Administrator Guide

9.9.4
- 9.9.3
- 9.9.2
- 9.9.1
- 9.9
- 9.8.4
- 9.8.3
- 9.8.2
- 9.8.1
- 9.8.0

Back Next

Configuring the ddm.security file

To configure Kerberos encryption for Hive databases, you must specify the following values in the

ddm.security

file.

For the value of the principal key, specify the Dynamic Data Masking SPN.

For example:

ddmserver/ddmhost@realm.com

For the value of the keyTab key, specify the keytab file name with path.

For example:

cfg/ddmService.keytab

If Hive is configured with auth-conf, define the port strategy for the service:

Key is the port number of Dynamic Data Masking for the Hive service.

Value is a map with the key as

sasl.qop

and the value as

auth-conf

For example, the following

ddm.security

file is configured for the Dynamic Data Masking for Hive service running on port 10001:


<XML>
 <kdc>/etc/krb5.conf</kdc>
 <jaasConfig type="ArrayList">
	<entry type="JaasDescriptor"> 
		<fqcn>com.activebase.security.jaas.JaasProcessorImpl</fqcn> 
		<configuration> 
			<jaasEntries type="HashMap"> 
				<entry> 
					<value type="ArrayList"> 
						<entry type="HashMap"> 
							<entry> 
								<value>com.sun.security.auth.module.Krb5LoginModule</value> 
								<key>moduleClass</key> 
							</entry> 
							<entry> 
								<value>required</value> 
								<key>moduleFlag</key> 
							</entry> 
							<entry> 
								<value type="HashMap"> 
									<entry> 
										<value>ddmserver/ddmhost@realm.com</value>
										<key>principal</key> 
									</entry> 
									<entry> 
										<value>cfg/ddmService.keytab</value>
										<key>keyTab</key> 
									</entry> 
								</value> 
								<key>options</key> 
							</entry> 
						</entry> 
					</value> 
					<key>default</key>
				</entry> 
			</jaasEntries> 
		</configuration> 
	</entry>
</jaasConfig>
<serviceStrategies type="ArrayList">
	<entry type="StrategyDescriptor">
		<fqcn>com.activebase.security.service.strategies.PortStrategy</fqcn> 
		<configuration> 
			<ports type="HashMap"> 
				<entry> 
					<key>10001</key> 
					<value type="HashMap"> 
						<entry> 
							<key>sasl.qop</key> 
							<value>auth-conf</value> 
						</entry> 
					</value> 
				</entry> 
			</ports>
		</configuration>
	</entry>
</serviceStrategies>
</XML>

Rename Saved Search

Table of Contents

Administrator Guide

Administrator Guide

Configuring the ddm.security file

Configuring the ddm.security file