Security

Introduction

• Security overview

Cluster access security

• HTTPS and TLS
• Keystores and truststores
• Password file authentication
• LDAP authentication
• Salesforce authentication
• Okta authentication
• Kerberos authentication

User name management

• User mapping
• File-based group provider
• LDAP group provider

Access control

• Access control overview
• Built-in system access control
• File-based system access control
• User impersonation
• Password credential pass-through
• Kerberos credential pass-through
• Apache Ranger overview
• Global access control with Apache Ranger
• Hive and Delta Lake access control with Apache Ranger
• Global access control with the Privacera Platform
• Hive access control with the Privacera Platform
• Hive access control with Apache Sentry

Security inside the cluster

• Secure internal communication
• Secrets management

Auditing

• Query audit
• Event logger