.xml configuration file when setting up Kerberos for non-Ambari clusters.

You must add the following information to the mapred-site.xml file on every host in your cluster:

Table 1. mapred-site.xml Property Settings

Property Name

Property Value

Description

mapreduce.jobhistory.keytab

/etc/security/keytabs/jhs.service.keytab

Kerberos keytab file for the MapReduce JobHistory Server.

mapreduce.jobhistory.principal

jhs/_HOST@TODO-KERBEROS-DOMAIN

Kerberos principal name for the MapReduce JobHistory Server.

mapreduce.jobhistory.webapp.address

TODO-JOBHISTORYNODE-HOSTNAME:19888

MapReduce JobHistory Server Web UI host:port

mapreduce.jobhistory.webapp.https. address

TODO-JOBHISTORYNODE-HOSTNAME:19889

MapReduce JobHistory Server HTTPS Web UI host:port

mapreduce.jobhistory.webapp.spnego-keytab-file

/etc/security/keytabs/spnego.service.keytab

Kerberos keytab file for the spnego service.

mapreduce.jobhistory.webapp.spnego-principal

HTTP/_HOST@TODO-KERBEROS-DOMAIN

Kerberos principal name for the spnego service.

Following is the XML for these entries:

<property>
     <name>mapreduce.jobhistory.keytab</name>
     <value>/etc/security/keytabs/jhs.service.keytab</value>
</property> 
 
<property>
     <name>mapreduce.jobhistory.principal</name>
     <value>jhs/_HOST@TODO-KERBEROS-DOMAIN</value>
</property> 
 
<property>
     <name>mapreduce.jobhistory.webapp.address</name>
     <value>TODO-JOBHISTORYNODE-HOSTNAME:19888</value>
</property> 
 
<property>
     <name>mapreduce.jobhistory.webapp.https.address</name>
     <value>TODO-JOBHISTORYNODE-HOSTNAME:19889</value>
</property> 
 
<property>
     <name>mapreduce.jobhistory.webapp.spnego-keytab-file</name>
     <value>/etc/security/keytabs/spnego.service.keytab</value>
</property> 
 
<property>
     <name>mapreduce.jobhistory.webapp.spnego-principal</name>
     <value>HTTP/_HOST@TODO-KERBEROS-DOMAIN</value>
</property>