Configure Kerberos for HBase Thrift Gateway

<property>
    <name>hbase.thrift.keytab.file</name>
    <value>$KEYTAB</value>
</property>
<property>
    <name>hbase.thrift.kerberos.principal</name>
    <value>$USER/_HOST@HADOOP.LOCALDOMAIN</value>
    <!-- This may need to be HTTP/_HOST@<REALM> and _HOST may not work. You may have to put the concrete full hostname. -->
</property>
<property>
   <name>hbase.thrift.security.qop</name>
   <value>auth-conf</value>
</property>
<!-- Add these if you need to configure a different DNS interface from the default -->
<property>
    <name>hbase.thrift.dns.interface</name>
    <value>default</value>
</property>
<property>
    <name>hbase.thrift.dns.nameserver</name>
    <value>default</value>
</property>

Substitute the appropriate credential and keytab for $USER and $KEYTAB respectively.

<property>
  <name>hbase.regionserver.thrift.http</name>
  <value>true</value>
</property>

Add the following properties to enable HTTP connections through Kerberos:

<property>
    <name>hbase.thrift.spnego.principal</name>
    <value>HTTP/_HOST@HADOOP.LOCALDOMAIN</value>
</property>
<property>
    <name>hbase.thrift.spnego.keytab.file</name>
    <value>$KEYTAB</value>
</property>

<property>
    <name>hbase.table.namespace.mappings</name>
    <value>*:/</value>
</property>

Add this property ONLY if you are working with HPE Ezmeral Data Fabric Database tables. Working with HBase tables is not possible when this property is present. For more information, see Considerations for Upgrading to HBase 1.1.13. For more information about mapping tables, see Mapping to HBase Table Namespaces.