关于企业级:企业级大数据安全架构十一Kerberos接入dophinscheduler
作者:楼高倡议将dophinscheduler集成到Ambari装置部署,在Ambari下面开启kerberos 1.装置筹备编译从GitHub获取dolphinscheduler-1.3.9源码 git clone https://github.com/apache/dolphinscheduler.git -b 1.3.9-releasehttps://github.com/apache/dolphinscheduler/archive/2.0.3.zip进入源码目录进行编译 mvn -U clean install -Prpmbuild -Dmaven.test.skip=true -X编译实现后在dolphinscheduler-dist/target/rpm/apache-dolphinscheduler/RPMS/noarch门路下能够找到打包好的rpm将编译好的包发送到其余节点 留神:nodejs版本不要太低,不然编译过程不容易通过,另外npm尽量不要应用淘宝镜像 2.环境筹备2.1创立部署用户抉择须要部署dolphinscheduler的机器创立零碎用户dolphinscheduler 创立部署用户,并且肯定要配置sudo免密。以创立dolphinscheduler用户为例 useradd dolphinscheduler;echo "dolphinscheduler" | passwd --stdin dolphinscheduler # 配置sudo免密echo 'dolphinscheduler ALL=(ALL) NOPASSWD: NOPASSWD: ALL' >> /etc/sudoerssed -i 's/Defaults requirett/#Defaults requirett/g' /etc/sudoers # 批改目录权限,使得部署用户对dolphinscheduler-backend目录有操作权限 chown -R dolphinscheduler:dolphinscheduler dolphinscheduler2.2在部署用户并配置 ssh 本机免密登录su dolphinscheduler;ssh-keygen -t rsa -P '' -f ~/.ssh/id_rsacat ~/.ssh/id_rsa.pub >> ~/.ssh/authorized_keyschmod 600 ~/.ssh/authorized_keys2.3 其余待部署的机器配置ssh免密su dolphinscheduler;for ip in db003.hdp.com db004.hdp.com; do ssh-copy-id $ip # 该操作执行过程中须要手动输出 dolphinscheduler 用户的明码done2.4数据库初始化(1)登陆数据库:mysql -uroot -phdp123456 ...