secure_mapping.js 13 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394
  1. /**
  2. * Licensed to the Apache Software Foundation (ASF) under one
  3. * or more contributor license agreements. See the NOTICE file
  4. * distributed with this work for additional information
  5. * regarding copyright ownership. The ASF licenses this file
  6. * to you under the Apache License, Version 2.0 (the
  7. * "License"); you may not use this file except in compliance
  8. * with the License. You may obtain a copy of the License at
  9. *
  10. * http://www.apache.org/licenses/LICENSE-2.0
  11. *
  12. * Unless required by applicable law or agreed to in writing, software
  13. * distributed under the License is distributed on an "AS IS" BASIS,
  14. * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  15. * See the License for the specific language governing permissions and
  16. * limitations under the License.
  17. */
  18. module.exports = [
  19. {
  20. "name": "hadoop.security.authentication",
  21. "templateName": [],
  22. "foreignKey": null,
  23. "value": "kerberos",
  24. "filename": "core-site.xml"
  25. },
  26. {
  27. "name": "hadoop.security.authorization",
  28. "templateName": [],
  29. "foreignKey": null,
  30. "value": "true",
  31. "filename": "core-site.xml"
  32. },
  33. {
  34. "name": "hadoop.security.auth_to_local",
  35. "templateName": ["jobtracker_primary_name", "kerberos_domain", "mapred_user", "tasktracker_primary_name", "namenode_primary_name", "hdfs_user", "datanode_primary_name", "hbase_primary_name", "hbase_user"],
  36. "foreignKey": null,
  37. "value": "RULE:[2:$1@$0](<templateName[0]>@.*<templateName[1]>)s/.*/<templateName[2]>/ RULE:[2:$1@$0](<templateName[3]>@.*<templateName[1]>)s/.*/<templateName[2]>/ RULE:[2:$1@$0](<templateName[4]>@.*<templateName[1]>)s/.*/<templateName[5]>/ RULE:[2:$1@$0](<templateName[6]>@.*<templateName[1]>)s/.*/<templateName[5]>/ RULE:[2:$1@$0](<templateName[7]>@.*<templateName[1]>)s/.*/<templateName[8]>/ DEFAULT",
  38. "filename": "core-site.xml"
  39. },
  40. {
  41. "name": "dfs.namenode.kerberos.principal",
  42. "templateName": ["namenode_principal_name", "kerberos_domain"],
  43. "foreignKey": null,
  44. "value": "<templateName[0]>@<templateName[1]>",
  45. "filename": "hdfs-site.xml"
  46. },
  47. {
  48. "name": "dfs.namenode.keytab.file",
  49. "templateName": ["namenode_keytab"],
  50. "foreignKey": null,
  51. "value": "<templateName[0]>",
  52. "filename": "hdfs-site.xml"
  53. },
  54. {
  55. "name": "dfs.secondary.namenode.kerberos.principal",
  56. "templateName": ["namenode_principal_name", "kerberos_domain"],
  57. "foreignKey": null,
  58. "value": "<templateName[0]>@<templateName[1]>",
  59. "filename": "hdfs-site.xml"
  60. },
  61. {
  62. "name": "dfs.secondary.namenode.keytab.file",
  63. "templateName": ["namenode_keytab"],
  64. "foreignKey": null,
  65. "value": "<templateName[0]>",
  66. "filename": "hdfs-site.xml"
  67. },
  68. {
  69. "name": "dfs.web.authentication.kerberos.principal",
  70. "templateName": ["hadoop_http_principal_name", "kerberos_domain"],
  71. "foreignKey": null,
  72. "value": "<templateName[0]>@<templateName[1]>",
  73. "filename": "hdfs-site.xml"
  74. },
  75. {
  76. "name": "dfs.web.authentication.kerberos.keytab",
  77. "templateName": ["hadoop_http_keytab"],
  78. "foreignKey": null,
  79. "value": "<templateName[0]>",
  80. "filename": "hdfs-site.xml"
  81. },
  82. {
  83. "name": "dfs.datanode.kerberos.principal",
  84. "templateName": ["datanode_principal_name", "kerberos_domain"],
  85. "foreignKey": null,
  86. "value": "<templateName[0]>@<templateName[1]>",
  87. "filename": "hdfs-site.xml"
  88. },
  89. {
  90. "name": "dfs.datanode.keytab.file",
  91. "templateName": ["datanode_keytab"],
  92. "foreignKey": null,
  93. "value": "<templateName[0]>",
  94. "filename": "hdfs-site.xml"
  95. },
  96. {
  97. "name": "dfs.namenode.kerberos.internal.spnego.principal",
  98. "templateName": [],
  99. "foreignKey": null,
  100. "value": "${dfs.web.authentication.kerberos.principal}",
  101. "filename": "hdfs-site.xml"
  102. },
  103. {
  104. "name": "dfs.secondary.namenode.kerberos.internal.spnego.principal",
  105. "templateName": [],
  106. "foreignKey": null,
  107. "value": "${dfs.web.authentication.kerberos.principal}",
  108. "filename": "hdfs-site.xml"
  109. },
  110. {
  111. "name": "dfs.datanode.address",
  112. "templateName": ["dfs_datanode_address"],
  113. "foreignKey": null,
  114. "value": "0.0.0.0:<templateName[0]>",
  115. "filename": "hdfs-site.xml"
  116. },
  117. {
  118. "name": "dfs.datanode.http.address",
  119. "templateName": ["dfs_datanode_http_address"],
  120. "foreignKey": null,
  121. "value": "0.0.0.0:<templateName[0]>",
  122. "filename": "hdfs-site.xml"
  123. },
  124. {
  125. "name": "mapreduce.jobtracker.kerberos.principal",
  126. "templateName": ["jobtracker_principal_name", "kerberos_domain"],
  127. "foreignKey": null,
  128. "value": "<templateName[0]>@<templateName[1]>",
  129. "filename": "mapred-site.xml"
  130. },
  131. {
  132. "name": "mapreduce.jobtracker.keytab.file",
  133. "templateName": ["jobtracker_keytab"],
  134. "foreignKey": null,
  135. "value": "<templateName[0]>",
  136. "filename": "mapred-site.xml"
  137. },
  138. {
  139. "name": "mapreduce.tasktracker.kerberos.principal",
  140. "templateName": ["tasktracker_principal_name", "kerberos_domain"],
  141. "foreignKey": null,
  142. "value": "<templateName[0]>@<templateName[1]>",
  143. "filename": "mapred-site.xml"
  144. },
  145. {
  146. "name": "mapreduce.tasktracker.keytab.file",
  147. "templateName": ["tasktracker_keytab"],
  148. "foreignKey": null,
  149. "value": "<templateName[0]>",
  150. "filename": "mapred-site.xml"
  151. },
  152. {
  153. "name": "hbase.master.kerberos.principal",
  154. "templateName": ["hbase_principal_name", "kerberos_domain"],
  155. "foreignKey": null,
  156. "value": "<templateName[0]>@<templateName[1]>",
  157. "filename": "hbase-site.xml"
  158. },
  159. {
  160. "name": "hbase.master.keytab.file",
  161. "templateName": ["hbase_service_keytab"],
  162. "foreignKey": null,
  163. "value": "<templateName[0]>",
  164. "filename": "hbase-site.xml"
  165. },
  166. {
  167. "name": "hbase.regionserver.kerberos.principal",
  168. "templateName": ["hbase_principal_name", "kerberos_domain"],
  169. "foreignKey": null,
  170. "value": "<templateName[0]>@<templateName[1]>",
  171. "filename": "hbase-site.xml"
  172. },
  173. {
  174. "name": "hbase.regionserver.keytab.file",
  175. "templateName": ["hbase_service_keytab"],
  176. "foreignKey": null,
  177. "value": "<templateName[0]>",
  178. "filename": "hbase-site.xml"
  179. },
  180. {
  181. "name": "hive.metastore.sasl.enabled",
  182. "templateName": [],
  183. "foreignKey": null,
  184. "value": "true",
  185. "filename": "hive-site.xml"
  186. },
  187. {
  188. "name": "hive.server2.authentication",
  189. "templateName": [],
  190. "foreignKey": null,
  191. "value": "KERBEROS",
  192. "filename": "hive-site.xml"
  193. },
  194. {
  195. "name": "hive.metastore.kerberos.principal",
  196. "templateName": ["hive_metastore_principal_name", "kerberos_domain"],
  197. "foreignKey": null,
  198. "value": "<templateName[0]>@<templateName[1]>",
  199. "filename": "hive-site.xml"
  200. },
  201. {
  202. "name": "hive.metastore.kerberos.keytab.file",
  203. "templateName": ["hive_metastore__keytab"],
  204. "foreignKey": null,
  205. "value": "<templateName[0]>",
  206. "filename": "hive-site.xml"
  207. },
  208. {
  209. "name": "hive.server2.authentication.kerberos.principal",
  210. "templateName": ["hive_metastore_principal_name", "kerberos_domain"],
  211. "foreignKey": null,
  212. "value": "<templateName[0]>@<templateName[1]>",
  213. "filename": "hive-site.xml"
  214. },
  215. {
  216. "name": "hive.server2.authentication.kerberos.keytab",
  217. "templateName": ["hive_metastore__keytab"],
  218. "foreignKey": null,
  219. "value": "<templateName[0]>",
  220. "filename": "hive-site.xml"
  221. },
  222. {
  223. "name": "oozie.service.AuthorizationService.authorization.enabled",
  224. "templateName": [],
  225. "foreignKey": null,
  226. "value": "true",
  227. "filename": "oozie-site.xml"
  228. },
  229. {
  230. "name": "oozie.service.HadoopAccessorService.kerberos.enabled",
  231. "templateName": [],
  232. "foreignKey": null,
  233. "value": "true",
  234. "filename": "oozie-site.xml"
  235. },
  236. {
  237. "name": "local.realm",
  238. "templateName": ["kerberos_domain"],
  239. "foreignKey": null,
  240. "value": "<templateName[0]>",
  241. "filename": "oozie-site.xml"
  242. },
  243. {
  244. "name": "oozie.service.HadoopAccessorService.keytab.file",
  245. "templateName": ["oozie_keytab"],
  246. "foreignKey": null,
  247. "value": "<templateName[0]>",
  248. "filename": "oozie-site.xml"
  249. },
  250. {
  251. "name": "oozie.service.HadoopAccessorService.kerberos.principal",
  252. "templateName": ["oozie_principal_name", "kerberos_domain"],
  253. "foreignKey": null,
  254. "value": "<templateName[0]>@<templateName[1]>",
  255. "filename": "oozie-site.xml"
  256. },
  257. {
  258. "name": "oozie.authentication.type",
  259. "templateName": [],
  260. "foreignKey": null,
  261. "value": "kerberos",
  262. "filename": "oozie-site.xml"
  263. },
  264. {
  265. "name": "oozie.authentication.kerberos.principal",
  266. "templateName": ["oozie_http_principal_name", "kerberos_domain"],
  267. "foreignKey": null,
  268. "value": "<templateName[0]>@<templateName[1]>",
  269. "filename": "oozie-site.xml"
  270. },
  271. {
  272. "name": "oozie.authentication.kerberos.keytab",
  273. "templateName": ["hadoop_http_keytab"],
  274. "foreignKey": null,
  275. "value": "<templateName[0]>",
  276. "filename": "oozie-site.xml"
  277. },
  278. {
  279. "name": "oozie.authentication.kerberos.name.rules",
  280. "templateName": ["jobtracker_primary_name", "kerberos_domain", "mapred_user", "tasktracker_primary_name", "namenode_primary_name", "hdfs_user", "datanode_primary_name", "hbase_primary_name", "hbase_user"],
  281. "foreignKey": null,
  282. "value": "RULE:[2:$1@$0](<templateName[0]>@.*<templateName[1]>)s/.*/<templateName[2]>/ RULE:[2:$1@$0](<templateName[3]>@.*<templateName[1]>)s/.*/<templateName[2]>/ RULE:[2:$1@$0](<templateName[4]>@.*<templateName[1]>)s/.*/<templateName[5]>/ RULE:[2:$1@$0](<templateName[6]>@.*<templateName[1]>)s/.*/<templateName[5]>/ RULE:[2:$1@$0](<templateName[7]>@.*<templateName[1]>)s/.*/<templateName[8]>/ DEFAULT",
  283. "filename": "oozie-site.xml"
  284. },
  285. {
  286. "name": "templeton.kerberos.principal",
  287. "templateName": ["webHCat_http_principal_name", "kerberos_domain"],
  288. "foreignKey": null,
  289. "value": "<templateName[0]>@<templateName[1]>",
  290. "filename": "webhcat-site.xml"
  291. },
  292. {
  293. "name": "templeton.kerberos.keytab",
  294. "templateName": ["hadoop_http_keytab"],
  295. "foreignKey": null,
  296. "value": "<templateName[0]>",
  297. "filename": "webhcat-site.xml"
  298. },
  299. {
  300. "name": "templeton.kerberos.secret",
  301. "templateName": [""],
  302. "foreignKey": null,
  303. "value": "secret",
  304. "filename": "webhcat-site.xml"
  305. },
  306. {
  307. "name": "templeton.kerberos.properties",
  308. "templateName": ["hive_user"],
  309. "foreignKey": null,
  310. "value": "hive.metastore.local=false, hive.metastore.uris=thrift://MetastoreHost_FQDN:9083, hive.q" +
  311. "metastore.sasl.enabled=true,hive.metastore.execute.setugi= true, hive.exec.mode.local.auto=false, hive.metastore.kerberos.principal=<templateName[0]>/_HOST@EXAMPLE.COM",
  312. "filename": "webhcat-site.xml"
  313. },
  314. {
  315. "name": "hbase.coprocessor.master.classes",
  316. "templateName": [],
  317. "foreignKey": null,
  318. "value": "org.apache.hadoop.hbase.security.access.AccessController",
  319. "filename": "hbase-site.xml"
  320. },
  321. {
  322. "name": "hbase.coprocessor.region.classes",
  323. "templateName": [],
  324. "foreignKey": null,
  325. "value": "org.apache.hadoop.hbase.security.token.TokenProvider,org.apache.hadoop.hbase.security.access.SecureBulkLoadEndpoint,org.apache.hadoop.hbase.security.access.AccessController",
  326. "filename": "hbase-site.xml"
  327. },
  328. {
  329. "name": "hbase.security.authentication",
  330. "templateName": [],
  331. "foreignKey": null,
  332. "value": "kerberos",
  333. "filename": "hbase-site.xml"
  334. },
  335. {
  336. "name": "hbase.rpc.engine",
  337. "templateName": [],
  338. "foreignKey": null,
  339. "value": "org.apache.hadoop.hbase.ipc.SecureRpcEngine",
  340. "filename": "hbase-site.xml"
  341. },
  342. {
  343. "name": "hbase.security.authorization",
  344. "templateName": [],
  345. "foreignKey": null,
  346. "value": "true",
  347. "filename": "hbase-site.xml"
  348. },
  349. {
  350. "name": "hbase.bulkload.staging.dir",
  351. "templateName": [],
  352. "foreignKey": null,
  353. "value": "/apps/hbase/staging",
  354. "filename": "hbase-site.xml"
  355. },
  356. {
  357. "name": "zookeeper.znode.parent",
  358. "templateName": [],
  359. "foreignKey": null,
  360. "value": "/hbase-secure",
  361. "filename": "hbase-site.xml"
  362. },
  363. {
  364. "name": "hadoop.proxyuser.<foreignKey[0]>.groups",
  365. "templateName": ["proxyuser_group"],
  366. "foreignKey": ["hive_metastore_primary_name"],
  367. "value": "<templateName[0]>",
  368. "filename": "core-site.xml"
  369. },
  370. {
  371. "name": "hadoop.proxyuser.<foreignKey[0]>.hosts",
  372. "templateName": ["hivemetastore_host"],
  373. "foreignKey": ["hive_metastore_primary_name"],
  374. "value": "<templateName[0]>",
  375. "filename": "core-site.xml"
  376. },
  377. {
  378. "name": "hadoop.proxyuser.<foreignKey[0]>.groups",
  379. "templateName": ["proxyuser_group"],
  380. "foreignKey": ["oozie_primary_name"],
  381. "value": "<templateName[0]>",
  382. "filename": "core-site.xml"
  383. },
  384. {
  385. "name": "hadoop.proxyuser.<foreignKey[0]>.hosts",
  386. "templateName": ["oozieserver_host"],
  387. "foreignKey": ["oozie_primary_name"],
  388. "value": "<templateName[0]>",
  389. "filename": "core-site.xml"
  390. }
  391. ];