7.8. 在Kerberos集群上启动Lsql
- krb5.conf与user.keytab拷贝启动集群,且不要更改文件名。放到/opt/software/lsql/kerberos目录下
- 获取JDK中的“sunjce_provider.jar”放入LSQL的lib目录下。
- 集群的内存检查参数 yarn.nodemanager.pmem-check-enabled与yarn.nodemanager.vmem-check-enabled一定要都配置成false,
- 进行如下配置后 启动lsql即可
export CL_CUSTOM_CONF=" --conf spark.yarn.keytab=/opt/software/lsql/kerberos/user.keytab"
export CL_CUSTOM_CONF="${CL_CUSTOM_CONF} --conf spark.yarn.principal=test1"
export CL_CUSTOM_CONF="${CL_CUSTOM_CONF} --hiveconf hive.server2.authentication.kerberos.keytab=/opt/software/lsql/kerberos/user.keytab"
export CL_CUSTOM_CONF="${CL_CUSTOM_CONF} --hiveconf hive.server2.authentication.kerberos.principal=test1"export CL_CUSTOM_OPTS=" -Dcl.security.kerberos=true "
export CL_CUSTOM_OPTS="${CL_CUSTOM_OPTS} -Dcl.kerberos.user=test1 "
export CL_CUSTOM_OPTS="${CL_CUSTOM_OPTS} -Dcl.hadoop.conf.setting=hadoop.security.authentication@kerberos "