Table of Contents

Search

  1. Preface
  2. Introduction to Data Engineering Administration
  3. Authentication
  4. Running Mappings on a Cluster with Kerberos Authentication
  5. Authorization
  6. Cluster Configuration
  7. Cloud Provisioning Configuration
  8. Data Integration Service Processing
  9. Appendix A: Connections Reference
  10. Appendix B: Monitoring REST API

Data Engineering Administrator Guide

Data Engineering Administrator Guide

Support for Authorization Systems on Hadoop

Support for Authorization Systems on Hadoop

Depending on the run-time engine that you use, you can run mappings on a Hadoop cluster that uses a supported security management system.
Hadoop clusters use a variety of security management systems for user authorization. The following table shows the run-time engines supported for the security management system installed on the Hadoop platform:
Hadoop Distribution
Apache Ranger
Apache Sentry
HDFS Transparent Encryption
SSL/TLS
SQL Authorization
Amazon EMR
No support
No support
No support
No support
No support
Azure HDInsight
  • Native
  • Blaze
  • Spark
No support
No support
No support
  • Native
  • Blaze
  • Spark
Cloudera CDH
No support
  • Native
  • Blaze
  • Spark
  • Native
  • Blaze
  • Spark
  • Native
  • Blaze
  • Spark
  • Native
  • Blaze
  • Spark
Cloudera CDP
  • Native
  • Blaze*
  • Spark
No support
  • Native
  • Spark
  • Native
  • Spark
  • Native
  • Spark
Hortonworks HDP
  • Native
  • Blaze
  • Spark
No support
  • Native
  • Blaze
  • Spark
  • Native
  • Blaze
  • Spark
  • Native
  • Blaze
  • Spark
MapR
No support
No support
No support
  • Native
  • Blaze
  • Spark
No support
* For Cloudera CDP Public Cloud, Apache Ranger is supported on Data Lake clusters only. Data Hub clusters do not support Apache Ranger authorization.

Additional Information for Authorization

Consider the following additional security support statements:
  • Informatica supports an Azure HDInsight cluster with Enterprise Security Package. The Enterprise Security Package uses Kerberos for authentication and Apache Ranger for authorization.
  • Sqoop cannot access SSL-enabled databases.
  • Data Engineering Integration supports one type of authorization for each distribution with the following exceptions:
    • Apache Ranger and SQL authorization are both supported on an instance of Hortonworks HDP.
    • Apache Sentry and SQL authorization are both supported on an instance of Cloudera CDH.

0 COMMENTS

We’d like to hear from you!