Multi-dimensional hadoop authority control method and system

Abstract

The invention discloses a multi-dimensional hadoop authority control method. The method can be used for realizing the configuration of user groups, restricting the users to only access to hadoop clusters on fixed IPs and solving the problem that the default authorities are low in configuration flexibility, cannot control the counterfeit, carried out by the users, of super accounts and cannot restrict the users to access to the hadoop clusters from appointed IPs, so that the security certification of hadoop authorities is realized from multiple dimensions such as user, group and IP. The method comprises the following steps of: (1) preparing a configuration file, wherein the configuration file comprises an authority configuration file, an IP whitelist file and an IP blacklist file; and (2) recognizing and enforcing a master process of hadoop. The invention furthermore provides a multi-dimensional hadoop authority control system.

Description

technical field [0001] The invention relates to the technical field of big data processing, in particular to a multi-dimensional hadoop authority control method and a multi-dimensional hadoop authority control system. Background technique [0002] The patent "A Big Data Platform Supporting Multi-Tenants and Tenant Access Method" (CN201510538231.2) provides a hadoop permission control method. Hadoop permissions are based on the POSIX model by default, and support read and write execution control permissions for users, user groups, and other users. The corresponding groups of users are obtained through the local linux system of the master node, and the acquisition command is groups$user. [0003] However, this method is not flexible enough and has the following disadvantages: configuration permissions need to modify the local user group information of the master node; it is impossible to control users from forging super accounts to access Hadoop clusters; it is impossible to r...

AI Technical Summary

Problems solved by technology

[0004] In order to overcome the defects of the prior art, the technical problem to be solved in the present invention is to provide a multi-dimensional hadoop authority control method, which can realize user group configuration and limit users to only access the hadoop cluster on a fixed IP. Solve the problems that the configuration of default permissions is not flexible enough, it is impossible to control users from forging super accounts, and it is impossible to restrict users from accessing hadoop clusters from specified IPs, and realize the security authentication of hadoop permissions from multiple dimensions such as users, groups, and IPs.

Images