使用keytab提交oozie作业

本文介绍了使用keytab提交oozie作业的处理方法，对大家解决问题具有一定的参考价值，需要的朋友们下面随着小编来一起学习吧！ 问题描述

我正在使用一个keytab文件绕过kerberos，从而通过oozie运行shell脚本. Shell脚本包含hbase shell命令，因此我需要在运行hbase shell命令之前先进行一次kinit.这对我来说很好.

I am using a keytab file to bypass kerberos to run a shell script through oozie. Shell script includes hbase shell commands so I nee to do a kinit before running hbase shell commands.This works fine for me.

因此，在我使用协调器启动作业并使用keytab(服务帐户)在工作流中包含多个shell脚本的情况下，oozie是否会发生冲突?因为我使用oozie coordinator启动了作业但具有keytab服务帐户的工作流程中的文件.

So, in a case where I launch the job using a coordinator and have several shell scripts in the workflow using a keytab(service account) will there be a conflict in oozie ?Since I launch the job using oozie coordinator but have keytab files in workflow of a service account.

谢谢

推荐答案

密钥表文件必须存在于所有hadoop数据节点上.您的Shell脚本在作为oozie作业/地图任务运行以为服务帐户执行kinit时需要它们.

The keytab files need to exist on all hadoop data nodes. Your shell scripts need them when running as a oozie job/map task to execute kinit for service accounts.

将密钥表文件部署到共享集群的数据节点时，最好正确设置文件许可权，以使其他hadoop作业无法访问它.

When deploying keytab files to data nodes of shared cluster, it's best to set file permission correctly so that other hadoop jobs will not have access to it.