| <!DOCTYPE html> |
| <head> |
| <meta charset="utf-8"> |
| <meta http-equiv="X-UA-Compatible" content="IE=edge"> |
| |
| <title>Eagle - HDFS Authorization Activity Monitoring Quick Start</title> |
| <meta name="description" content="Eagle - Analyze Big Data Platforms for Security and Performance"> |
| |
| <meta name="keywords" content="Eagle, Hadoop, Security, Real Time"> |
| <meta name="author" content="eBay Inc."> |
| |
| <meta charset="utf-8"> |
| <meta name="viewport" content="initial-scale=1"> |
| |
| <link rel="stylesheet" href="/css/animate.css"> |
| <link rel="stylesheet" href="/css/bootstrap.min.css"> |
| |
| <link rel="stylesheet" href="/css/font-awesome.min.css"> |
| |
| <link rel="stylesheet" href="/css/misc.css"> |
| <link rel="stylesheet" href="/css/style.css"> |
| <link rel="stylesheet" href="/css/styles.css"> |
| <link rel="stylesheet" href="/css/main.css"> |
| <link rel="alternate" type="application/rss+xml" title="Eagle" href="http://goeagle.io/feed.xml" /> |
| <link rel="shortcut icon" href="/images/favicon.png"> |
| |
| <!-- Baidu Analytics Tracking--> |
| <script> |
| var _hmt = _hmt || []; |
| (function() { |
| var hm = document.createElement("script"); |
| hm.src = "//hm.baidu.com/hm.js?fedc55df2ea52777a679192e8f849ece"; |
| var s = document.getElementsByTagName("script")[0]; |
| s.parentNode.insertBefore(hm, s); |
| })(); |
| </script> |
| |
| <!-- Google Analytics Tracking --> |
| <script> |
| (function(i,s,o,g,r,a,m){i['GoogleAnalyticsObject']=r;i[r]=i[r]||function(){ |
| (i[r].q=i[r].q||[]).push(arguments)},i[r].l=1*new Date();a=s.createElement(o), |
| m=s.getElementsByTagName(o)[0];a.async=1;a.src=g;m.parentNode.insertBefore(a,m) |
| })(window,document,'script','//www.google-analytics.com/analytics.js','ga'); |
| ga('create', 'UA-68929805-1', 'auto'); |
| ga('send', 'pageview'); |
| </script> |
| </head> |
| <body> |
| <!-- header start --> |
| <div id="home_page"> |
| <div class="topbar"> |
| <div class="container"> |
| <div class="row" > |
| <nav class="navbar navbar-default"> |
| <div class="container-fluid"> |
| <!-- Brand and toggle get grouped for better mobile display --> |
| <div class="navbar-header"> |
| <button type="button" class="navbar-toggle collapsed" data-toggle="collapse" data-target="#bs-example-navbar-collapse-1"> <span class="sr-only">Toggle navigation</span> <span class="icon-bar"></span> <span class="icon-bar"></span> <span class="icon-bar"></span> </button> |
| <a class="navbar-brand" href="/"><img src="/images/logo2.png" height="44px" style="margin-top:-7px"></a> </div> |
| |
| <!-- Collect the nav links, forms, and other content for toggling --> |
| <!-- <div class="collapse navbar-collapse" id="bs-example-navbar-collapse-1"> |
| <ul class="nav navbar-nav navbar-right" id="top-menu"> |
| <li><a class="menu" href="/#home_page">HOME</a></li> |
| <li><a class="menu" href="/docs/">DOCS</a></li> |
| <li><a class="menu" href="/#about_page">ABOUT</a></li> |
| <li><a class="menu" href="/#diagram_page">ARCHITECTURE</a></li> |
| <li><a class="menu" href="/#modules_page">MODULES</a></li> |
| <li><a class="menu" href="/#usecase_page">USE CASES</a></li> |
| <li> |
| </li> |
| </ul> --> |
| </div> |
| </div> |
| <!-- /.container-fluid --> |
| </nav> |
| </div> |
| </div> |
| </div> |
| <div class="headerimage"> |
| <div class="flexslider"> |
| <ul class="slides"> |
| <li><img src="/images/slider/4.jpg" alt="Slide 1"></li> |
| </ul> |
| </div> |
| </div> |
| <div class="particles" style="height:40%"> </div><!---particles--> |
| <div class="slider-caption" style="top:80px;"> |
| <div class="homewrapper"> |
| <div class="hometitle"> |
| <a href="/"> |
| <img src="/images/feather.png" height="80px"> |
| </a> |
| </div> |
| <div class="hometext"> |
| <h2>Analyze Big Data Platforms For Security and Performance</h2> |
| <div class="social-buttons"> |
| <a href="https://github.com/apache/eagle"><i class="fa fa-github"></i></a> |
| <a href="http://twitter.com/TheApacheEagle"><i class="fa fa-twitter"></i></a> |
| <a href="https://www.facebook.com/TheApacheEagle/"><i class="fa fa-facebook"></i></a> |
| <a href="#"><i class="fa fa-weixin"></i></a> |
| <!-- <a href="https://www.weibo.com/ApacheEagle/"><i class="fa fa-weibo"></i></a> --> |
| </div> |
| </div> |
| </div> |
| </div> |
| </div> |
| <!-- header end --> |
| <div class="container-fluid page-content"> |
| <div class="row"> |
| <div class="col-md-10 col-md-offset-1"> |
| <!-- sidebar --> |
| <div class="col-xs-6 col-sm-3" id="sidebar" role="navigation"> |
| <ul class="nav" id="adminnav"> |
| |
| <li class="heading">Getting Started</li> |
| |
| <li class="sidenavli "><a href="/docs/index.html" data-permalink="/docs/hdfs-auth-activity-monitoring.html" id="">Introduction</a></li> |
| |
| <li class="sidenavli "><a href="/docs/usecases.html" data-permalink="/docs/hdfs-auth-activity-monitoring.html" id="">Use Cases</a></li> |
| |
| <li class="sidenavli "><a href="/docs/terminology.html" data-permalink="/docs/hdfs-auth-activity-monitoring.html" id="">Terminology</a></li> |
| |
| <li class="sidenavli "><a href="/docs/ecosystem.html" data-permalink="/docs/hdfs-auth-activity-monitoring.html" id="">Ecosystem</a></li> |
| |
| <li class="sidenavli "><a href="/docs/community.html" data-permalink="/docs/hdfs-auth-activity-monitoring.html" id="">Community</a></li> |
| |
| <li class="sidenavli "><a href="/docs/FAQ.html" data-permalink="/docs/hdfs-auth-activity-monitoring.html" id="">FAQ</a></li> |
| |
| <li class="divider"></li> |
| |
| <li class="heading">Documentations</li> |
| |
| <li class="sidenavli "><a href="/docs/latest/" data-permalink="/docs/hdfs-auth-activity-monitoring.html" id="">Latest version (v0.5.0)</a></li> |
| |
| <li class="divider"></li> |
| |
| <li class="heading">Download</li> |
| |
| <li class="sidenavli "><a href="/docs/download-latest.html" data-permalink="/docs/hdfs-auth-activity-monitoring.html" id="">Latest version (v0.5.0)</a></li> |
| |
| <li class="sidenavli "><a href="/docs/download.html" data-permalink="/docs/hdfs-auth-activity-monitoring.html" id="">Archived</a></li> |
| |
| <li class="divider"></li> |
| |
| <li class="heading">Supplement</li> |
| |
| <li class="sidenavli "><a href="/docs/security.html" data-permalink="/docs/hdfs-auth-activity-monitoring.html" id="">Security</a></li> |
| |
| <li class="divider"></li> |
| |
| <li class="sidenavli"> |
| <a href="mailto:dev@eagle.apache.org" target="_blank">Need Help?</a> |
| </li> |
| </ul> |
| </div> |
| <div class="col-xs-6 col-sm-9 page-main-content" style="margin-left: -15px" id="loadcontent"> |
| <h1 class="page-header" style="margin-top: 0px">HDFS Authorization Activity Monitoring Quick Start</h1> |
| <p>HDFS can audit service-level authorization activity</p> |
| |
| <h4 id="sample-authorization-logs">Sample authorization logs</h4> |
| |
| <div class="highlighter-rouge"><pre class="highlight"><code>2016-06-08 02:55:07,742 INFO SecurityLogger.org.apache.hadoop.security.authorize.ServiceAuthorizationManager: Authorization successful for hdfs (auth:SIMPLE) for protocol=interface org.apache.hadoop.hdfs.protocol.ClientProtocol |
| 2016-06-08 02:55:35,304 INFO SecurityLogger.org.apache.hadoop.security.authorize.ServiceAuthorizationManager: Authorization successful for hdfs (auth:SIMPLE) for protocol=interface org.apache.hadoop.hdfs.server.protocol.NamenodeProtocol |
| 2016-06-08 02:55:36,862 INFO SecurityLogger.org.apache.hadoop.security.authorize.ServiceAuthorizationManager: Authorization successful for hive (auth:SIMPLE) for protocol=interface org.apache.hadoop.hdfs.protocol.ClientProtocol |
| </code></pre> |
| </div> |
| |
| <p>Steps for enabling service-level authorization activity</p> |
| |
| <h4 id="1-enable-hdfs-authorization-security-in-core-sitexml">1. Enable HDFS Authorization Security in core-site.xml</h4> |
| |
| <div class="highlighter-rouge"><pre class="highlight"><code> <property> |
| <name>hadoop.security.authorization</name> |
| <value>true</value> |
| </property> |
| </code></pre> |
| </div> |
| |
| <h4 id="2-enable-hdfs-security-log-in-log4jproperties">2. Enable HDFS security log in log4j.properties</h4> |
| <div class="highlighter-rouge"><pre class="highlight"><code># |
| #Security audit appender |
| # |
| hadoop.security.logger=INFO,DRFAS |
| hadoop.security.log.maxfilesize=256MB |
| hadoop.security.log.maxbackupindex=20 |
| log4j.category.SecurityLogger=${hadoop.security.logger} |
| hadoop.security.log.file=SecurityAuth.audit |
| log4j.appender.DRFAS=org.apache.log4j.DailyRollingFileAppender |
| log4j.appender.DRFAS.File=${hadoop.log.dir}/${hadoop.security.log.file} |
| log4j.appender.DRFAS.layout=org.apache.log4j.PatternLayout |
| log4j.appender.DRFAS.layout.ConversionPattern=%d{ISO8601} %p %c: %m%n |
| log4j.appender.DRFAS.DatePattern=.yyyy-MM-dd |
| </code></pre> |
| </div> |
| |
| </div><!--end of loadcontent--> |
| </div> |
| <!--end of centered content--> |
| </div> |
| </div> |
| <!--end of container--> |
| |
| <!-- footer start --> |
| <div class="footerwrapper"> |
| <div class="container"> |
| <div class="row"> |
| <div class="col-md-12"><div style="margin-left:auto; margin-right:auto; text-align:center;font-size: 12px"> |
| <div> |
| </div> |
| <div> |
| <a href="http://www.apache.org"> |
| <img id="asf-logo" alt="Apache Software Foundation" src="/images/apache-logo-small.gif"> |
| </a> |
| </div> |
| <div> |
| Copyright © 2015 <a href="http://www.apache.org">The Apache Software Foundation</a>, Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>. |
| </div> |
| <div> |
| Apache Eagle, Eagle, Apache Hadoop, Hadoop, Apache HBase, HBase, Apache Hive, Hive, Apache Ambari, Ambari, Apache Spark, Spark, Apache Kafka, Kafka, Apache Storm, Storm, Apache Maven, Maven, Apache Tomcat, Tomcat, Apache Derby, Derby, Apache Cassandra, Cassandra, Apache ZooKeeper, ZooKeeper, Apache, the Apache feather logo, and the Apache project logo are trademarks of The Apache Software Foundation. |
| </div> |
| </div></div> |
| </div> |
| </div> |
| </div> |
| <!-- footer end --> |
| |
| <!-- JavaScripts --> |
| <script src="/js/jquery-1.11.1.min.js"></script> |
| <script src="/js/jquery.singlePageNav.js"></script> |
| <script src="/js/jquery.flexslider.js"></script> |
| <script src="/js/modernizr.min.js"></script> |
| <script src="/js/svg.js"></script> |
| <script> |
| /************** FlexSlider *********************/ |
| $('.flexslider').flexslider({ |
| animation: "fade", |
| directionNav: false |
| }); |
| </script> |
| |
| <script> |
| /************** FlexSlider *********************/ |
| $('.flexslider').flexslider({ |
| animation: "fade", |
| directionNav: false |
| }); |
| </script> |
| </body> |
| </html> |
