PowerScale OneFS HDFS Configuration Guide

Supported HDFS authentication methods

The authentication method determines the credentials that OneFS requires to establish a Hadoop compute client connection.

An HDFS authentication method is specified for each access zone. OneFS supports the following authentication methods for HDFS:

Table 1. Authentication MethodsThe following table describes each authentication method.
Authentication method	Description
Simple only	Requires only a username to establish client connections.
Kerberos only	Requires Kerberos credentials to establish client connections. NOTE:You must configure Kerberos as an authentication provider on the PowerScale cluster, and you must modify the core-site.xml file on clients running Hadoop 2.2 and later.
All (default value)	Accepts both simple authentication and Kerberos credentials. If Kerberos settings and file modifications are not completed, client connections default to simple authentication. CAUTION:To prevent unintended access through simple authentication, set the authentication method to Kerberos only to enforce client access through Kerberos.