Sentry Webserver now supports Kerberos Authentication and Authorization. Here are the configuration for enable Kerberos Authentication and Authorization for web server.
Sentry Service (sentry-site.xml)
Authentication
Config Property | Value | Default | Required |
---|
sentry.service.web.authentication.type | KERBEROS | NONE | Yes |
sentry.service.web.authentication.kerberos.principal | The principal name | - | Yes |
sentry.service.web.authentication.kerberos.keytab | Path to the keytab file | - | Yes |
Authorization
Config Property | Value | Default | Required |
---|
sentry.service.web.authentication.allow.connect.users | Comma-separated list of users allowed to connect | sentry | Yes |