Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

  1. Open the 'Admin' tab → 'Plug-Ins' and select the plug-in in ''Obfuscation Plug-in''. The 'configure' icon appears in column 'Actions'.

     

  2. Click the the ''Configure'' icon icon. The plug-in settings open. 
  3. Choose the obfuscation algorithm algorithm "/wiki/spaces/DASSB110/pages/20221231386" from  from the drop-down. 
  4. Enter the AES encryption key. 
    INFO: The key consists of 16 characters and must fulfill: select mode  select mode /wiki/spaces/DASSB110/pages/20221231386, key size 128 bits, output text format Base64. 
  5. Enter the AES Initialization Vector and confirm with with "Save". Column obfuscation is finished.
    INFO: Use the same encryption key and initialization vector fulfilling the same preferences. 
     

SAML SSO

The The /wiki/spaces/DASSB100/pages/32569527062 plug plug-in delivered with Datameer provides the basic infrastructure which allows Datameer to participate in a SAML SSO environment as a service provider. 

...

Multi-User Group Sharing

Info
titleINFO

By default, when secure impersonation is enabled, you could share an artifact with a single user group only. This results out of the limitation of a standard POSIX file permission level 'user:group:others'.

With the plugin 'Multiple Group Sharing by ACLs', Datameer creates a HDFS ACL for a certain file/ folder in the HDFS to reflect additional group permissions. Note that it is not supported to migrate from the ACL mode to the POSIX mode (see https://hadoop.apache.org/docs/current/hadoop-project-dist/hadoop-hdfs/HdfsPermissionsGuide.html). The default sharing mode can be overwritten with the REST call.

When the secure mode 'Native Multi User' (NMU) is enabled and the plugin 'Multiple Group Sharing by ACLs' is installed, then the multi group sharing is the default mechanism.

Enabling Multi-User Group Sharing

To enable this functionality:

  1. Ensure that the HDFS ALC functionality is enabled at the Hadoop cluster. 
    INFO: See Enabling ACLs.
  2. /wiki/spaces/DASSB100/pages/32569526778 the 'Multiple Group Sharing by ACLs' plug-in in Datameer's 'Admin' section. 
  3. Activate the plug-in via REST API. 
    INFO: This step is not required when NMU mode is activated. 

    Request MethodPUT
    URI Syntax
    Code Block
    curl -v -u '<user>:<password>' -X PUT 'http://host:port/api/groupPermissionMode?mode=MULTIPLE_USERS_GROUPS'
    ResponseThe call should return '204 No Content' HTTP code.

Overview Multi-Group User Plug-In Configuration

Info
titleINFO

The preference page of the plug-in provides information about the cluster configuration.

Image Added