Configure Flume to Use Kerberos

Because HBase traffic is secured with Kerberos, you must configure Flume to use Kerberos in order to write sinks to secure HBase using Flume's HBaseSink. Once Kerberos is enabled, the maprlogin ticket generation is performed implicitly. After installing Flume, follow these steps to configure Flume to use Kerberos authentication.

  1. Verify that a keytab file called flume.keytab already exists and contains a principal that matches the Kerberos identity of the user that will be running flume-ng.
  2. Verify that your flume.conf file contains the following properties:
    1. agents.sink.hbaseSink.kerberosPrincipal = user/FQDN@REALM.COM
      Set this property to the Kerberos identity of the user running flume-ng.
    2. agents.sink.hbaseSink.kerberosKeytab = path_to_keytab
      Set this property to the path to the valid keytab file for the user running flume-ng.