HPE Ezmeral Data Fabric 6.2 is In Maintenance and transitions to "End of Maintenance" in June 2024. Please see the latest documentation.

About Release 6.2
This site contains documentation for HPE Ezmeral Data Fabric release 6.2 including installation, configuration, administration, and reference content, as well as content for the associated bundled ecosystem components and drivers.
6.2 Installation
This section contains information about installing and upgrading HPE Ezmeral Data Fabric software. It also contains information about how to migrate data and applications from an Apache Hadoop cluster to a HPE Ezmeral Data Fabric cluster.
6.2 Data Fabric
HPE Ezmeral Data Fabric is the industry-leading data platform for AI and analytics that solves enterprise business needs.
6.2 Administration
This section describes how to manage the nodes and services that make up a cluster.
6.2 Development
This section contains information related to application development for Ezmeral ecosystem components and HPE Ezmeral Data Fabric products, including the file system, Database (Key-Value and JSON), and Event Streams.
- Application Development Process
  Before you start developing applications on the HPE Ezmeral Data Fabric platform, consider how you will get the data into the platform, the storage format of the data, the type of processing or modeling that is required, and how the data will be accessed.
- File Store and Apps
  The following sections provide information about accessing the File Store with C and Java applications.
- HPE Ezmeral Data Fabric Database and Apps
  This section contains information about developing client applications for JSON and key-value tables.
- HPE Ezmeral Data Fabric Streams and Apps
  HPE Ezmeral Data Fabric Streams brings integrated publish and subscribe messaging to HPE Ezmeral Data Fabric.
- MapReduce and Apps
  This section contains information associated with developing YARN applications.
- Kubernetes Interfaces for Data Fabric
  This section describes how to leverage the capabilities of the Kubernetes Interfaces for Data Fabric.
- Ecosystem Components
  The following sections provide information about each open-source project that is supported by the HPE Ezmeral Data Fabric.
  - Ezmeral Ecosystem Packs
  - Apache Airflow
    This topic provides an overview of Apache Airflow on HPE Ezmeral Data Fabric.
  - AsyncHBase
  - Cascading
  - Apache Drill
  - Flume
  - Hadoop
  - HBase
  - HBase Client and HPE Ezmeral Data Fabric Database Binary Tables
  - HCatalog
  - Hive
  - HttpFS
    - Authentication on Secure Clusters for HttpFS
    - Configuring HttpFS
      - Kerberos Authentication for HttpFS
      - PAM Authentication for HttpFS
      - SSL Security for HttpFS
        Enabling SSL Security for HttpFS
        Enable SSL security for HttpFS using a ssl_keystore and ssl_truststore. These are generated automatically for a secure cluster in /opt/mapr/conf/. When using SSL on insecure clusters, you must manually generate a keystore and truststore.
        Configuring Certificate-Based Authentication for HttpFS
        Starting from EEP 7.1.0, configuration of certificate-based authentication for HttpFS is no longer available. To configure certificate-based authentication for HttpFS, for EEP 7.0.x, you need to make changes to the server.xml and web.xml file and restart the HttpFS server. To use this method, each client requires a client certificate issued by trusted CA.
        Verifying SSL Security for HttpFS
        You need to run curl commands to verify that HTTPS is enabled for HttpFS.
        Enabling SSL Security for HttpFS with Credential Provider
        Starting from EEP-7.1.0, you can enable SSL security for HttpFS with credential provider. The CredentialProvider API is used to separate the use of sensitive tokens, secrets, and passwords from the applications. hadoop credential create command is used to provision a password to a particular credential store provider.
      - User Impersonation for HttpFS
      - Finishing HTTPFS Configuration Changes
    - Troubleshooting HttpFS
  - Hue
  - Impala
  - Livy
    Apache Livy is primarily used to provide integration between Hue and Spark.
  - HPE Ezmeral Data Fabric Streams Clients and Tools
    Describes the supported HPE Ezmeral Data Fabric Streams tools and clients.
  - S3 Gateway
    The S3 gateway is a service that provides an S3-compatible interface to expose data in HPE Ezmeral Data Fabric as objects. The S3 gateway manages all inbound S3 API requests to put data into and get data out of cloud storage.
  - Oozie
  - Pig
  - Sentry
  - Apache Spark
  - Sqoop
  - YARN
- Maven and the HPE Ezmeral Data Fabric
  This section discusses topics associated with Maven and the HPE Ezmeral Data Fabric.
- Developer's Reference
  This section contains in-depth information for the developer.
- API Documentation
  HPE Ezmeral Data Fabric supports public APIs for file system, HPE Ezmeral Data Fabric Database, and HPE Ezmeral Data Fabric Streams. These APIs are available for application-development purposes.
Other Docs
This section contains release-independent information, including: Installer documentation, Ecosystem release notes, interoperability matrices, security vulnerabilities, and links to other data-fabric version documentation.
Glossary
Definitions for commonly used terms in MapR Converged Data Platform environments.

Enabling SSL Security for HttpFS

Enable SSL security for HttpFS using a ssl_keystore and ssl_truststore. These are generated automatically for a secure cluster in /opt/mapr/conf/. When using SSL on insecure clusters, you must manually generate a keystore and truststore.

About this task

Complete the steps that correlate with your version of HttpFS.

For EEP 7.1.x and higher, complete the following steps:
1. Change the value inside property httpfs.ssl.enabled in file /opt/mapr/httpfs/httpfs-1.1.0/etc/hadoop/httpfs-site.xml to true.
2. Restart the HttpFS server using the following command:
```
maprcli node services -action restart -name httpfs -nodes <node>
```
For EEP 7.0.x, complete the following steps:
1. To preserve the original version, rename the existing server.xml file (/opt/mapr/httpfs/httpfs-1.0/share/hadoop/httpfs/tomcat/conf/server.xml) to server.xml.orig.
```
sudo cp /opt/mapr/httpfs/httpfs-1.0/share/hadoop/httpfs/tomcat/conf/server.xml 
/opt/mapr/httpfs/httpfs-1.0/share/hadoop/httpfs/tomcat/conf/server.xml.orig
```
2. Replace the contents of server.xml with the contents of server.xml.https.
```
sudo cp /opt/mapr/httpfs/httpfs-1.0/share/hadoop/httpfs/tomcat/conf/server.xml.https 
/opt/mapr/httpfs/httpfs-1.0/share/hadoop/httpfs/tomcat/conf/server.xml
```
3. To enable SSL without certificate-based authentication, set the clientAuth attribute to "false" and set properties related to keystore and truststore (on a secure cluster, the defaults are already set) in server.xml located in /opt/mapr/httpfs/httpfs-1.0/share/hadoop/httpfs/tomcat/conf/. For example:
```
<Connector port="${httpfs.http.port}" SSLEnabled="true"
maxThreads="150" scheme="https" secure="true"
clientAuth="false" sslProtocol="TLS"
keystoreFile="/opt/mapr/conf/ssl_keystore"
keystorePass="<ssl-keystore-password>"
truststoreFile="/opt/mapr/conf/ssl_truststore"
truststorePass="<ssl-keystore-password>"/>
```