Configure impersonation for Flume agents to allow one user (the mapr super user) to access data and submit jobs on behalf of another user.
- Complete the steps to enable Impersonation for the mapr Superuser.
flume.conffile with the following properties:
Property Value Comment <agent>.sinks.<sink>.type HDFS <agent>.sinks.<sink>.hdfs.proxyUser user ID of target user Can be any valid MapR user identity. <agent>.sinks.<sink>.hdfs.kerberosPrincipal mapr/FQDN@REALM.COM The user component of the principal must be the username of the user running
flume-ng. Flume agents that use impersonation must run as the user
mapron the cluster.
<agent>.sinks.<sink>.hdfs.kerberosKeytab path to file If you are not using Kerberos to authenticate, this can be the path to any valid file. If you are using Kerberos to authenticate, provide the path to your
In the the flume-ng file (/opt/mapr/flume/flume-<version>/bin/flume-ng), add
export MAPR_IMPERSONATION_ENABLED=1after the HADOOP_HOME setting:
Flume 1.6 Example:
Flume 1.5 Example: