Data Engineering Administrator Guide

10.5.1
- 10.5.2
- 10.5
- 10.4.1
- 10.4.0
- 10.2.2 HotFix 1
- 10.2.2 Service Pack 1
- 10.2.2
- 10.2.1

Back Next

User Impersonation in the Hadoop Environment

To enable different users to run mapping and workflow jobs on a Hadoop cluster that uses Kerberos authentication, you must configure user impersonation in the Hadoop environment.

For example, you want to enable user Bob to run mappings and workflows on the Hadoop cluster that uses Kerberos authentication.

To enable user impersonation, you must complete the following steps:

In the Active Directory, enable delegation for the Service Principal Name for the Data Integration Service to enable Bob to run Hadoop jobs.

If the service principal name (SPN) is different from the impersonation user, grant read permission on Hive tables to the SPN user.

Specify Bob as the user name in the Hadoop connection.

To run a kinit command in a Command task, use a custom Kerberos credential cache file location to separate users. This allows the Data Integration Service to run mappings in parallel and isolate the internal Kerberos authentication.

Rename Saved Search

Table of Contents

Data Engineering Administrator Guide

Data Engineering Administrator Guide

User Impersonation in the Hadoop Environment

User Impersonation in the Hadoop Environment