HDP 3 production deploy -security research. Extend team

Hortonworks data platform 3

General platform review https://learn.hortonworks.com/hdp-overview-apache-hadoop-essentials-self-paced-training

Challenge:

Security

• Kerberos - Do it. Without Kerberos it doesn't matter what else you layer on top, your cluster is insecure, think about a large safe with a big secure door on the front, but no side walls... that kind of security is what you have without Kerberos.
• Ranger - Do it, policies can be group based, groups can be inherited from AD or LDAP
• Knox - strongly recommended, also prevents you have to update users each time your internal cluster services move around, they just keep talking to Knox and Knox does the internal mappings

Workshop: https://github.com/HortonworksUniversity/Security_Labs