More changes to get HBase to work

ck0903 · Feb 22, 2017 · d10393c · d10393c
1 parent 8432233
commit d10393c
Show file tree

Hide file tree

Showing 2 changed files with 18 additions and 6 deletions.
diff --git a/cluster/ansible/roles/hadoop/templates/etc/hadoop/conf/core-site.xml.j2 b/cluster/ansible/roles/hadoop/templates/etc/hadoop/conf/core-site.xml.j2
@@ -31,6 +31,10 @@
     <name>hadoop.security.authentication</name>
     <value>kerberos</value>
   </property>
+  <property>
+    <name>hadoop.rpc.protection</name>
+    <value>privacy</value>
+  </property>
   <property>
     <!-- enables service-level-authentication on RPC layer -->
     <name>hadoop.security.authorization</name>

diff --git a/cluster/ansible/roles/hadoop/templates/etc/hadoop/conf/hdfs-site.xml.j2 b/cluster/ansible/roles/hadoop/templates/etc/hadoop/conf/hdfs-site.xml.j2
@@ -78,8 +78,20 @@
     <value>0.0.0.0:50075</value>
   </property>
   <property>
-    <name>OFF-dfs.data.transfer.protection</name>
-    <value>privacy</value>
+    <name>dfs.data.transfer.protection</name>
+    <value>authentication</value>
+  </property>
+  <property>
+    <name>dfs.encrypt.data.transfer</name>
+    <value>true</value>
+  </property>
+  <property>
+    <name>dfs.encrypt.data.transfer.cipher.suites</name>
+    <value>AES/CTR/NoPadding</value>
+  </property>
+  <property>
+    <name>dfs.encrypt.data.transfer.cipher.key.bitlength</name>
+    <value>256</value>
   </property>
   <property>
     <name>dfs.http.policy</name>
@@ -101,9 +113,5 @@
     <name>dfs.web.authentication.kerberos.principal</name>
     <value>HTTP/_HOST@{{ KRB_REALM }}</value>
   </property>
-  <property>
-    <name>dfs.http.policy</name>
-    <value>HTTPS_ONLY</value>
-  </property>
   {% endif -%}
 </configuration>