Duration
3 days
OVERVIEW
This course is designed for experienced administrators who will be implementing secure Hadoop clusters using authentication, authorization, auditing and data protection strategies and tools.
PREREQUISITES
Students should be experienced in the management of Hadoop using Ambari and Linux environments. Completion of the Hadoop Administration I course is highly recommended.
TARGET AUDIENCE
IT administrators and operators responsible for installing, configuring and supporting an Apache Hadoop 2.3 deployment in a Linux environment.
FORMAT
50% Lecture/Discussion
50% Hands-on Labs
Objectives
- Describe the 5 pillars of a secure environment
- List the reasons why a secure environment is needed
- Choose which security tool is best for specific use cases
- List security prerequisites
- Configure Ambari security
- Set up Ambari Views for controlled access
- Describe Kerberos use and architecture
- Install Kerberos
- Describe available partner security solutions
- Configure Ambari for Kerberos
- Configure Hadoop for Kerberos
- Enable Kerberos
- Install and Configure Apache Knox
- Install and Configure Apache Ranger
- Install and Configure Ranger Key Management Services
- User Ranger to Assure Secure Data Access
- Install and Configure Ranger Key Management Services
LABS
- Setting up Active Directory/Operating System Integration
- Configuring Ambari for Non-Root
- Encrypting the Ambari Database and Passwords
- Setting up Ambari for LDAP/Active Directory Authentication
- Setting up HTTP/SSL Server for Ambari
- Setting up Two-Way SSL for Ambari Server and Agents
- Enabling SPNEGO Authentication for Hadoop
- Configuring Ambari Views for Kerberos
- Setting up Ambari for Kerberos
- Setting up/Enabling HDP for Kerberos
- Installing the Knox Service via Ambari
- Configuring the Knox Gateway
- Configuring Knox to Authenticate via Active Directory/LDAP
- Configuring Knox Topology to Connect to a Hadoop Cluster Service
- Installing the Ranger Service via Ambari
- Configuring Ranger Repository Manager, Policy Manager User Groups and Auditing
- Installing Ranger KMS via Ambari
- Configuring HDFS for Encryption
- Configuring Hive to Utilize Encrypted HDFS
- Using Ranger KMS Service
- Testing Secure Access with HDFS, Hive, Pig and Sqoop
- Enable Ranger KMS Audit
Programme scope, delivery arrangements and suitability are confirmed during enquiry.