Skip to Content
Trino 权威指南:原书第2版
book

Trino 权威指南:原书第2版

by Matt Fuller, Manfred Moser, Martin Traverso
July 2023
Intermediate to advanced
278 pages
5h 40m
Chinese
China Machine Press
Content preview from Trino 权威指南:原书第2版
220
|
10
hive.metastore.client.principal
指定的安全主体必须有足够的权限来
删除
hive/warehouse
目录内的文件和子目录。如果没有这个权限,则只有元
数据会被删除,而数据本身会继续占据磁盘空间,这是因为由
HMS
负责删
除内部表数据。当
Metastore
被配置为使用
Kerberos
认证时,由
Metastore
行的所有
HDFS
操作都会由
Trino
代办。删除数据的错误会被默默忽略。
10.8.2 HDFS
认证
HDFS
启用
Kerberos
认证类似于
Metastore
的认证,在连接器属性文件中需要设置的
属性如下所示。当验证类型为
KERBEROS
时,
Trino
会以
hive.hdfs.trino.principal
性指定的安全主体来访问
HDFS
Trino
使用由
hive.hdfs.trino.keytab
属性指定的
keytab
来验证这个安全主体。例如:
hive.hdfs.authentication.type=KERBEROS
hive.hdfs.trino.principal=hdfs@EXAMPLE.COM
hive.hdfs.trino.keytab=/etc/trino/hdfs.keytab
10.9
集群分离
另一个大规模的安全方案是,通过在相互独立的
Trino
集群上使用数据源和配置的
catalog
,实现它们的完全分离。这种分离对很多场景非常有用:
将只读操作从
ETL
和其他写操作的场景中分离出来。
由于数据监管要求,需要在完全不同的基础设施上托管集群 ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

Read now

Unlock full access

More than 5,000 organizations count on O’Reilly

AirBnbBlueOriginElectronic ArtsHomeDepotNasdaqRakutenTata Consultancy Services

QuotationMarkO’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.
Julian F.
Head of Cybersecurity
QuotationMarkI wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.
Addison B.
Field Engineer
QuotationMarkI’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.
Amir M.
Data Platform Tech Lead
QuotationMarkI'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.
Mark W.
Embedded Software Engineer

You might also like

What Successful Brick-and-Mortar Retailers Get Right

What Successful Brick-and-Mortar Retailers Get Right

Rob Angell
Three Essentials for Agentic AI Security

Three Essentials for Agentic AI Security

Paolo Dal Cin, Daniel Kendzior, Yusof Seedat, Renato Marinho
What Successful Project Managers Do

What Successful Project Managers Do

W. Scott Cameron, Jeffrey S. Russell, Edward J. Hoffman, Alexander Laufer

Publisher Resources

ISBN: 9787111731603