Add the following to the
hbase-site.xmlfile for every Thrift gateway:
Substitute the appropriate credential and keytab for
In order to use the Thrift API principal to interact with HBase, it is also necessary to add the
acltable. For example, to give the Thrift API principal,
thrift_server, administrative access, a command such as this one will suffice:
For more information about ACLs, see Access Control Labels (ACLs).
The Thrift gateway will authenticate with HBase using the supplied credential. No authentication will be performed by the Thrift gateway itself. All client access via the Thrift gateway will use the Thrift gateway’s credential and have its privilege.