Data lake security
The most common platform deployed as a data lake is Hadoop. Early management techniques for the Hadoop Distributed File System (HDFS) relied on POSIX style access control permissions for file owners, groups, and users. ACLs granted read, write, and execute rights, and these were managed by the operating system (Linux) super user.
Authentication and authorization of users and administrators was greatly improved with the introduction of Kerberos. The client authenticates to an Authentication Server and receives a timestamped Ticket-Granting Ticket (TGT). Authorization occurs when the client submits the TGT to a Ticket Granting Server (TGS) and receives a service ticket, enabling access to the server. The authentication server ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access