HDP 3.1 开启kerberos后去掉web页面认证

hadoop 页面

hadoop.http.authentication.simple.anonymous.allowed = true
hadoop.http.authentication.type = simple

这个改完以后
yarn页面。
yarn-env.sh 去掉

{% if rm_security_opts is defined %}
YARN_RESOURCEMANAGER_OPTS="{{rm_security_opts}} $YARN_RESOURCEMANAGER_OPTS"
{% endif %}

spark-history 的权限限制在

spark-env 去掉下面的内容。

{% if security_enabled %}
export SPARK_HISTORY_OPTS='-Dspark.ui.filters=org.apache.hadoop.security.authentication.server.AuthenticationFilter -Dspark.org.apache.hadoop.security.authentication.server.AuthenticationFilter.params="type=kerberos,kerberos.principal={{spnego_principal}},kerberos.keytab={{spnego_keytab}}"'
{% endif %}

MR history 在
mr-env中去掉

{% if security_enabled %}
      export MAPRED_HISTORYSERVER_OPTS="-Djava.security.auth.login.config={{mapred_jaas_file}}  -Djavax.security.auth.useSubjectCredsOnly=false"
      {% endif %}