Build secure Oozie workflows in Azure HDInsight with Enterprise Security Package

%3CLINGO-SUB%20id%3D%22lingo-sub-218165%22%20slang%3D%22en-US%22%3EBuild%20secure%20Oozie%20workflows%20in%20Azure%20HDInsight%20with%20Enterprise%20Security%20Package%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-218165%22%20slang%3D%22en-US%22%3E%3CP%20align%3D%22left%22%3ECustomers%20love%20to%20use%20Hadoop%20and%20often%20rely%20on%20Oozie%2C%20a%20workflow%20and%20coordination%20scheduler%20for%20Hadoop%20to%20accelerate%20and%20ease%20their%20big%20data%20implementation.%20Oozie%20is%20integrated%20with%20the%20Hadoop%20stack%2C%20and%20it%20supports%20several%20types%20of%20Hadoop%20jobs.%20However%2C%20for%20users%20of%20Azure%20HDInsight%20with%20domain%20joined%20clusters%2C%20Oozie%20was%20not%20a%20supported%20option.%20To%20get%20around%20this%20limitation%20customers%20had%20to%20run%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Fhdinsight%2Fhdinsight-use-oozie-linux-mac%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3EOozie%20on%20a%20regular%20cluster%3C%2FA%3E.%20This%20was%20costly%20with%20extra%20administrative%20overhead.%20Today%20we%20are%20happy%20to%20announce%20that%20customers%20can%20now%20use%20Oozie%20in%20domain-joined%20Hadoop%20clusters%20too.%3C%2FP%3E%0A%3CP%20align%3D%22left%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20align%3D%22left%22%3EIn%20domain-joined%20clusters%2C%20authentication%20happens%20through%20Kerberos%20and%20fine-grained%20authorization%20is%20through%20Ranger%20policies.%20Oozie%20supports%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CA%20href%3D%22https%3A%2F%2Foozie.apache.org%2Fdocs%2F4.2.0%2FAG_Install.html%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%22%3Eimpersonation%20of%20users%20and%20a%20basic%20authorization%20model%3C%2FA%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3Efor%20workflow%20jobs.%3C%2FP%3E%0A%3CP%20align%3D%22left%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20align%3D%22left%22%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F38111i835C1207689A46BF%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%22Slide1.PNG%22%20title%3D%22Slide1.PNG%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20align%3D%22left%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20align%3D%22left%22%3ERead%20more%20about%20it%20in%20the%20%3CA%20href%3D%22https%3A%2F%2Fazure.microsoft.com%2Fen-us%2Fblog%2Fbuild-secure-oozie-workflows-in-azure-hdinsight-with-enterprise-security-package%2F%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3EAzure%20blog%3C%2FA%3E.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-218165%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3Ebig%20data%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EData%20%26amp%3B%20Storage%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E
Community Manager

Customers love to use Hadoop and often rely on Oozie, a workflow and coordination scheduler for Hadoop to accelerate and ease their big data implementation. Oozie is integrated with the Hadoop stack, and it supports several types of Hadoop jobs. However, for users of Azure HDInsight with domain joined clusters, Oozie was not a supported option. To get around this limitation customers had to run Oozie on a regular cluster. This was costly with extra administrative overhead. Today we are happy to announce that customers can now use Oozie in domain-joined Hadoop clusters too.

 

In domain-joined clusters, authentication happens through Kerberos and fine-grained authorization is through Ranger policies. Oozie supports impersonation of users and a basic authorization model for workflow jobs.

 

Slide1.PNG

 

Read more about it in the Azure blog.

0 Replies