July 2023
Intermediate to advanced
278 pages
5h 40m
Chinese
Content preview from Trino 权威指南：原书第2版
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.
196
|
第
10
章
下面各节会更详细地探讨这些需求，先从
Trino
的用户认证开始。
10.1
认证
认证是向系统证明身份的过程，它对于任何安全系统都至关重要。计算机系统支持多种认证
方法，包括
Kerberos
、轻量级目录访问协议（
Lightweight Directory Access Protocol
，
LDAP
）的密码认证、证书认证等。是否支持特定的认证方法取决于每个系统。在
Trino
中，客户端通常通过以下方法之一来向
Trino
集群进行认证：
•
密码，参见下述内容。
•
证书，参见
10.5
节。
• Kerberos
，参见
10.6
节。
默认情况下，
Trino
中并未配置认证。任何可以访问协调器的人都可以连接、提交查询
并执行其他操作。在本章中，你将学习有关
LDAP
和密码认证机制的详细信息，因为它
们是最常用的。
然而，认证只是其中的一个环节。一旦安全主体通过了认证，它们就会分配到
一定的权限，这些权限决定了用户能够做什么。你能做的事情称为授权，由
SystemAccessControl
和
ConnectorAccessControl
管辖。
10.2
节将详细介绍相关信息。
现在假设一旦认证，用户就可以执行任何操作。默认情况下，这对于访问系统级别的任
何内容都是正确的，如查询系统
catalog
。
任何身份验证系统使用的一般要求是，从客户端到协调器的数据传输都是可信的。实际
上，这意味着必须配置
TLS
，因此需要通过
HTTPS
访问协调器（请参见
10.3
节，特别
是
10.3.1
节）。
此外，协调器和工作节点必须相互认证。这是通过在 ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access
More than 5,000 organizations count on O’Reilly
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.Julian F.
I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.Addison B.
I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.Amir M.
I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.