123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198 |
- <html>
- <body>
- <h2>Configuration Properties</h2>
- <table border="1">
- <tr>
- <th>name</th><th>value</th><th>description</th>
- </tr>
- <tr>
- <td><a name="httpfs.http.port">httpfs.http.port</a></td><td>14000</td><td>
- The HTTP port for HttpFS REST API.
- </td>
- </tr>
- <tr>
- <td><a name="httpfs.http.hostname">httpfs.http.hostname</a></td><td>0.0.0.0</td><td>
- The bind host for HttpFS REST API.
- </td>
- </tr>
- <tr>
- <td><a name="httpfs.http.administrators">httpfs.http.administrators</a></td><td></td><td>ACL for the admins, this configuration is used to control
- who can access the default servlets for HttpFS server. The value
- should be a comma separated list of users and groups. The user list
- comes first and is separated by a space followed by the group list,
- e.g. "user1,user2 group1,group2". Both users and groups are optional,
- so "user1", " group1", "", "user1 group1", "user1,user2 group1,group2"
- are all valid (note the leading space in " group1"). '*' grants access
- to all users and groups, e.g. '*', '* ' and ' *' are all valid.
- </td>
- </tr>
- <tr>
- <td><a name="httpfs.ssl.enabled">httpfs.ssl.enabled</a></td><td>false</td><td>
- Whether SSL is enabled. Default is false, i.e. disabled.
- </td>
- </tr>
- <tr>
- <td><a name="hadoop.http.idle_timeout.ms">hadoop.http.idle_timeout.ms</a></td><td>60000</td><td>
- Httpfs Server connection timeout in milliseconds.
- </td>
- </tr>
- <tr>
- <td><a name="hadoop.http.max.threads">hadoop.http.max.threads</a></td><td>1000</td><td>
- The maxmimum number of threads.
- </td>
- </tr>
- <tr>
- <td><a name="hadoop.http.max.request.header.size">hadoop.http.max.request.header.size</a></td><td>65536</td><td>
- The maxmimum HTTP request header size.
- </td>
- </tr>
- <tr>
- <td><a name="hadoop.http.max.response.header.size">hadoop.http.max.response.header.size</a></td><td>65536</td><td>
- The maxmimum HTTP response header size.
- </td>
- </tr>
- <tr>
- <td><a name="hadoop.http.temp.dir">hadoop.http.temp.dir</a></td><td>${hadoop.tmp.dir}/httpfs</td><td>
- HttpFS temp directory.
- </td>
- </tr>
- <tr>
- <td><a name="httpfs.buffer.size">httpfs.buffer.size</a></td><td>4096</td><td>
- The buffer size used by a read/write request when streaming data from/to
- HDFS.
- </td>
- </tr>
- <tr>
- <td><a name="httpfs.services">httpfs.services</a></td><td>
- org.apache.hadoop.lib.service.instrumentation.InstrumentationService,
- org.apache.hadoop.lib.service.scheduler.SchedulerService,
- org.apache.hadoop.lib.service.security.GroupsService,
- org.apache.hadoop.lib.service.hadoop.FileSystemAccessService
- </td><td>
- Services used by the httpfs server.
- </td>
- </tr>
- <tr>
- <td><a name="kerberos.realm">kerberos.realm</a></td><td>LOCALHOST</td><td>
- Kerberos realm, used only if Kerberos authentication is used between
- the clients and httpfs or between HttpFS and HDFS.
- This property is only used to resolve other properties within this
- configuration file.
- </td>
- </tr>
- <tr>
- <td><a name="httpfs.hostname">httpfs.hostname</a></td><td>${httpfs.http.hostname}</td><td>
- Property used to synthetize the HTTP Kerberos principal used by httpfs.
- This property is only used to resolve other properties within this
- configuration file.
- </td>
- </tr>
- <tr>
- <td><a name="hadoop.http.authentication.signature.secret.file">hadoop.http.authentication.signature.secret.file</a></td><td>${httpfs.config.dir}/httpfs-signature.secret</td><td>
- File containing the secret to sign HttpFS hadoop-auth cookies.
- This file should be readable only by the system user running HttpFS service.
- If multiple HttpFS servers are used in a load-balancer/round-robin fashion,
- they should share the secret file.
- If the secret file specified here does not exist or it is empty, a random
- secret is generated at startup time.
- httpfs.authentication.signature.secret.file is deprecated. Instead use
- hadoop.http.authentication.signature.secret.file.
- </td>
- </tr>
- <tr>
- <td><a name="hadoop.http.authentication.type">hadoop.http.authentication.type</a></td><td>simple</td><td>
- Defines the authentication mechanism used by httpfs for its HTTP clients.
- Valid values are 'simple' or 'kerberos'.
- If using 'simple' HTTP clients must specify the username with the
- 'user.name' query string parameter.
- If using 'kerberos' HTTP clients must use HTTP SPNEGO or delegation tokens.
- httpfs.authentication.type is deprecated. Instead use
- hadoop.http.authentication.type.
- </td>
- </tr>
- <tr>
- <td><a name="hadoop.http.authentication.kerberos.principal">hadoop.http.authentication.kerberos.principal</a></td><td>HTTP/${httpfs.hostname}@${kerberos.realm}</td><td>
- The HTTP Kerberos principal used by HttpFS in the HTTP endpoint.
- The HTTP Kerberos principal MUST start with 'HTTP/' per Kerberos
- HTTP SPNEGO specification.
- httpfs.authentication.kerberos.principal is deprecated. Instead use
- hadoop.http.authentication.kerberos.principal.
- </td>
- </tr>
- <tr>
- <td><a name="hadoop.http.authentication.kerberos.keytab">hadoop.http.authentication.kerberos.keytab</a></td><td>${user.home}/httpfs.keytab</td><td>
- The Kerberos keytab file with the credentials for the
- HTTP Kerberos principal used by httpfs in the HTTP endpoint.
- httpfs.authentication.kerberos.keytab is deprecated. Instead use
- hadoop.http.authentication.kerberos.keytab.
- </td>
- </tr>
- <tr>
- <td><a name="httpfs.delegation.token.manager.update.interval">httpfs.delegation.token.manager.update.interval</a></td><td>86400</td><td>
- HttpFS delegation token update interval, default 1 day, in seconds.
- </td>
- </tr>
- <tr>
- <td><a name="httpfs.delegation.token.manager.max.lifetime">httpfs.delegation.token.manager.max.lifetime</a></td><td>604800</td><td>
- HttpFS delegation token maximum lifetime, default 7 days, in seconds
- </td>
- </tr>
- <tr>
- <td><a name="httpfs.delegation.token.manager.renewal.interval">httpfs.delegation.token.manager.renewal.interval</a></td><td>86400</td><td>
- HttpFS delegation token update interval, default 1 day, in seconds.
- </td>
- </tr>
- <tr>
- <td><a name="httpfs.hadoop.authentication.type">httpfs.hadoop.authentication.type</a></td><td>simple</td><td>
- Defines the authentication mechanism used by httpfs to connect to
- the HDFS Namenode.
- Valid values are 'simple' and 'kerberos'.
- </td>
- </tr>
- <tr>
- <td><a name="httpfs.hadoop.authentication.kerberos.keytab">httpfs.hadoop.authentication.kerberos.keytab</a></td><td>${user.home}/httpfs.keytab</td><td>
- The Kerberos keytab file with the credentials for the
- Kerberos principal used by httpfs to connect to the HDFS Namenode.
- </td>
- </tr>
- <tr>
- <td><a name="httpfs.hadoop.authentication.kerberos.principal">httpfs.hadoop.authentication.kerberos.principal</a></td><td>${user.name}/${httpfs.hostname}@${kerberos.realm}</td><td>
- The Kerberos principal used by httpfs to connect to the HDFS Namenode.
- </td>
- </tr>
- <tr>
- <td><a name="httpfs.hadoop.filesystem.cache.purge.frequency">httpfs.hadoop.filesystem.cache.purge.frequency</a></td><td>60</td><td>
- Frequency, in seconds, for the idle filesystem purging daemon runs.
- </td>
- </tr>
- <tr>
- <td><a name="httpfs.hadoop.filesystem.cache.purge.timeout">httpfs.hadoop.filesystem.cache.purge.timeout</a></td><td>60</td><td>
- Timeout, in seconds, for an idle filesystem to be purged.
- </td>
- </tr>
- <tr>
- <td><a name="httpfs.access.mode">httpfs.access.mode</a></td><td>read-write</td><td>
- Sets the access mode for HTTPFS. If access is not allowed the FORBIDDED (403) is returned.
- Valid access modes are:
- read-write Full Access allowed
- write-only PUT POST and DELETE full Access. GET only allows GETFILESTATUS and LISTSTATUS
- read-only GET Full Access PUT POST and DELETE are FORBIDDEN
- </td>
- </tr>
- </table>
- </body>
- </html>
|