Security Configuration

Kerberos / SPNEGO Authentication

When the cluster has Kerberos enabled, Celeborn automatically configures NEGOTIATE for HTTP endpoints. Ambari auto-configures the following properties:

Bash
    
xxxxxxxxxx
 
celeborn.master.http.auth.supportedSchemes=NEGOTIATE celeborn.master.http.spnego.keytab=/etc/security/keytabs/spnego.service.keytab celeborn.master.http.spnego.principal=HTTP/_HOST@REALM
Copy

TLS / SSL Encryption

Bash
    
xxxxxxxxxx
 
# Enable SSL for RPC traffic celeborn.ssl.rpc_service.enabled=trueceleborn.ssl.rpc_service.keyStore=/path/to/keystore.jksceleborn.ssl.rpc_service.keyStorePassword=<password>celeborn.ssl.rpc_service.trustStore=/path/to/truststore.jksceleborn.ssl.rpc_service.trustStorePassword=<password>   # Enable SSL for data transfer channels celeborn.ssl.push.enabled=trueceleborn.ssl.fetch.enabled=trueceleborn.ssl.replicate.enabled=true
Copy

Internal Port Authentication

Bash
    
xxxxxxxxxx
 
celeborn.auth.enabled=true celeborn.internal.port.enabled=true celeborn.master.internal.endpoints=master1:19097,master2:19097,master3:19097
Copy

###

Last updated on Apr 23, 2026

Was this page helpful?