Optional Step 9: Configure secure WebHDFS

Security for WebHDFS is disabled by default. If you want use WebHDFS with a secure cluster, this is the time to enable and configure it.

To configure secure WebHDFS:

1. If you have not already done so, enable WebHDFS by adding the following property to the hdfs-site.xml file on every machine in the cluster.

   <property>
     <name>dfs.webhdfs.enabled</name>
     <value>true</value>
   </property>

2. Add the following properties to the hdfs-site.xml file on every machine in the cluster. Replace the example values shown below with the correct settings for your site.

   <property>
     <name>dfs.web.authentication.kerberos.principal</name>
     <value>HTTP/_HOST@YOUR-REALM.COM</value>
   </property>
   
   <property>
     <name>dfs.web.authentication.kerberos.keytab</name>
     <value>/etc/hadoop/conf/HTTP.keytab</value> <!-- path to the HTTP keytab -->
   </property>