Diff
checker
文本
文本
图像
文档
Excel
文件夹
Legal
Enterprise
桌面版
定价
登录
下载 Diffchecker 桌面版
比较文本
查找两个文本文件之间的差异
工具
历史
实时编辑器
折叠未更改行
关闭换行
视图
拆分
统一
比对精度
智能
单词
字符
语法高亮
选择语法
忽略
文本转换
转到第一个差异
编辑输入
Diffchecker Desktop
运行Diffchecker最安全的方式。获取Diffchecker桌面应用:您的差异永远不会离开您的电脑!
获取桌面版
Untitled diff
创建于
11年前
差异永不过期
清除
导出
分享
解释
69 删除
行
总计
删除
字符
总计
删除
要继续使用此功能,请升级到
Diff
checker
Pro
查看价格
700 行
全部复制
43 添加
行
总计
添加
字符
总计
添加
要继续使用此功能,请升级到
Diff
checker
Pro
查看价格
693 行
全部复制
复制
已复制
复制
已复制
# Licensed to the Apache Software Foundation (ASF) under one or more
# contributor license agreements. See the NOTICE file distributed with
# this work for additional information regarding copyright ownership.
# The ASF licenses this file to You under the Apache License, Version 2.0
# (the "License"); you may not use this file except in compliance with
# the License. You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
# Hue configuration file
# Hue configuration file
# ===================================
# ===================================
#
#
# For complete documentation about the contents of this file, run
# For complete documentation about the contents of this file, run
# $ <hue_root>/build/env/bin/hue config_help
# $ <hue_root>/build/env/bin/hue config_help
#
#
# All .ini files under the current directory are treated equally. Their
# All .ini files under the current directory are treated equally. Their
# contents are merged to form the Hue configuration, which can
# contents are merged to form the Hue configuration, which can
# can be viewed on the Hue at
# can be viewed on the Hue at
# http://<hue_host>:<port>/dump_config
# http://<hue_host>:<port>/dump_config
###########################################################################
###########################################################################
# General configuration for core Desktop features (authentication, etc)
# General configuration for core Desktop features (authentication, etc)
###########################################################################
###########################################################################
[desktop]
[desktop]
复制
已复制
复制
已复制
send_dbug_messages=1
# To show database transactions, set database_logging to 1
database_logging=0
# Set this to a random string, the longer the better.
# Set this to a random string, the longer the better.
# This is used for secure hashing in the session store.
# This is used for secure hashing in the session store.
复制
已复制
复制
已复制
secret_key=
secret_key=
deaddeafdeaddeafdeaddeafdeaddeafdeaddeafdeaddeafdeaddeaf
# Webserver listens on this address and port
# Webserver listens on this address and port
复制
已复制
复制
已复制
http_host=
0.0.0.0
http_host=
<%= @hue_host %>
http_port=
8888
http_port=
<%= @hue_port %>
# Time zone name
# Time zone name
time_zone=America/Los_Angeles
time_zone=America/Los_Angeles
# Enable or disable Django debug mode.
# Enable or disable Django debug mode.
django_debug_mode=false
django_debug_mode=false
# Enable or disable backtrace for server error
# Enable or disable backtrace for server error
http_500_debug_mode=false
http_500_debug_mode=false
# Enable or disable memory profiling.
# Enable or disable memory profiling.
## memory_profiler=false
## memory_profiler=false
# Server email for internal error messages
# Server email for internal error messages
## django_server_email='hue@localhost.localdomain'
## django_server_email='hue@localhost.localdomain'
# Email backend
# Email backend
## django_email_backend=django.core.mail.backends.smtp.EmailBackend
## django_email_backend=django.core.mail.backends.smtp.EmailBackend
# Webserver runs as this user
# Webserver runs as this user
复制
已复制
复制
已复制
##
server_user=hue
server_user=hue
##
server_group=hue
server_group=hue
# This should be the Hue admin and proxy user
# This should be the Hue admin and proxy user
## default_user=hue
## default_user=hue
# This should be the hadoop cluster admin
# This should be the hadoop cluster admin
## default_hdfs_superuser=hdfs
## default_hdfs_superuser=hdfs
# If set to false, runcpserver will not actually start the web server.
# If set to false, runcpserver will not actually start the web server.
# Used if Apache is being used as a WSGI container.
# Used if Apache is being used as a WSGI container.
## enable_server=yes
## enable_server=yes
# Number of threads used by the CherryPy web server
# Number of threads used by the CherryPy web server
## cherrypy_server_threads=10
## cherrypy_server_threads=10
# Filename of SSL Certificate
# Filename of SSL Certificate
## ssl_certificate=
## ssl_certificate=
# Filename of SSL RSA Private Key
# Filename of SSL RSA Private Key
## ssl_private_key=
## ssl_private_key=
# List of allowed and disallowed ciphers in cipher list format.
# List of allowed and disallowed ciphers in cipher list format.
# See http://www.openssl.org/docs/apps/ciphers.html for more information on cipher list format.
# See http://www.openssl.org/docs/apps/ciphers.html for more information on cipher list format.
## ssl_cipher_list=DEFAULT:!aNULL:!eNULL:!LOW:!EXPORT:!SSLv2
## ssl_cipher_list=DEFAULT:!aNULL:!eNULL:!LOW:!EXPORT:!SSLv2
# LDAP username and password of the hue user used for LDAP authentications.
# LDAP username and password of the hue user used for LDAP authentications.
# Set it to use LDAP Authentication with HiveServer2 and Impala.
# Set it to use LDAP Authentication with HiveServer2 and Impala.
## ldap_username=hue
## ldap_username=hue
## ldap_password=
## ldap_password=
# Default encoding for site data
# Default encoding for site data
## default_site_encoding=utf-8
## default_site_encoding=utf-8
# Help improve Hue with anonymous usage analytics.
# Help improve Hue with anonymous usage analytics.
# Use Google Analytics to see how many times an application or specific section of an application is used, nothing more.
# Use Google Analytics to see how many times an application or specific section of an application is used, nothing more.
## collect_usage=true
## collect_usage=true
复制
已复制
复制
已复制
# Support for HTTPS termination at the load-balancer level with SECURE_PROXY_SSL_HEADER.
# Support for HTTPS termination at the load-balancer level with SECURE_PROXY_SSL_HEADER.
## secure_proxy_ssl_header=false
## secure_proxy_ssl_header=false
# Comma-separated list of Django middleware classes to use.
# Comma-separated list of Django middleware classes to use.
# See https://docs.djangoproject.com/en/1.4/ref/middleware/ for more details on middlewares in Django.
# See https://docs.djangoproject.com/en/1.4/ref/middleware/ for more details on middlewares in Django.
## middleware=desktop.auth.backend.LdapSynchronizationBackend
## middleware=desktop.auth.backend.LdapSynchronizationBackend
# Comma-separated list of regular expressions, which match the redirect URL.
# Comma-separated list of regular expressions, which match the redirect URL.
# For example, to restrict to your local domain and FQDN, the following value can be used:
# For example, to restrict to your local domain and FQDN, the following value can be used:
# ^\/.*$,^http:\/\/www.mydomain.com\/.*$
# ^\/.*$,^http:\/\/www.mydomain.com\/.*$
## redirect_whitelist=
## redirect_whitelist=
# Comma separated list of apps to not load at server startup.
# Comma separated list of apps to not load at server startup.
# e.g.: pig,zookeeper
# e.g.: pig,zookeeper
## app_blacklist=
## app_blacklist=
# The directory where to store the auditing logs. Auditing is disable if the value is empty.
# The directory where to store the auditing logs. Auditing is disable if the value is empty.
# e.g. /var/log/hue/audit.log
# e.g. /var/log/hue/audit.log
## audit_event_log_dir=
## audit_event_log_dir=
# Size in KB/MB/GB for audit log to rollover.
# Size in KB/MB/GB for audit log to rollover.
## audit_log_max_file_size=100MB
## audit_log_max_file_size=100MB
# Administrators
# Administrators
# ----------------
# ----------------
[[django_admins]]
[[django_admins]]
## [[[admin1]]]
## [[[admin1]]]
## name=john
## name=john
## email=john@doe.com
## email=john@doe.com
# UI customizations
# UI customizations
# -------------------
# -------------------
[[custom]]
[[custom]]
# Top banner HTML code
# Top banner HTML code
# e.g. <H2>Test Lab A2 Hue Services</H2>
# e.g. <H2>Test Lab A2 Hue Services</H2>
## banner_top_html=
## banner_top_html=
# Configuration options for user authentication into the web application
# Configuration options for user authentication into the web application
# ------------------------------------------------------------------------
# ------------------------------------------------------------------------
[[auth]]
[[auth]]
# Authentication backend. Common settings are:
# Authentication backend. Common settings are:
# - django.contrib.auth.backends.ModelBackend (entirely Django backend)
# - django.contrib.auth.backends.ModelBackend (entirely Django backend)
# - desktop.auth.backend.AllowAllBackend (allows everyone)
# - desktop.auth.backend.AllowAllBackend (allows everyone)
# - desktop.auth.backend.AllowFirstUserDjangoBackend
# - desktop.auth.backend.AllowFirstUserDjangoBackend
# (Default. Relies on Django and user manager, after the first login)
# (Default. Relies on Django and user manager, after the first login)
# - desktop.auth.backend.LdapBackend
# - desktop.auth.backend.LdapBackend
# - desktop.auth.backend.PamBackend
# - desktop.auth.backend.PamBackend
# - desktop.auth.backend.SpnegoDjangoBackend
# - desktop.auth.backend.SpnegoDjangoBackend
# - desktop.auth.backend.RemoteUserDjangoBackend
# - desktop.auth.backend.RemoteUserDjangoBackend
# - libsaml.backend.SAML2Backend
# - libsaml.backend.SAML2Backend
# - libopenid.backend.OpenIDBackend
# - libopenid.backend.OpenIDBackend
# - liboauth.backend.OAuthBackend
# - liboauth.backend.OAuthBackend
# (Support Twitter, Facebook, Google+ and Linkedin
# (Support Twitter, Facebook, Google+ and Linkedin
## backend=desktop.auth.backend.AllowFirstUserDjangoBackend
## backend=desktop.auth.backend.AllowFirstUserDjangoBackend
# The service to use when querying PAM.
# The service to use when querying PAM.
## pam_service=login
## pam_service=login
# When using the desktop.auth.backend.RemoteUserDjangoBackend, this sets
# When using the desktop.auth.backend.RemoteUserDjangoBackend, this sets
# the normalized name of the header that contains the remote user.
# the normalized name of the header that contains the remote user.
# The HTTP header in the request is converted to a key by converting
# The HTTP header in the request is converted to a key by converting
# all characters to uppercase, replacing any hyphens with underscores
# all characters to uppercase, replacing any hyphens with underscores
# and adding an HTTP_ prefix to the name. So, for example, if the header
# and adding an HTTP_ prefix to the name. So, for example, if the header
# is called Remote-User that would be configured as HTTP_REMOTE_USER
# is called Remote-User that would be configured as HTTP_REMOTE_USER
#
#
# Defaults to HTTP_REMOTE_USER
# Defaults to HTTP_REMOTE_USER
## remote_user_header=HTTP_REMOTE_USER
## remote_user_header=HTTP_REMOTE_USER
# Synchronize a users groups when they login
# Synchronize a users groups when they login
## sync_groups_on_login=false
## sync_groups_on_login=false
# Ignore the case of usernames when searching for existing users.
# Ignore the case of usernames when searching for existing users.
# Only supported in remoteUserDjangoBackend.
# Only supported in remoteUserDjangoBackend.
## ignore_username_case=false
## ignore_username_case=false
# Ignore the case of usernames when searching for existing users to authenticate with.
# Ignore the case of usernames when searching for existing users to authenticate with.
# Only supported in remoteUserDjangoBackend.
# Only supported in remoteUserDjangoBackend.
## force_username_lowercase=false
## force_username_lowercase=false
# Users will expire after they have not logged in for 'n' amount of seconds.
# Users will expire after they have not logged in for 'n' amount of seconds.
# A negative number means that users will never expire.
# A negative number means that users will never expire.
## expires_after=-1
## expires_after=-1
# Apply 'expires_after' to superusers.
# Apply 'expires_after' to superusers.
## expire_superusers=true
## expire_superusers=true
# Configuration options for connecting to LDAP and Active Directory
# Configuration options for connecting to LDAP and Active Directory
# -------------------------------------------------------------------
# -------------------------------------------------------------------
[[ldap]]
[[ldap]]
# The search base for finding users and groups
# The search base for finding users and groups
## base_dn="DC=mycompany,DC=com"
## base_dn="DC=mycompany,DC=com"
# URL of the LDAP server
# URL of the LDAP server
## ldap_url=ldap://auth.mycompany.com
## ldap_url=ldap://auth.mycompany.com
# A PEM-format file containing certificates for the CA's that
# A PEM-format file containing certificates for the CA's that
# Hue will trust for authentication over TLS.
# Hue will trust for authentication over TLS.
# The certificate for the CA that signed the
# The certificate for the CA that signed the
# LDAP server certificate must be included among these certificates.
# LDAP server certificate must be included among these certificates.
# See more here http://www.openldap.org/doc/admin24/tls.html.
# See more here http://www.openldap.org/doc/admin24/tls.html.
## ldap_cert=
## ldap_cert=
## use_start_tls=true
## use_start_tls=true
# Distinguished name of the user to bind as -- not necessary if the LDAP server
# Distinguished name of the user to bind as -- not necessary if the LDAP server
# supports anonymous searches
# supports anonymous searches
## bind_dn="CN=ServiceAccount,DC=mycompany,DC=com"
## bind_dn="CN=ServiceAccount,DC=mycompany,DC=com"
# Password of the bind user -- not necessary if the LDAP server supports
# Password of the bind user -- not necessary if the LDAP server supports
# anonymous searches
# anonymous searches
## bind_password=
## bind_password=
# Pattern for searching for usernames -- Use <username> for the parameter
# Pattern for searching for usernames -- Use <username> for the parameter
# For use when using LdapBackend for Hue authentication
# For use when using LdapBackend for Hue authentication
## ldap_username_pattern="uid=<username>,ou=People,dc=mycompany,dc=com"
## ldap_username_pattern="uid=<username>,ou=People,dc=mycompany,dc=com"
# Create users in Hue when they try to login with their LDAP credentials
# Create users in Hue when they try to login with their LDAP credentials
# For use when using LdapBackend for Hue authentication
# For use when using LdapBackend for Hue authentication
## create_users_on_login = true
## create_users_on_login = true
# Ignore the case of usernames when searching for existing users in Hue.
# Ignore the case of usernames when searching for existing users in Hue.
## ignore_username_case=false
## ignore_username_case=false
# Force usernames to lowercase when creating new users from LDAP.
# Force usernames to lowercase when creating new users from LDAP.
## force_username_lowercase=false
## force_username_lowercase=false
# Use search bind authentication.
# Use search bind authentication.
## search_bind_authentication=true
## search_bind_authentication=true
# Choose which kind of subgrouping to use: nested or suboordinate (deprecated).
# Choose which kind of subgrouping to use: nested or suboordinate (deprecated).
## subgroups=suboordinate
## subgroups=suboordinate
# Define the number of levels to search for nested members.
# Define the number of levels to search for nested members.
## nested_members_search_depth=10
## nested_members_search_depth=10
[[[users]]]
[[[users]]]
# Base filter for searching for users
# Base filter for searching for users
## user_filter="objectclass=*"
## user_filter="objectclass=*"
# The username attribute in the LDAP schema
# The username attribute in the LDAP schema
## user_name_attr=sAMAccountName
## user_name_attr=sAMAccountName
[[[groups]]]
[[[groups]]]
# Base filter for searching for groups
# Base filter for searching for groups
## group_filter="objectclass=*"
## group_filter="objectclass=*"
# The group name attribute in the LDAP schema
# The group name attribute in the LDAP schema
## group_name_attr=cn
## group_name_attr=cn
# The attribute of the group object which identifies the members of the group
# The attribute of the group object which identifies the members of the group
## group_member_attr=members
## group_member_attr=members
复制
已复制
复制
已复制
[[[ldap_servers]]]
[[[ldap_servers]]]
## [[[[mycompany]]]]
## [[[[mycompany]]]]
# The search base for finding users and groups
# The search base for finding users and groups
## base_dn="DC=mycompany,DC=com"
## base_dn="DC=mycompany,DC=com"
# URL of the LDAP server
# URL of the LDAP server
## ldap_url=ldap://auth.mycompany.com
## ldap_url=ldap://auth.mycompany.com
# A PEM-format file containing certificates for the CA's that
# A PEM-format file containing certificates for the CA's that
# Hue will trust for authentication over TLS.
# Hue will trust for authentication over TLS.
# The certificate for the CA that signed the
# The certificate for the CA that signed the
# LDAP server certificate must be included among these certificates.
# LDAP server certificate must be included among these certificates.
# See more here http://www.openldap.org/doc/admin24/tls.html.
# See more here http://www.openldap.org/doc/admin24/tls.html.
## ldap_cert=
## ldap_cert=
## use_start_tls=true
## use_start_tls=true
# Distinguished name of the user to bind as -- not necessary if the LDAP server
# Distinguished name of the user to bind as -- not necessary if the LDAP server
# supports anonymous searches
# supports anonymous searches
## bind_dn="CN=ServiceAccount,DC=mycompany,DC=com"
## bind_dn="CN=ServiceAccount,DC=mycompany,DC=com"
# Password of the bind user -- not necessary if the LDAP server supports
# Password of the bind user -- not necessary if the LDAP server supports
# anonymous searches
# anonymous searches
## bind_password=
## bind_password=
# Pattern for searching for usernames -- Use <username> for the parameter
# Pattern for searching for usernames -- Use <username> for the parameter
# For use when using LdapBackend for Hue authentication
# For use when using LdapBackend for Hue authentication
## ldap_username_pattern="uid=<username>,ou=People,dc=mycompany,dc=com"
## ldap_username_pattern="uid=<username>,ou=People,dc=mycompany,dc=com"
## Use search bind authentication.
## Use search bind authentication.
## search_bind_authentication=true
## search_bind_authentication=true
## [[[[[users]]]]]
## [[[[[users]]]]]
# Base filter for searching for users
# Base filter for searching for users
## user_filter="objectclass=Person"
## user_filter="objectclass=Person"
# The username attribute in the LDAP schema
# The username attribute in the LDAP schema
## user_name_attr=sAMAccountName
## user_name_attr=sAMAccountName
## [[[[[groups]]]]]
## [[[[[groups]]]]]
# Base filter for searching for groups
# Base filter for searching for groups
## group_filter="objectclass=groupOfNames"
## group_filter="objectclass=groupOfNames"
# The username attribute in the LDAP schema
# The username attribute in the LDAP schema
## group_name_attr=cn
## group_name_attr=cn
# Configuration options for specifying the Desktop Database. For more info,
# Configuration options for specifying the Desktop Database. For more info,
# see http://docs.djangoproject.com/en/1.4/ref/settings/#database-engine
# see http://docs.djangoproject.com/en/1.4/ref/settings/#database-engine
# ------------------------------------------------------------------------
# ------------------------------------------------------------------------
[[database]]
[[database]]
复制
已复制
复制
已复制
engine=sqlite3
name=/var/lib/hue/desktop.db
# Database engine is typically one of:
# Database engine is typically one of:
# postgresql_psycopg2, mysql, sqlite3 or oracle.
# postgresql_psycopg2, mysql, sqlite3 or oracle.
#
#
# Note that for sqlite3, 'name', below is a path to the filename. For other backends, it is the database name.
# Note that for sqlite3, 'name', below is a path to the filename. For other backends, it is the database name.
# Note for Oracle, options={'threaded':true} must be set in order to avoid crashes.
# Note for Oracle, options={'threaded':true} must be set in order to avoid crashes.
# Note for Oracle, you can use the Oracle Service Name by setting "port=0" and then "name=<host>:<port>/<service_name>".
# Note for Oracle, you can use the Oracle Service Name by setting "port=0" and then "name=<host>:<port>/<service_name>".
## engine=sqlite3
## engine=sqlite3
## host=
## host=
## port=
## port=
## user=
## user=
## password=
## password=
## name=desktop/desktop.db
## name=desktop/desktop.db
## options={}
## options={}
# Configuration options for specifying the Desktop session.
# Configuration options for specifying the Desktop session.
# For more info, see https://docs.djangoproject.com/en/1.4/topics/http/sessions/
# For more info, see https://docs.djangoproject.com/en/1.4/topics/http/sessions/
# ------------------------------------------------------------------------
# ------------------------------------------------------------------------
[[session]]
[[session]]
# The cookie containing the users' session ID will expire after this amount of time in seconds.
# The cookie containing the users' session ID will expire after this amount of time in seconds.
# Default is 2 weeks.
# Default is 2 weeks.
## ttl=1209600
## ttl=1209600
# The cookie containing the users' session ID will be secure.
# The cookie containing the users' session ID will be secure.
# Should only be enabled with HTTPS.
# Should only be enabled with HTTPS.
## secure=false
## secure=false
# The cookie containing the users' session ID will use the HTTP only flag.
# The cookie containing the users' session ID will use the HTTP only flag.
## http_only=false
## http_only=false
# Use session-length cookies. Logs out the user when she closes the browser window.
# Use session-length cookies. Logs out the user when she closes the browser window.
## expire_at_browser_close=false
## expire_at_browser_close=false
# Configuration options for connecting to an external SMTP server
# Configuration options for connecting to an external SMTP server
# ------------------------------------------------------------------------
# ------------------------------------------------------------------------
[[smtp]]
[[smtp]]
# The SMTP server information for email notification delivery
# The SMTP server information for email notification delivery
host=localhost
host=localhost
port=25
port=25
user=
user=
password=
password=
# Whether to use a TLS (secure) connection when talking to the SMTP server
# Whether to use a TLS (secure) connection when talking to the SMTP server
tls=no
tls=no
# Default email address to use for various automated notification from Hue
# Default email address to use for various automated notification from Hue
## default_from_email=hue@localhost
## default_from_email=hue@localhost
复制
已复制
复制
已复制
<% if @kerberos_realm != "" %>
# Configuration options for Kerberos integration for secured Hadoop clusters
# Configuration options for Kerberos integration for secured Hadoop clusters
# ------------------------------------------------------------------------
# ------------------------------------------------------------------------
[[kerberos]]
[[kerberos]]
# Path to Hue's Kerberos keytab file
# Path to Hue's Kerberos keytab file
复制
已复制
复制
已复制
##
hue_keytab=
hue_keytab=
/etc/hue.keytab
# Kerberos principal name for Hue
# Kerberos principal name for Hue
复制
已复制
复制
已复制
##
hue_principal=hue/
hostname.foo.com
hue_principal=hue/
<%= @fqdn %>
# Path to kinit
# Path to kinit
复制
已复制
复制
已复制
##
kinit_path=
/path/to
/kinit
kinit_path=
<%= (@operatingsystem == 'ubuntu') ? '/usr/bin' : '/usr/kerberos/bin' %>
/kinit
<% end %>
# Configuration options for using OAuthBackend (core) login
# Configuration options for using OAuthBackend (core) login
# ------------------------------------------------------------------------
# ------------------------------------------------------------------------
[[oauth]]
[[oauth]]
# The Consumer key of the application
# The Consumer key of the application
## consumer_key=XXXXXXXXXXXXXXXXXXXXX
## consumer_key=XXXXXXXXXXXXXXXXXXXXX
# The Consumer secret of the application
# The Consumer secret of the application
## consumer_secret=XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
## consumer_secret=XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
# The Request token URL
# The Request token URL
## request_token_url=https://api.twitter.com/oauth/request_token
## request_token_url=https://api.twitter.com/oauth/request_token
# The Access token URL
# The Access token URL
## access_token_url=https://api.twitter.com/oauth/access_token
## access_token_url=https://api.twitter.com/oauth/access_token
# The Authorize URL
# The Authorize URL
## authenticate_url=https://api.twitter.com/oauth/authorize
## authenticate_url=https://api.twitter.com/oauth/authorize
###########################################################################
###########################################################################
# Settings to configure SAML
# Settings to configure SAML
###########################################################################
###########################################################################
[libsaml]
[libsaml]
# Xmlsec1 binary path. This program should be executable by the user running Hue.
# Xmlsec1 binary path. This program should be executable by the user running Hue.
## xmlsec_binary=/usr/local/bin/xmlsec1
## xmlsec_binary=/usr/local/bin/xmlsec1
# Entity ID for Hue acting as service provider.
# Entity ID for Hue acting as service provider.
# Can also accept a pattern where '<base_url>' will be replaced with server URL base.
# Can also accept a pattern where '<base_url>' will be replaced with server URL base.
## entity_id="<base_url>/saml2/metadata/"
## entity_id="<base_url>/saml2/metadata/"
# Create users from SSO on login.
# Create users from SSO on login.
## create_users_on_login=true
## create_users_on_login=true
# Required attributes to ask for from IdP.
# Required attributes to ask for from IdP.
# This requires a comma separated list.
# This requires a comma separated list.
## required_attributes=uid
## required_attributes=uid
# Optional attributes to ask for from IdP.
# Optional attributes to ask for from IdP.
# This requires a comma separated list.
# This requires a comma separated list.
## optional_attributes=
## optional_attributes=
# IdP metadata in the form of a file. This is generally an XML file containing metadata that the Identity Provider generates.
# IdP metadata in the form of a file. This is generally an XML file containing metadata that the Identity Provider generates.
## metadata_file=
## metadata_file=
# Private key to encrypt metadata with.
# Private key to encrypt metadata with.
## key_file=
## key_file=
# Signed certificate to send along with encrypted metadata.
# Signed certificate to send along with encrypted metadata.
## cert_file=
## cert_file=
# A mapping from attributes in the response from the IdP to django user attributes.
# A mapping from attributes in the response from the IdP to django user attributes.
## user_attribute_mapping={'uid':'username'}
## user_attribute_mapping={'uid':'username'}
# Have Hue initiated authn requests be signed and provide a certificate.
# Have Hue initiated authn requests be signed and provide a certificate.
## authn_requests_signed=false
## authn_requests_signed=false
# Have Hue initiated logout requests be signed and provide a certificate.
# Have Hue initiated logout requests be signed and provide a certificate.
## logout_requests_signed=false
## logout_requests_signed=false
## Username can be sourced from 'attributes' or 'nameid'.
## Username can be sourced from 'attributes' or 'nameid'.
## username_source=attributes
## username_source=attributes
# Performs the logout or not.
# Performs the logout or not.
## logout_enabled=true
## logout_enabled=true
###########################################################################
###########################################################################
# Settings to configure OPENID
# Settings to configure OPENID
###########################################################################
###########################################################################
[libopenid]
[libopenid]
复制
已复制
复制
已复制
# (Required) OpenId SSO endpoint url.
# (Required) OpenId SSO endpoint url.
## server_endpoint_url=https://www.google.com/accounts/o8/id
## server_endpoint_url=https://www.google.com/accounts/o8/id
# OpenId 1.1 identity url prefix to be used instead of SSO endpoint url
# OpenId 1.1 identity url prefix to be used instead of SSO endpoint url
# This is only supported if you are using an OpenId 1.1 endpoint
# This is only supported if you are using an OpenId 1.1 endpoint
## identity_url_prefix=https://app.onelogin.com/openid/your_company.com/
## identity_url_prefix=https://app.onelogin.com/openid/your_company.com/
# Create users from OPENID on login.
# Create users from OPENID on login.
## create_users_on_login=true
## create_users_on_login=true
# Use email for username
# Use email for username
## use_email_for_username=true
## use_email_for_username=true
###########################################################################
###########################################################################
# Settings to configure OAuth
# Settings to configure OAuth
###########################################################################
###########################################################################
[liboauth]
[liboauth]
复制
已复制
复制
已复制
# NOTE:
# NOTE:
# To work, each of the active (i.e. uncommented) service must have
# To work, each of the active (i.e. uncommented) service must have
# applications created on the social network.
# applications created on the social network.
# Then the "consumer key" and "consumer secret" must be provided here.
# Then the "consumer key" and "consumer secret" must be provided here.
#
#
# The addresses where to do so are:
# The addresses where to do so are:
# Twitter: https://dev.twitter.com/apps
# Twitter: https://dev.twitter.com/apps
# Google+ : https://cloud.google.com/
# Google+ : https://cloud.google.com/
# Facebook: https://developers.facebook.com/apps
# Facebook: https://developers.facebook.com/apps
# Linkedin: https://www.linkedin.com/secure/developer
# Linkedin: https://www.linkedin.com/secure/developer
#
#
# Additionnaly, the following must be set in the application settings:
# Additionnaly, the following must be set in the application settings:
# Twitter: Callback URL (aka Redirect URL) must be set to http://YOUR_HUE_IP_OR_DOMAIN_NAME/oauth/social_login/oauth_authenticated
# Twitter: Callback URL (aka Redirect URL) must be set to http://YOUR_HUE_IP_OR_DOMAIN_NAME/oauth/social_login/oauth_authenticated
# Google+ : CONSENT SCREEN must have email address
# Google+ : CONSENT SCREEN must have email address
# Facebook: Sandbox Mode must be DISABLED
# Facebook: Sandbox Mode must be DISABLED
# Linkedin: "In OAuth User Agreement", r_emailaddress is REQUIRED
# Linkedin: "In OAuth User Agreement", r_emailaddress is REQUIRED
复制
已复制
复制
已复制
# The Consumer key of the application
# The Consumer key of the application
复制
已复制
复制
已复制
## consumer_key_twitter=
## consumer_key_twitter=
## consumer_key_google=
## consumer_key_google=
## consumer_key_facebook=
## consumer_key_facebook=
## consumer_key_linkedin=
## consumer_key_linkedin=
# The Consumer secret of the application
# The Consumer secret of the application
复制
已复制
复制
已复制
## consumer_secret_twitter=
## consumer_secret_twitter=
## consumer_secret_google=
## consumer_secret_google=
## consumer_secret_facebook=
## consumer_secret_facebook=
## consumer_secret_linkedin=
## consumer_secret_linkedin=
# The Request token URL
# The Request token URL
## request_token_url_twitter=https://api.twitter.com/oauth/request_token
## request_token_url_twitter=https://api.twitter.com/oauth/request_token
## request_token_url_google=https://accounts.google.com/o/oauth2/auth
## request_token_url_google=https://accounts.google.com/o/oauth2/auth
## request_token_url_linkedin=https://www.linkedin.com/uas/oauth2/authorization
## request_token_url_linkedin=https://www.linkedin.com/uas/oauth2/authorization
## request_token_url_facebook=https://graph.facebook.com/oauth/authorize
## request_token_url_facebook=https://graph.facebook.com/oauth/authorize
# The Access token URL
# The Access token URL
## access_token_url_twitter=https://api.twitter.com/oauth/access_token
## access_token_url_twitter=https://api.twitter.com/oauth/access_token
## access_token_url_google=https://accounts.google.com/o/oauth2/token
## access_token_url_google=https://accounts.google.com/o/oauth2/token
## access_token_url_facebook=https://graph.facebook.com/oauth/access_token
## access_token_url_facebook=https://graph.facebook.com/oauth/access_token
## access_token_url_linkedin=https://api.linkedin.com/uas/oauth2/accessToken
## access_token_url_linkedin=https://api.linkedin.com/uas/oauth2/accessToken
# The Authenticate URL
# The Authenticate URL
## authenticate_url_twitter=https://api.twitter.com/oauth/authorize
## authenticate_url_twitter=https://api.twitter.com/oauth/authorize
## authenticate_url_google=https://www.googleapis.com/oauth2/v1/userinfo?access_token=
## authenticate_url_google=https://www.googleapis.com/oauth2/v1/userinfo?access_token=
## authenticate_url_facebook=https://graph.facebook.com/me?access_token=
## authenticate_url_facebook=https://graph.facebook.com/me?access_token=
## authenticate_url_linkedin=https://api.linkedin.com/v1/people/~:(email-address)?format=json&oauth2_access_token=
## authenticate_url_linkedin=https://api.linkedin.com/v1/people/~:(email-address)?format=json&oauth2_access_token=
# Username Map. Json Hash format.
# Username Map. Json Hash format.
# Replaces username parts in order to simplify usernames obtained
# Replaces username parts in order to simplify usernames obtained
# Example: {"@sub1.domain.com":"_S1", "@sub2.domain.com":"_S2"}
# Example: {"@sub1.domain.com":"_S1", "@sub2.domain.com":"_S2"}
# converts 'email@sub1.domain.com' to 'email_S1'
# converts 'email@sub1.domain.com' to 'email_S1'
## username_map={}
## username_map={}
# Whitelisted domains (only applies to Google OAuth). CSV format.
# Whitelisted domains (only applies to Google OAuth). CSV format.
## whitelisted_domains_google=
## whitelisted_domains_google=
###########################################################################
###########################################################################
# Settings for the RDBMS application
# Settings for the RDBMS application
###########################################################################
###########################################################################
[librdbms]
[librdbms]
# The RDBMS app can have any number of databases configured in the databases
# The RDBMS app can have any number of databases configured in the databases
# section. A database is known by its section name
# section. A database is known by its section name
# (IE sqlite, mysql, psql, and oracle in the list below).
# (IE sqlite, mysql, psql, and oracle in the list below).
[[databases]]
[[databases]]
# sqlite configuration.
# sqlite configuration.
## [[[sqlite]]]
## [[[sqlite]]]
# Name to show in the UI.
# Name to show in the UI.
## nice_name=SQLite
## nice_name=SQLite
# For SQLite, name defines the path to the database.
# For SQLite, name defines the path to the database.
## name=/tmp/sqlite.db
## name=/tmp/sqlite.db
# Database backend to use.
# Database backend to use.
## engine=sqlite
## engine=sqlite
# Database options to send to the server when connecting.
# Database options to send to the server when connecting.
# https://docs.djangoproject.com/en/1.4/ref/databases/
# https://docs.djangoproject.com/en/1.4/ref/databases/
## options={}
## options={}
# mysql, oracle, or postgresql configuration.
# mysql, oracle, or postgresql configuration.
## [[[mysql]]]
## [[[mysql]]]
# Name to show in the UI.
# Name to show in the UI.
## nice_name="My SQL DB"
## nice_name="My SQL DB"
# For MySQL and PostgreSQL, name is the name of the database.
# For MySQL and PostgreSQL, name is the name of the database.
# For Oracle, Name is instance of the Oracle server. For express edition
# For Oracle, Name is instance of the Oracle server. For express edition
# this is 'xe' by default.
# this is 'xe' by default.
## name=mysqldb
## name=mysqldb
# Database backend to use. This can be:
# Database backend to use. This can be:
# 1. mysql
# 1. mysql
# 2. postgresql
# 2. postgresql
# 3. oracle
# 3. oracle
## engine=mysql
## engine=mysql
# IP or hostname of the database to connect to.
# IP or hostname of the database to connect to.
## host=localhost
## host=localhost
# Port the database server is listening to. Defaults are:
# Port the database server is listening to. Defaults are:
# 1. MySQL: 3306
# 1. MySQL: 3306
# 2. PostgreSQL: 5432
# 2. PostgreSQL: 5432
# 3. Oracle Express Edition: 1521
# 3. Oracle Express Edition: 1521
## port=3306
## port=3306
# Username to authenticate with when connecting to the database.
# Username to authenticate with when connecting to the database.
## user=example
## user=example
# Password matching the username to authenticate with when
# Password matching the username to authenticate with when
# connecting to the database.
# connecting to the database.
## password=example
## password=example
# Database options to send to the server when connecting.
# Database options to send to the server when connecting.
# https://docs.djangoproject.com/en/1.4/ref/databases/
# https://docs.djangoproject.com/en/1.4/ref/databases/
## options={}
## options={}
###########################################################################
###########################################################################
# Settings to configure your Hadoop cluster.
# Settings to configure your Hadoop cluster.
###########################################################################
###########################################################################
[hadoop]
[hadoop]
# Configuration for HDFS NameNode
# Configuration for HDFS NameNode
# ------------------------------------------------------------------------
# ------------------------------------------------------------------------
[[hdfs_clusters]]
[[hdfs_clusters]]
# HA support by using HttpFs
# HA support by using HttpFs
[[[default]]]
[[[default]]]
# Enter the filesystem uri
# Enter the filesystem uri
复制
已复制
复制
已复制
fs_defaultfs=
hdfs://localhost:8020
fs_defaultfs=
<%= @default_fs %>
# NameNode logical name.
# NameNode logical name.
## logical_name=
## logical_name=
# Use WebHdfs/HttpFs as the communication mechanism.
# Use WebHdfs/HttpFs as the communication mechanism.
# Domain should be the NameNode or HttpFs host.
# Domain should be the NameNode or HttpFs host.
# Default port is 14000 for HttpFs.
# Default port is 14000 for HttpFs.
复制
已复制
复制
已复制
##
webhdfs_url=
http://localhost:50070/
webhdfs
/v1
webhdfs_url=
<%= @
webhdfs
_url %>
# Change this if your HDFS cluster is Kerberos-secured
# Change this if your HDFS cluster is Kerberos-secured
复制
已复制
复制
已复制
##
security_enabled=
false
security_enabled=
<%= if (@kerberos_realm != "") ; "true" else "
false
" end %>
# Default umask for file and directory creation, specified in an octal value.
# Default umask for file and directory creation, specified in an octal value.
## umask=022
## umask=022
# Configuration for YARN (MR2)
# Configuration for YARN (MR2)
# ------------------------------------------------------------------------
# ------------------------------------------------------------------------
[[yarn_clusters]]
[[yarn_clusters]]
[[[default]]]
[[[default]]]
# Enter the host on which you are running the ResourceManager
# Enter the host on which you are running the ResourceManager
复制
已复制
复制
已复制
##
resourcemanager_host=
localhost
resourcemanager_host=
<%= @rm_host %>
# The port where the ResourceManager IPC listens on
# The port where the ResourceManager IPC listens on
复制
已复制
复制
已复制
##
resourcemanager_port=
8032
resourcemanager_port=
<%= @rm_port %>
# Whether to submit jobs to this cluster
# Whether to submit jobs to this cluster
submit_to=True
submit_to=True
# Resource Manager logical name (required for HA)
# Resource Manager logical name (required for HA)
## logical_name=
## logical_name=
# Change this if your YARN cluster is Kerberos-secured
# Change this if your YARN cluster is Kerberos-secured
复制
已复制
复制
已复制
##
security_enabled=
false
security_enabled=
<%= if (@kerberos_realm != "") ; "true" else "
false
" end %>
# URL of the ResourceManager API
# URL of the ResourceManager API
复制
已复制
复制
已复制
##
resourcemanager_api_url=
http://localhost:8088
resourcemanager_api_url=
<%= @rm_url %>
# URL of the ProxyServer API
# URL of the ProxyServer API
复制
已复制
复制
已复制
##
proxy_api_url=
http://localhost:8088
proxy_api_url=
<%= @rm_proxy_url %>
# URL of the HistoryServer API
# URL of the HistoryServer API
复制
已复制
复制
已复制
#
history_server_api_url=
http://localhost:19888
history_server_api_url=
<%= @history_server_url %>
# HA support by specifying multiple clusters
# HA support by specifying multiple clusters
# e.g.
# e.g.
# [[[ha]]]
# [[[ha]]]
# Resource Manager logical name (required for HA)
# Resource Manager logical name (required for HA)
# logical_name=my-rm-name
# logical_name=my-rm-name
# Configuration for MapReduce (MR1)
# Configuration for MapReduce (MR1)
# ------------------------------------------------------------------------
# ------------------------------------------------------------------------
[[mapred_clusters]]
[[mapred_clusters]]
[[[default]]]
[[[default]]]
# Enter the host on which you are running the Hadoop JobTracker
# Enter the host on which you are running the Hadoop JobTracker
## jobtracker_host=localhost
## jobtracker_host=localhost
# The port where the JobTracker IPC listens on
# The port where the JobTracker IPC listens on
## jobtracker_port=8021
## jobtracker_port=8021
# JobTracker logical name for HA
# JobTracker logical name for HA
## logical_name=
## logical_name=
# Thrift plug-in port for the JobTracker
# Thrift plug-in port for the JobTracker
## thrift_port=9290
## thrift_port=9290
# Whether to submit jobs to this cluster
# Whether to submit jobs to this cluster
submit_to=False
submit_to=False
# Change this if your MapReduce cluster is Kerberos-secured
# Change this if your MapReduce cluster is Kerberos-secured
## security_enabled=false
## security_enabled=false
# HA support by specifying multiple clusters
# HA support by specifying multiple clusters
# e.g.
# e.g.
# [[[ha]]]
# [[[ha]]]
# Enter the logical name of the JobTrackers
# Enter the logical name of the JobTrackers
# logical_name=my-jt-name
# logical_name=my-jt-name
###########################################################################
###########################################################################
# Settings to configure the Filebrowser app
# Settings to configure the Filebrowser app
###########################################################################
###########################################################################
[filebrowser]
[filebrowser]
# Location on local filesystem where the uploaded archives are temporary stored.
# Location on local filesystem where the uploaded archives are temporary stored.
## archive_upload_tempdir=/tmp
## archive_upload_tempdir=/tmp
###########################################################################
###########################################################################
# Settings to configure liboozie
# Settings to configure liboozie
复制
已复制
复制
已复制
####################################
#######################################
####################################
[liboozie]
# The URL where the Oozie service runs on. This is required in order for
# users to submit jobs. Empty value disables the config check.
## oozie_url=http://localhost:11000/oozie
# Requires FQDN in oozie_url if enabled
## security_enabled=false
# Location on HDFS where the workflows/coordinator are deployed when submitted.
## remote_deployement_dir=/user/hue/oozie/deployments
###########################################################################
# Settings to configure the Oozie app
###########################################################################
[oozie]
# Location on local FS where the examples are stored.
## local_data_dir=..../examples
# Location on local FS where the data for the examples is stored.
## sample_data_dir=...thirdparty/sample_data
# Location on HDFS where the oozie examples and workflows are stored.
## remote_data_dir=/user/hue/oozie/workspaces
# Maximum of Oozie workflows or coodinators to retrieve in one API call.
## oozie_jobs_count=100
# Use Cron format for defini
已保存差异
原始文本
打开文件
# Hue configuration file # =================================== # # For complete documentation about the contents of this file, run # $ <hue_root>/build/env/bin/hue config_help # # All .ini files under the current directory are treated equally. Their # contents are merged to form the Hue configuration, which can # can be viewed on the Hue at # http://<hue_host>:<port>/dump_config ########################################################################### # General configuration for core Desktop features (authentication, etc) ########################################################################### [desktop] # Set this to a random string, the longer the better. # This is used for secure hashing in the session store. secret_key= # Webserver listens on this address and port http_host=0.0.0.0 http_port=8888 # Time zone name time_zone=America/Los_Angeles # Enable or disable Django debug mode. django_debug_mode=false # Enable or disable backtrace for server error http_500_debug_mode=false # Enable or disable memory profiling. ## memory_profiler=false # Server email for internal error messages ## django_server_email='hue@localhost.localdomain' # Email backend ## django_email_backend=django.core.mail.backends.smtp.EmailBackend # Webserver runs as this user ## server_user=hue ## server_group=hue # This should be the Hue admin and proxy user ## default_user=hue # This should be the hadoop cluster admin ## default_hdfs_superuser=hdfs # If set to false, runcpserver will not actually start the web server. # Used if Apache is being used as a WSGI container. ## enable_server=yes # Number of threads used by the CherryPy web server ## cherrypy_server_threads=10 # Filename of SSL Certificate ## ssl_certificate= # Filename of SSL RSA Private Key ## ssl_private_key= # List of allowed and disallowed ciphers in cipher list format. # See http://www.openssl.org/docs/apps/ciphers.html for more information on cipher list format. ## ssl_cipher_list=DEFAULT:!aNULL:!eNULL:!LOW:!EXPORT:!SSLv2 # LDAP username and password of the hue user used for LDAP authentications. # Set it to use LDAP Authentication with HiveServer2 and Impala. ## ldap_username=hue ## ldap_password= # Default encoding for site data ## default_site_encoding=utf-8 # Help improve Hue with anonymous usage analytics. # Use Google Analytics to see how many times an application or specific section of an application is used, nothing more. ## collect_usage=true # Support for HTTPS termination at the load-balancer level with SECURE_PROXY_SSL_HEADER. ## secure_proxy_ssl_header=false # Comma-separated list of Django middleware classes to use. # See https://docs.djangoproject.com/en/1.4/ref/middleware/ for more details on middlewares in Django. ## middleware=desktop.auth.backend.LdapSynchronizationBackend # Comma-separated list of regular expressions, which match the redirect URL. # For example, to restrict to your local domain and FQDN, the following value can be used: # ^\/.*$,^http:\/\/www.mydomain.com\/.*$ ## redirect_whitelist= # Comma separated list of apps to not load at server startup. # e.g.: pig,zookeeper ## app_blacklist= # The directory where to store the auditing logs. Auditing is disable if the value is empty. # e.g. /var/log/hue/audit.log ## audit_event_log_dir= # Size in KB/MB/GB for audit log to rollover. ## audit_log_max_file_size=100MB # Administrators # ---------------- [[django_admins]] ## [[[admin1]]] ## name=john ## email=john@doe.com # UI customizations # ------------------- [[custom]] # Top banner HTML code # e.g. <H2>Test Lab A2 Hue Services</H2> ## banner_top_html= # Configuration options for user authentication into the web application # ------------------------------------------------------------------------ [[auth]] # Authentication backend. Common settings are: # - django.contrib.auth.backends.ModelBackend (entirely Django backend) # - desktop.auth.backend.AllowAllBackend (allows everyone) # - desktop.auth.backend.AllowFirstUserDjangoBackend # (Default. Relies on Django and user manager, after the first login) # - desktop.auth.backend.LdapBackend # - desktop.auth.backend.PamBackend # - desktop.auth.backend.SpnegoDjangoBackend # - desktop.auth.backend.RemoteUserDjangoBackend # - libsaml.backend.SAML2Backend # - libopenid.backend.OpenIDBackend # - liboauth.backend.OAuthBackend # (Support Twitter, Facebook, Google+ and Linkedin ## backend=desktop.auth.backend.AllowFirstUserDjangoBackend # The service to use when querying PAM. ## pam_service=login # When using the desktop.auth.backend.RemoteUserDjangoBackend, this sets # the normalized name of the header that contains the remote user. # The HTTP header in the request is converted to a key by converting # all characters to uppercase, replacing any hyphens with underscores # and adding an HTTP_ prefix to the name. So, for example, if the header # is called Remote-User that would be configured as HTTP_REMOTE_USER # # Defaults to HTTP_REMOTE_USER ## remote_user_header=HTTP_REMOTE_USER # Synchronize a users groups when they login ## sync_groups_on_login=false # Ignore the case of usernames when searching for existing users. # Only supported in remoteUserDjangoBackend. ## ignore_username_case=false # Ignore the case of usernames when searching for existing users to authenticate with. # Only supported in remoteUserDjangoBackend. ## force_username_lowercase=false # Users will expire after they have not logged in for 'n' amount of seconds. # A negative number means that users will never expire. ## expires_after=-1 # Apply 'expires_after' to superusers. ## expire_superusers=true # Configuration options for connecting to LDAP and Active Directory # ------------------------------------------------------------------- [[ldap]] # The search base for finding users and groups ## base_dn="DC=mycompany,DC=com" # URL of the LDAP server ## ldap_url=ldap://auth.mycompany.com # A PEM-format file containing certificates for the CA's that # Hue will trust for authentication over TLS. # The certificate for the CA that signed the # LDAP server certificate must be included among these certificates. # See more here http://www.openldap.org/doc/admin24/tls.html. ## ldap_cert= ## use_start_tls=true # Distinguished name of the user to bind as -- not necessary if the LDAP server # supports anonymous searches ## bind_dn="CN=ServiceAccount,DC=mycompany,DC=com" # Password of the bind user -- not necessary if the LDAP server supports # anonymous searches ## bind_password= # Pattern for searching for usernames -- Use <username> for the parameter # For use when using LdapBackend for Hue authentication ## ldap_username_pattern="uid=<username>,ou=People,dc=mycompany,dc=com" # Create users in Hue when they try to login with their LDAP credentials # For use when using LdapBackend for Hue authentication ## create_users_on_login = true # Ignore the case of usernames when searching for existing users in Hue. ## ignore_username_case=false # Force usernames to lowercase when creating new users from LDAP. ## force_username_lowercase=false # Use search bind authentication. ## search_bind_authentication=true # Choose which kind of subgrouping to use: nested or suboordinate (deprecated). ## subgroups=suboordinate # Define the number of levels to search for nested members. ## nested_members_search_depth=10 [[[users]]] # Base filter for searching for users ## user_filter="objectclass=*" # The username attribute in the LDAP schema ## user_name_attr=sAMAccountName [[[groups]]] # Base filter for searching for groups ## group_filter="objectclass=*" # The group name attribute in the LDAP schema ## group_name_attr=cn # The attribute of the group object which identifies the members of the group ## group_member_attr=members [[[ldap_servers]]] ## [[[[mycompany]]]] # The search base for finding users and groups ## base_dn="DC=mycompany,DC=com" # URL of the LDAP server ## ldap_url=ldap://auth.mycompany.com # A PEM-format file containing certificates for the CA's that # Hue will trust for authentication over TLS. # The certificate for the CA that signed the # LDAP server certificate must be included among these certificates. # See more here http://www.openldap.org/doc/admin24/tls.html. ## ldap_cert= ## use_start_tls=true # Distinguished name of the user to bind as -- not necessary if the LDAP server # supports anonymous searches ## bind_dn="CN=ServiceAccount,DC=mycompany,DC=com" # Password of the bind user -- not necessary if the LDAP server supports # anonymous searches ## bind_password= # Pattern for searching for usernames -- Use <username> for the parameter # For use when using LdapBackend for Hue authentication ## ldap_username_pattern="uid=<username>,ou=People,dc=mycompany,dc=com" ## Use search bind authentication. ## search_bind_authentication=true ## [[[[[users]]]]] # Base filter for searching for users ## user_filter="objectclass=Person" # The username attribute in the LDAP schema ## user_name_attr=sAMAccountName ## [[[[[groups]]]]] # Base filter for searching for groups ## group_filter="objectclass=groupOfNames" # The username attribute in the LDAP schema ## group_name_attr=cn # Configuration options for specifying the Desktop Database. For more info, # see http://docs.djangoproject.com/en/1.4/ref/settings/#database-engine # ------------------------------------------------------------------------ [[database]] # Database engine is typically one of: # postgresql_psycopg2, mysql, sqlite3 or oracle. # # Note that for sqlite3, 'name', below is a path to the filename. For other backends, it is the database name. # Note for Oracle, options={'threaded':true} must be set in order to avoid crashes. # Note for Oracle, you can use the Oracle Service Name by setting "port=0" and then "name=<host>:<port>/<service_name>". ## engine=sqlite3 ## host= ## port= ## user= ## password= ## name=desktop/desktop.db ## options={} # Configuration options for specifying the Desktop session. # For more info, see https://docs.djangoproject.com/en/1.4/topics/http/sessions/ # ------------------------------------------------------------------------ [[session]] # The cookie containing the users' session ID will expire after this amount of time in seconds. # Default is 2 weeks. ## ttl=1209600 # The cookie containing the users' session ID will be secure. # Should only be enabled with HTTPS. ## secure=false # The cookie containing the users' session ID will use the HTTP only flag. ## http_only=false # Use session-length cookies. Logs out the user when she closes the browser window. ## expire_at_browser_close=false # Configuration options for connecting to an external SMTP server # ------------------------------------------------------------------------ [[smtp]] # The SMTP server information for email notification delivery host=localhost port=25 user= password= # Whether to use a TLS (secure) connection when talking to the SMTP server tls=no # Default email address to use for various automated notification from Hue ## default_from_email=hue@localhost # Configuration options for Kerberos integration for secured Hadoop clusters # ------------------------------------------------------------------------ [[kerberos]] # Path to Hue's Kerberos keytab file ## hue_keytab= # Kerberos principal name for Hue ## hue_principal=hue/hostname.foo.com # Path to kinit ## kinit_path=/path/to/kinit # Configuration options for using OAuthBackend (core) login # ------------------------------------------------------------------------ [[oauth]] # The Consumer key of the application ## consumer_key=XXXXXXXXXXXXXXXXXXXXX # The Consumer secret of the application ## consumer_secret=XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX # The Request token URL ## request_token_url=https://api.twitter.com/oauth/request_token # The Access token URL ## access_token_url=https://api.twitter.com/oauth/access_token # The Authorize URL ## authenticate_url=https://api.twitter.com/oauth/authorize ########################################################################### # Settings to configure SAML ########################################################################### [libsaml] # Xmlsec1 binary path. This program should be executable by the user running Hue. ## xmlsec_binary=/usr/local/bin/xmlsec1 # Entity ID for Hue acting as service provider. # Can also accept a pattern where '<base_url>' will be replaced with server URL base. ## entity_id="<base_url>/saml2/metadata/" # Create users from SSO on login. ## create_users_on_login=true # Required attributes to ask for from IdP. # This requires a comma separated list. ## required_attributes=uid # Optional attributes to ask for from IdP. # This requires a comma separated list. ## optional_attributes= # IdP metadata in the form of a file. This is generally an XML file containing metadata that the Identity Provider generates. ## metadata_file= # Private key to encrypt metadata with. ## key_file= # Signed certificate to send along with encrypted metadata. ## cert_file= # A mapping from attributes in the response from the IdP to django user attributes. ## user_attribute_mapping={'uid':'username'} # Have Hue initiated authn requests be signed and provide a certificate. ## authn_requests_signed=false # Have Hue initiated logout requests be signed and provide a certificate. ## logout_requests_signed=false ## Username can be sourced from 'attributes' or 'nameid'. ## username_source=attributes # Performs the logout or not. ## logout_enabled=true ########################################################################### # Settings to configure OPENID ########################################################################### [libopenid] # (Required) OpenId SSO endpoint url. ## server_endpoint_url=https://www.google.com/accounts/o8/id # OpenId 1.1 identity url prefix to be used instead of SSO endpoint url # This is only supported if you are using an OpenId 1.1 endpoint ## identity_url_prefix=https://app.onelogin.com/openid/your_company.com/ # Create users from OPENID on login. ## create_users_on_login=true # Use email for username ## use_email_for_username=true ########################################################################### # Settings to configure OAuth ########################################################################### [liboauth] # NOTE: # To work, each of the active (i.e. uncommented) service must have # applications created on the social network. # Then the "consumer key" and "consumer secret" must be provided here. # # The addresses where to do so are: # Twitter: https://dev.twitter.com/apps # Google+ : https://cloud.google.com/ # Facebook: https://developers.facebook.com/apps # Linkedin: https://www.linkedin.com/secure/developer # # Additionnaly, the following must be set in the application settings: # Twitter: Callback URL (aka Redirect URL) must be set to http://YOUR_HUE_IP_OR_DOMAIN_NAME/oauth/social_login/oauth_authenticated # Google+ : CONSENT SCREEN must have email address # Facebook: Sandbox Mode must be DISABLED # Linkedin: "In OAuth User Agreement", r_emailaddress is REQUIRED # The Consumer key of the application ## consumer_key_twitter= ## consumer_key_google= ## consumer_key_facebook= ## consumer_key_linkedin= # The Consumer secret of the application ## consumer_secret_twitter= ## consumer_secret_google= ## consumer_secret_facebook= ## consumer_secret_linkedin= # The Request token URL ## request_token_url_twitter=https://api.twitter.com/oauth/request_token ## request_token_url_google=https://accounts.google.com/o/oauth2/auth ## request_token_url_linkedin=https://www.linkedin.com/uas/oauth2/authorization ## request_token_url_facebook=https://graph.facebook.com/oauth/authorize # The Access token URL ## access_token_url_twitter=https://api.twitter.com/oauth/access_token ## access_token_url_google=https://accounts.google.com/o/oauth2/token ## access_token_url_facebook=https://graph.facebook.com/oauth/access_token ## access_token_url_linkedin=https://api.linkedin.com/uas/oauth2/accessToken # The Authenticate URL ## authenticate_url_twitter=https://api.twitter.com/oauth/authorize ## authenticate_url_google=https://www.googleapis.com/oauth2/v1/userinfo?access_token= ## authenticate_url_facebook=https://graph.facebook.com/me?access_token= ## authenticate_url_linkedin=https://api.linkedin.com/v1/people/~:(email-address)?format=json&oauth2_access_token= # Username Map. Json Hash format. # Replaces username parts in order to simplify usernames obtained # Example: {"@sub1.domain.com":"_S1", "@sub2.domain.com":"_S2"} # converts 'email@sub1.domain.com' to 'email_S1' ## username_map={} # Whitelisted domains (only applies to Google OAuth). CSV format. ## whitelisted_domains_google= ########################################################################### # Settings for the RDBMS application ########################################################################### [librdbms] # The RDBMS app can have any number of databases configured in the databases # section. A database is known by its section name # (IE sqlite, mysql, psql, and oracle in the list below). [[databases]] # sqlite configuration. ## [[[sqlite]]] # Name to show in the UI. ## nice_name=SQLite # For SQLite, name defines the path to the database. ## name=/tmp/sqlite.db # Database backend to use. ## engine=sqlite # Database options to send to the server when connecting. # https://docs.djangoproject.com/en/1.4/ref/databases/ ## options={} # mysql, oracle, or postgresql configuration. ## [[[mysql]]] # Name to show in the UI. ## nice_name="My SQL DB" # For MySQL and PostgreSQL, name is the name of the database. # For Oracle, Name is instance of the Oracle server. For express edition # this is 'xe' by default. ## name=mysqldb # Database backend to use. This can be: # 1. mysql # 2. postgresql # 3. oracle ## engine=mysql # IP or hostname of the database to connect to. ## host=localhost # Port the database server is listening to. Defaults are: # 1. MySQL: 3306 # 2. PostgreSQL: 5432 # 3. Oracle Express Edition: 1521 ## port=3306 # Username to authenticate with when connecting to the database. ## user=example # Password matching the username to authenticate with when # connecting to the database. ## password=example # Database options to send to the server when connecting. # https://docs.djangoproject.com/en/1.4/ref/databases/ ## options={} ########################################################################### # Settings to configure your Hadoop cluster. ########################################################################### [hadoop] # Configuration for HDFS NameNode # ------------------------------------------------------------------------ [[hdfs_clusters]] # HA support by using HttpFs [[[default]]] # Enter the filesystem uri fs_defaultfs=hdfs://localhost:8020 # NameNode logical name. ## logical_name= # Use WebHdfs/HttpFs as the communication mechanism. # Domain should be the NameNode or HttpFs host. # Default port is 14000 for HttpFs. ## webhdfs_url=http://localhost:50070/webhdfs/v1 # Change this if your HDFS cluster is Kerberos-secured ## security_enabled=false # Default umask for file and directory creation, specified in an octal value. ## umask=022 # Configuration for YARN (MR2) # ------------------------------------------------------------------------ [[yarn_clusters]] [[[default]]] # Enter the host on which you are running the ResourceManager ## resourcemanager_host=localhost # The port where the ResourceManager IPC listens on ## resourcemanager_port=8032 # Whether to submit jobs to this cluster submit_to=True # Resource Manager logical name (required for HA) ## logical_name= # Change this if your YARN cluster is Kerberos-secured ## security_enabled=false # URL of the ResourceManager API ## resourcemanager_api_url=http://localhost:8088 # URL of the ProxyServer API ## proxy_api_url=http://localhost:8088 # URL of the HistoryServer API # history_server_api_url=http://localhost:19888 # HA support by specifying multiple clusters # e.g. # [[[ha]]] # Resource Manager logical name (required for HA) # logical_name=my-rm-name # Configuration for MapReduce (MR1) # ------------------------------------------------------------------------ [[mapred_clusters]] [[[default]]] # Enter the host on which you are running the Hadoop JobTracker ## jobtracker_host=localhost # The port where the JobTracker IPC listens on ## jobtracker_port=8021 # JobTracker logical name for HA ## logical_name= # Thrift plug-in port for the JobTracker ## thrift_port=9290 # Whether to submit jobs to this cluster submit_to=False # Change this if your MapReduce cluster is Kerberos-secured ## security_enabled=false # HA support by specifying multiple clusters # e.g. # [[[ha]]] # Enter the logical name of the JobTrackers # logical_name=my-jt-name ########################################################################### # Settings to configure the Filebrowser app ########################################################################### [filebrowser] # Location on local filesystem where the uploaded archives are temporary stored. ## archive_upload_tempdir=/tmp ########################################################################### # Settings to configure liboozie ########################################################################### [liboozie] # The URL where the Oozie service runs on. This is required in order for # users to submit jobs. Empty value disables the config check. ## oozie_url=http://localhost:11000/oozie # Requires FQDN in oozie_url if enabled ## security_enabled=false # Location on HDFS where the workflows/coordinator are deployed when submitted. ## remote_deployement_dir=/user/hue/oozie/deployments ########################################################################### # Settings to configure the Oozie app ########################################################################### [oozie] # Location on local FS where the examples are stored. ## local_data_dir=..../examples # Location on local FS where the data for the examples is stored. ## sample_data_dir=...thirdparty/sample_data # Location on HDFS where the oozie examples and workflows are stored. ## remote_data_dir=/user/hue/oozie/workspaces # Maximum of Oozie workflows or coodinators to retrieve in one API call. ## oozie_jobs_count=100 # Use Cron format for defining the frequency of a Coordinator instead of the old frequency number/unit. ## enable_cron_scheduling=true ########################################################################### # Settings to configure Beeswax with Hive ########################################################################### [beeswax] # Host where HiveServer2 is running. # If Kerberos security is enabled, use fully-qualified domain name (FQDN). ## hive_server_host=localhost # Port where HiveServer2 Thrift server runs on. ## hive_server_port=10000 # Hive configuration directory, where hive-site.xml is located ## hive_conf_dir=/etc/hive/conf # Timeout in seconds for thrift calls to Hive service ## server_conn_timeout=120 # Set a LIMIT clause when browsing a partitioned table. # A positive value will be set as the LIMIT. If 0 or negative, do not set any limit. ## browse_partitioned_table_limit=250 # A limit to the number of rows that can be downloaded from a query. # A value of -1 means there will be no limit. # A maximum of 65,000 is applied to XLS downloads. ## download_row_limit=1000000 # Hue will try to close the Hive query when the user leaves the editor page. # This will free all the query resources in HiveServer2, but also make its results inaccessible. ## close_queries=false # Thrift version to use when communicating with HiveServer2 ## thrift_version=5 [[ssl]] # SSL communication enabled for this server. ## enabled=false # Path to Certificate Authority certificates. ## cacerts=/etc/hue/cacerts.pem # Path to the private key file. ## key=/etc/hue/key.pem # Path to the public certificate file. ## cert=/etc/hue/cert.pem # Choose whether Hue should validate certificates received from the server. ## validate=true ########################################################################### # Settings to configure Pig ########################################################################### [pig] # Location of piggybank.jar on local filesystem. ## local_sample_dir=/usr/share/hue/apps/pig/examples # Location piggybank.jar will be copied to in HDFS. ## remote_data_dir=/user/hue/pig/examples ########################################################################### # Settings to configure Sqoop ########################################################################### [sqoop] # For autocompletion, fill out the librdbms section. # Sqoop server URL ## server_url=http://localhost:12000/sqoop ########################################################################### # Settings to configure Proxy ########################################################################### [proxy] # Comma-separated list of regular expressions, # which match 'host:port' of requested proxy target. ## whitelist=(localhost|127\.0\.0\.1):(50030|50070|50060|50075) # Comma-separated list of regular expressions, # which match any prefix of 'host:port/path' of requested proxy target. # This does not support matching GET parameters. ## blacklist= ########################################################################### # Settings to configure Impala ########################################################################### [impala] # Host of the Impala Server (one of the Impalad) ## server_host=localhost # Port of the Impala Server ## server_port=21050 # Kerberos principal ## impala_principal=impala/hostname.foo.com # Turn on/off impersonation mechanism when talking to Impala ## impersonation_enabled=False # Number of initial rows of a result set to ask Impala to cache in order # to support re-fetching them for downloading them. # Set to 0 for disabling the option and backward compatibility. ## querycache_rows=50000 # Timeout in seconds for thrift calls ## server_conn_timeout=120 # Hue will try to close the Impala query when the user leaves the editor page. # This will free all the query resources in Impala, but also make its results inaccessible. ## close_queries=true # If QUERY_TIMEOUT_S > 0, the query will be timed out (i.e. cancelled) if Impala does not do any work # (compute or send back results) for that query within QUERY_TIMEOUT_S seconds. ## query_timeout_s=600 ########################################################################### # Settings to configure HBase Browser ########################################################################### [hbase] # Comma-separated list of HBase Thrift servers for clusters in the format of '(name|host:port)'. # Use full hostname with security. ## hbase_clusters=(Cluster|localhost:9090) # HBase configuration directory, where hbase-site.xml is located. ## hbase_conf_dir=/etc/hbase/conf # Hard limit of rows or columns per row fetched before truncating. ## truncate_limit = 500 # 'buffered' is the default of the HBase Thrift Server and supports security. # 'framed' can be used to chunk up responses, # which is useful when used in conjunction with the nonblocking server in Thrift. ## thrift_transport=buffered ########################################################################### # Settings to configure Solr Search ########################################################################### [search] # URL of the Solr Server ## solr_url=http://localhost:8983/solr/ # Requires FQDN in solr_url if enabled ## security_enabled=false ## Query sent when no term is entered ## empty_query=*:* ########################################################################### # Settings to configure Solr Indexer ########################################################################### [indexer] # Location of the solrctl binary. ## solrctl_path=/usr/bin/solrctl # Location of the solr home. ## solr_home=/usr/lib/solr # Zookeeper ensemble. ## solr_zk_ensemble=localhost:2181/solr # The contents of this directory will be copied over to the solrctl host to its temporary directory. ## config_template_path=/../hue/desktop/libs/indexer/src/data/solr_configs ########################################################################### # Settings to configure Job Designer ########################################################################### [jobsub] # Location on local FS where examples and template are stored. ## local_data_dir=..../data # Location on local FS where sample data is stored ## sample_data_dir=...thirdparty/sample_data ########################################################################### # Settings to configure Job Browser. ########################################################################### [jobbrowser] # Share submitted jobs information with all users. If set to false, # submitted jobs are visible only to the owner and administrators. ## share_jobs=true ########################################################################### # Settings to configure the Zookeeper application. ########################################################################### [zookeeper] [[clusters]] [[[default]]] # Zookeeper ensemble. Comma separated list of Host/Port. # e.g. localhost:2181,localhost:2182,localhost:2183 ## host_ports=localhost:2181 # The URL of the REST contrib service (required for znode browsing) ## rest_url=http://localhost:9998 ########################################################################### # Settings to configure the Spark application. ########################################################################### [spark] # URL of the REST Spark Job Server. ## server_url=http://localhost:8090/ ########################################################################### # Settings for the User Admin application ########################################################################### [useradmin] # The name of the default user group that users will be a member of ## default_user_group=default ########################################################################### # Settings for the Sentry lib ########################################################################### [libsentry] # Hostname or IP of server. ## hostname=localhost # Port the sentry service is running on. ## port=8038 # Sentry configuration directory, where sentry-site.xml is located. ## sentry_conf_dir=/etc/sentry/conf
更改后文本
打开文件
# Licensed to the Apache Software Foundation (ASF) under one or more # contributor license agreements. See the NOTICE file distributed with # this work for additional information regarding copyright ownership. # The ASF licenses this file to You under the Apache License, Version 2.0 # (the "License"); you may not use this file except in compliance with # the License. You may obtain a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. # Hue configuration file # =================================== # # For complete documentation about the contents of this file, run # $ <hue_root>/build/env/bin/hue config_help # # All .ini files under the current directory are treated equally. Their # contents are merged to form the Hue configuration, which can # can be viewed on the Hue at # http://<hue_host>:<port>/dump_config ########################################################################### # General configuration for core Desktop features (authentication, etc) ########################################################################### [desktop] send_dbug_messages=1 # To show database transactions, set database_logging to 1 database_logging=0 # Set this to a random string, the longer the better. # This is used for secure hashing in the session store. secret_key=deaddeafdeaddeafdeaddeafdeaddeafdeaddeafdeaddeafdeaddeaf # Webserver listens on this address and port http_host=<%= @hue_host %> http_port=<%= @hue_port %> # Time zone name time_zone=America/Los_Angeles # Enable or disable Django debug mode. django_debug_mode=false # Enable or disable backtrace for server error http_500_debug_mode=false # Enable or disable memory profiling. ## memory_profiler=false # Server email for internal error messages ## django_server_email='hue@localhost.localdomain' # Email backend ## django_email_backend=django.core.mail.backends.smtp.EmailBackend # Webserver runs as this user server_user=hue server_group=hue # This should be the Hue admin and proxy user ## default_user=hue # This should be the hadoop cluster admin ## default_hdfs_superuser=hdfs # If set to false, runcpserver will not actually start the web server. # Used if Apache is being used as a WSGI container. ## enable_server=yes # Number of threads used by the CherryPy web server ## cherrypy_server_threads=10 # Filename of SSL Certificate ## ssl_certificate= # Filename of SSL RSA Private Key ## ssl_private_key= # List of allowed and disallowed ciphers in cipher list format. # See http://www.openssl.org/docs/apps/ciphers.html for more information on cipher list format. ## ssl_cipher_list=DEFAULT:!aNULL:!eNULL:!LOW:!EXPORT:!SSLv2 # LDAP username and password of the hue user used for LDAP authentications. # Set it to use LDAP Authentication with HiveServer2 and Impala. ## ldap_username=hue ## ldap_password= # Default encoding for site data ## default_site_encoding=utf-8 # Help improve Hue with anonymous usage analytics. # Use Google Analytics to see how many times an application or specific section of an application is used, nothing more. ## collect_usage=true # Support for HTTPS termination at the load-balancer level with SECURE_PROXY_SSL_HEADER. ## secure_proxy_ssl_header=false # Comma-separated list of Django middleware classes to use. # See https://docs.djangoproject.com/en/1.4/ref/middleware/ for more details on middlewares in Django. ## middleware=desktop.auth.backend.LdapSynchronizationBackend # Comma-separated list of regular expressions, which match the redirect URL. # For example, to restrict to your local domain and FQDN, the following value can be used: # ^\/.*$,^http:\/\/www.mydomain.com\/.*$ ## redirect_whitelist= # Comma separated list of apps to not load at server startup. # e.g.: pig,zookeeper ## app_blacklist= # The directory where to store the auditing logs. Auditing is disable if the value is empty. # e.g. /var/log/hue/audit.log ## audit_event_log_dir= # Size in KB/MB/GB for audit log to rollover. ## audit_log_max_file_size=100MB # Administrators # ---------------- [[django_admins]] ## [[[admin1]]] ## name=john ## email=john@doe.com # UI customizations # ------------------- [[custom]] # Top banner HTML code # e.g. <H2>Test Lab A2 Hue Services</H2> ## banner_top_html= # Configuration options for user authentication into the web application # ------------------------------------------------------------------------ [[auth]] # Authentication backend. Common settings are: # - django.contrib.auth.backends.ModelBackend (entirely Django backend) # - desktop.auth.backend.AllowAllBackend (allows everyone) # - desktop.auth.backend.AllowFirstUserDjangoBackend # (Default. Relies on Django and user manager, after the first login) # - desktop.auth.backend.LdapBackend # - desktop.auth.backend.PamBackend # - desktop.auth.backend.SpnegoDjangoBackend # - desktop.auth.backend.RemoteUserDjangoBackend # - libsaml.backend.SAML2Backend # - libopenid.backend.OpenIDBackend # - liboauth.backend.OAuthBackend # (Support Twitter, Facebook, Google+ and Linkedin ## backend=desktop.auth.backend.AllowFirstUserDjangoBackend # The service to use when querying PAM. ## pam_service=login # When using the desktop.auth.backend.RemoteUserDjangoBackend, this sets # the normalized name of the header that contains the remote user. # The HTTP header in the request is converted to a key by converting # all characters to uppercase, replacing any hyphens with underscores # and adding an HTTP_ prefix to the name. So, for example, if the header # is called Remote-User that would be configured as HTTP_REMOTE_USER # # Defaults to HTTP_REMOTE_USER ## remote_user_header=HTTP_REMOTE_USER # Synchronize a users groups when they login ## sync_groups_on_login=false # Ignore the case of usernames when searching for existing users. # Only supported in remoteUserDjangoBackend. ## ignore_username_case=false # Ignore the case of usernames when searching for existing users to authenticate with. # Only supported in remoteUserDjangoBackend. ## force_username_lowercase=false # Users will expire after they have not logged in for 'n' amount of seconds. # A negative number means that users will never expire. ## expires_after=-1 # Apply 'expires_after' to superusers. ## expire_superusers=true # Configuration options for connecting to LDAP and Active Directory # ------------------------------------------------------------------- [[ldap]] # The search base for finding users and groups ## base_dn="DC=mycompany,DC=com" # URL of the LDAP server ## ldap_url=ldap://auth.mycompany.com # A PEM-format file containing certificates for the CA's that # Hue will trust for authentication over TLS. # The certificate for the CA that signed the # LDAP server certificate must be included among these certificates. # See more here http://www.openldap.org/doc/admin24/tls.html. ## ldap_cert= ## use_start_tls=true # Distinguished name of the user to bind as -- not necessary if the LDAP server # supports anonymous searches ## bind_dn="CN=ServiceAccount,DC=mycompany,DC=com" # Password of the bind user -- not necessary if the LDAP server supports # anonymous searches ## bind_password= # Pattern for searching for usernames -- Use <username> for the parameter # For use when using LdapBackend for Hue authentication ## ldap_username_pattern="uid=<username>,ou=People,dc=mycompany,dc=com" # Create users in Hue when they try to login with their LDAP credentials # For use when using LdapBackend for Hue authentication ## create_users_on_login = true # Ignore the case of usernames when searching for existing users in Hue. ## ignore_username_case=false # Force usernames to lowercase when creating new users from LDAP. ## force_username_lowercase=false # Use search bind authentication. ## search_bind_authentication=true # Choose which kind of subgrouping to use: nested or suboordinate (deprecated). ## subgroups=suboordinate # Define the number of levels to search for nested members. ## nested_members_search_depth=10 [[[users]]] # Base filter for searching for users ## user_filter="objectclass=*" # The username attribute in the LDAP schema ## user_name_attr=sAMAccountName [[[groups]]] # Base filter for searching for groups ## group_filter="objectclass=*" # The group name attribute in the LDAP schema ## group_name_attr=cn # The attribute of the group object which identifies the members of the group ## group_member_attr=members [[[ldap_servers]]] ## [[[[mycompany]]]] # The search base for finding users and groups ## base_dn="DC=mycompany,DC=com" # URL of the LDAP server ## ldap_url=ldap://auth.mycompany.com # A PEM-format file containing certificates for the CA's that # Hue will trust for authentication over TLS. # The certificate for the CA that signed the # LDAP server certificate must be included among these certificates. # See more here http://www.openldap.org/doc/admin24/tls.html. ## ldap_cert= ## use_start_tls=true # Distinguished name of the user to bind as -- not necessary if the LDAP server # supports anonymous searches ## bind_dn="CN=ServiceAccount,DC=mycompany,DC=com" # Password of the bind user -- not necessary if the LDAP server supports # anonymous searches ## bind_password= # Pattern for searching for usernames -- Use <username> for the parameter # For use when using LdapBackend for Hue authentication ## ldap_username_pattern="uid=<username>,ou=People,dc=mycompany,dc=com" ## Use search bind authentication. ## search_bind_authentication=true ## [[[[[users]]]]] # Base filter for searching for users ## user_filter="objectclass=Person" # The username attribute in the LDAP schema ## user_name_attr=sAMAccountName ## [[[[[groups]]]]] # Base filter for searching for groups ## group_filter="objectclass=groupOfNames" # The username attribute in the LDAP schema ## group_name_attr=cn # Configuration options for specifying the Desktop Database. For more info, # see http://docs.djangoproject.com/en/1.4/ref/settings/#database-engine # ------------------------------------------------------------------------ [[database]] engine=sqlite3 name=/var/lib/hue/desktop.db # Database engine is typically one of: # postgresql_psycopg2, mysql, sqlite3 or oracle. # # Note that for sqlite3, 'name', below is a path to the filename. For other backends, it is the database name. # Note for Oracle, options={'threaded':true} must be set in order to avoid crashes. # Note for Oracle, you can use the Oracle Service Name by setting "port=0" and then "name=<host>:<port>/<service_name>". ## engine=sqlite3 ## host= ## port= ## user= ## password= ## name=desktop/desktop.db ## options={} # Configuration options for specifying the Desktop session. # For more info, see https://docs.djangoproject.com/en/1.4/topics/http/sessions/ # ------------------------------------------------------------------------ [[session]] # The cookie containing the users' session ID will expire after this amount of time in seconds. # Default is 2 weeks. ## ttl=1209600 # The cookie containing the users' session ID will be secure. # Should only be enabled with HTTPS. ## secure=false # The cookie containing the users' session ID will use the HTTP only flag. ## http_only=false # Use session-length cookies. Logs out the user when she closes the browser window. ## expire_at_browser_close=false # Configuration options for connecting to an external SMTP server # ------------------------------------------------------------------------ [[smtp]] # The SMTP server information for email notification delivery host=localhost port=25 user= password= # Whether to use a TLS (secure) connection when talking to the SMTP server tls=no # Default email address to use for various automated notification from Hue ## default_from_email=hue@localhost <% if @kerberos_realm != "" %> # Configuration options for Kerberos integration for secured Hadoop clusters # ------------------------------------------------------------------------ [[kerberos]] # Path to Hue's Kerberos keytab file hue_keytab=/etc/hue.keytab # Kerberos principal name for Hue hue_principal=hue/<%= @fqdn %> # Path to kinit kinit_path=<%= (@operatingsystem == 'ubuntu') ? '/usr/bin' : '/usr/kerberos/bin' %>/kinit <% end %> # Configuration options for using OAuthBackend (core) login # ------------------------------------------------------------------------ [[oauth]] # The Consumer key of the application ## consumer_key=XXXXXXXXXXXXXXXXXXXXX # The Consumer secret of the application ## consumer_secret=XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX # The Request token URL ## request_token_url=https://api.twitter.com/oauth/request_token # The Access token URL ## access_token_url=https://api.twitter.com/oauth/access_token # The Authorize URL ## authenticate_url=https://api.twitter.com/oauth/authorize ########################################################################### # Settings to configure SAML ########################################################################### [libsaml] # Xmlsec1 binary path. This program should be executable by the user running Hue. ## xmlsec_binary=/usr/local/bin/xmlsec1 # Entity ID for Hue acting as service provider. # Can also accept a pattern where '<base_url>' will be replaced with server URL base. ## entity_id="<base_url>/saml2/metadata/" # Create users from SSO on login. ## create_users_on_login=true # Required attributes to ask for from IdP. # This requires a comma separated list. ## required_attributes=uid # Optional attributes to ask for from IdP. # This requires a comma separated list. ## optional_attributes= # IdP metadata in the form of a file. This is generally an XML file containing metadata that the Identity Provider generates. ## metadata_file= # Private key to encrypt metadata with. ## key_file= # Signed certificate to send along with encrypted metadata. ## cert_file= # A mapping from attributes in the response from the IdP to django user attributes. ## user_attribute_mapping={'uid':'username'} # Have Hue initiated authn requests be signed and provide a certificate. ## authn_requests_signed=false # Have Hue initiated logout requests be signed and provide a certificate. ## logout_requests_signed=false ## Username can be sourced from 'attributes' or 'nameid'. ## username_source=attributes # Performs the logout or not. ## logout_enabled=true ########################################################################### # Settings to configure OPENID ########################################################################### [libopenid] # (Required) OpenId SSO endpoint url. ## server_endpoint_url=https://www.google.com/accounts/o8/id # OpenId 1.1 identity url prefix to be used instead of SSO endpoint url # This is only supported if you are using an OpenId 1.1 endpoint ## identity_url_prefix=https://app.onelogin.com/openid/your_company.com/ # Create users from OPENID on login. ## create_users_on_login=true # Use email for username ## use_email_for_username=true ########################################################################### # Settings to configure OAuth ########################################################################### [liboauth] # NOTE: # To work, each of the active (i.e. uncommented) service must have # applications created on the social network. # Then the "consumer key" and "consumer secret" must be provided here. # # The addresses where to do so are: # Twitter: https://dev.twitter.com/apps # Google+ : https://cloud.google.com/ # Facebook: https://developers.facebook.com/apps # Linkedin: https://www.linkedin.com/secure/developer # # Additionnaly, the following must be set in the application settings: # Twitter: Callback URL (aka Redirect URL) must be set to http://YOUR_HUE_IP_OR_DOMAIN_NAME/oauth/social_login/oauth_authenticated # Google+ : CONSENT SCREEN must have email address # Facebook: Sandbox Mode must be DISABLED # Linkedin: "In OAuth User Agreement", r_emailaddress is REQUIRED # The Consumer key of the application ## consumer_key_twitter= ## consumer_key_google= ## consumer_key_facebook= ## consumer_key_linkedin= # The Consumer secret of the application ## consumer_secret_twitter= ## consumer_secret_google= ## consumer_secret_facebook= ## consumer_secret_linkedin= # The Request token URL ## request_token_url_twitter=https://api.twitter.com/oauth/request_token ## request_token_url_google=https://accounts.google.com/o/oauth2/auth ## request_token_url_linkedin=https://www.linkedin.com/uas/oauth2/authorization ## request_token_url_facebook=https://graph.facebook.com/oauth/authorize # The Access token URL ## access_token_url_twitter=https://api.twitter.com/oauth/access_token ## access_token_url_google=https://accounts.google.com/o/oauth2/token ## access_token_url_facebook=https://graph.facebook.com/oauth/access_token ## access_token_url_linkedin=https://api.linkedin.com/uas/oauth2/accessToken # The Authenticate URL ## authenticate_url_twitter=https://api.twitter.com/oauth/authorize ## authenticate_url_google=https://www.googleapis.com/oauth2/v1/userinfo?access_token= ## authenticate_url_facebook=https://graph.facebook.com/me?access_token= ## authenticate_url_linkedin=https://api.linkedin.com/v1/people/~:(email-address)?format=json&oauth2_access_token= # Username Map. Json Hash format. # Replaces username parts in order to simplify usernames obtained # Example: {"@sub1.domain.com":"_S1", "@sub2.domain.com":"_S2"} # converts 'email@sub1.domain.com' to 'email_S1' ## username_map={} # Whitelisted domains (only applies to Google OAuth). CSV format. ## whitelisted_domains_google= ########################################################################### # Settings for the RDBMS application ########################################################################### [librdbms] # The RDBMS app can have any number of databases configured in the databases # section. A database is known by its section name # (IE sqlite, mysql, psql, and oracle in the list below). [[databases]] # sqlite configuration. ## [[[sqlite]]] # Name to show in the UI. ## nice_name=SQLite # For SQLite, name defines the path to the database. ## name=/tmp/sqlite.db # Database backend to use. ## engine=sqlite # Database options to send to the server when connecting. # https://docs.djangoproject.com/en/1.4/ref/databases/ ## options={} # mysql, oracle, or postgresql configuration. ## [[[mysql]]] # Name to show in the UI. ## nice_name="My SQL DB" # For MySQL and PostgreSQL, name is the name of the database. # For Oracle, Name is instance of the Oracle server. For express edition # this is 'xe' by default. ## name=mysqldb # Database backend to use. This can be: # 1. mysql # 2. postgresql # 3. oracle ## engine=mysql # IP or hostname of the database to connect to. ## host=localhost # Port the database server is listening to. Defaults are: # 1. MySQL: 3306 # 2. PostgreSQL: 5432 # 3. Oracle Express Edition: 1521 ## port=3306 # Username to authenticate with when connecting to the database. ## user=example # Password matching the username to authenticate with when # connecting to the database. ## password=example # Database options to send to the server when connecting. # https://docs.djangoproject.com/en/1.4/ref/databases/ ## options={} ########################################################################### # Settings to configure your Hadoop cluster. ########################################################################### [hadoop] # Configuration for HDFS NameNode # ------------------------------------------------------------------------ [[hdfs_clusters]] # HA support by using HttpFs [[[default]]] # Enter the filesystem uri fs_defaultfs=<%= @default_fs %> # NameNode logical name. ## logical_name= # Use WebHdfs/HttpFs as the communication mechanism. # Domain should be the NameNode or HttpFs host. # Default port is 14000 for HttpFs. webhdfs_url=<%= @webhdfs_url %> # Change this if your HDFS cluster is Kerberos-secured security_enabled=<%= if (@kerberos_realm != "") ; "true" else "false" end %> # Default umask for file and directory creation, specified in an octal value. ## umask=022 # Configuration for YARN (MR2) # ------------------------------------------------------------------------ [[yarn_clusters]] [[[default]]] # Enter the host on which you are running the ResourceManager resourcemanager_host=<%= @rm_host %> # The port where the ResourceManager IPC listens on resourcemanager_port=<%= @rm_port %> # Whether to submit jobs to this cluster submit_to=True # Resource Manager logical name (required for HA) ## logical_name= # Change this if your YARN cluster is Kerberos-secured security_enabled=<%= if (@kerberos_realm != "") ; "true" else "false" end %> # URL of the ResourceManager API resourcemanager_api_url=<%= @rm_url %> # URL of the ProxyServer API proxy_api_url=<%= @rm_proxy_url %> # URL of the HistoryServer API history_server_api_url=<%= @history_server_url %> # HA support by specifying multiple clusters # e.g. # [[[ha]]] # Resource Manager logical name (required for HA) # logical_name=my-rm-name # Configuration for MapReduce (MR1) # ------------------------------------------------------------------------ [[mapred_clusters]] [[[default]]] # Enter the host on which you are running the Hadoop JobTracker ## jobtracker_host=localhost # The port where the JobTracker IPC listens on ## jobtracker_port=8021 # JobTracker logical name for HA ## logical_name= # Thrift plug-in port for the JobTracker ## thrift_port=9290 # Whether to submit jobs to this cluster submit_to=False # Change this if your MapReduce cluster is Kerberos-secured ## security_enabled=false # HA support by specifying multiple clusters # e.g. # [[[ha]]] # Enter the logical name of the JobTrackers # logical_name=my-jt-name ########################################################################### # Settings to configure the Filebrowser app ########################################################################### [filebrowser] # Location on local filesystem where the uploaded archives are temporary stored. ## archive_upload_tempdir=/tmp ########################################################################### # Settings to configure liboozie ########################################################################### [liboozie] # The URL where the Oozie service runs on. This is required in order for # users to submit jobs. Empty value disables the config check. oozie_url=<%= @oozie_url %> # Requires FQDN in oozie_url if enabled security_enabled=<%= if (@kerberos_realm != "") ; "true" else "false" end %> # Location on HDFS where the workflows/coordinator are deployed when submitted. remote_deployement_dir=/user/hue/oozie/deployments ########################################################################### # Settings to configure the Oozie app ########################################################################### [oozie] # Location on local FS where the examples are stored. ## local_data_dir=..../examples # Location on local FS where the data for the examples is stored. ## sample_data_dir=...thirdparty/sample_data # Location on HDFS where the oozie examples and workflows are stored. remote_data_dir=/user/hue/oozie/workspaces # Maximum of Oozie workflows or coodinators to retrieve in one API call. oozie_jobs_count=100 # Use Cron format for defining the frequency of a Coordinator instead of the old frequency number/unit. ## enable_cron_scheduling=true ########################################################################### # Settings to configure Beeswax with Hive ########################################################################### [beeswax] # Host where HiveServer2 is running. # If Kerberos security is enabled, use fully-qualified domain name (FQDN). ## hive_server_host=localhost # Port where HiveServer2 Thrift server runs on. ## hive_server_port=10000 # Hive configuration directory, where hive-site.xml is located ## hive_conf_dir=/etc/hive/conf # Timeout in seconds for thrift calls to Hive service ## server_conn_timeout=120 # Set a LIMIT clause when browsing a partitioned table. # A positive value will be set as the LIMIT. If 0 or negative, do not set any limit. ## browse_partitioned_table_limit=250 # A limit to the number of rows that can be downloaded from a query. # A value of -1 means there will be no limit. # A maximum of 65,000 is applied to XLS downloads. ## download_row_limit=1000000 # Hue will try to close the Hive query when the user leaves the editor page. # This will free all the query resources in HiveServer2, but also make its results inaccessible. ## close_queries=false # Thrift version to use when communicating with HiveServer2 ## thrift_version=5 [[ssl]] # SSL communication enabled for this server. ## enabled=false # Path to Certificate Authority certificates. ## cacerts=/etc/hue/cacerts.pem # Path to the private key file. ## key=/etc/hue/key.pem # Path to the public certificate file. ## cert=/etc/hue/cert.pem # Choose whether Hue should validate certificates received from the server. ## validate=true ########################################################################### # Settings to configure Pig ########################################################################### [pig] # Location of piggybank.jar on local filesystem. ## local_sample_dir=/usr/share/hue/apps/pig/examples # Location piggybank.jar will be copied to in HDFS. ## remote_data_dir=/user/hue/pig/examples ########################################################################### # Settings to configure Sqoop ########################################################################### [sqoop] # For autocompletion, fill out the librdbms section. # Sqoop server URL server_url=<%= @sqoop_url %> ########################################################################### # Settings to configure Proxy ########################################################################### [proxy] # Comma-separated list of regular expressions, # which match 'host:port' of requested proxy target. ## whitelist=(localhost|127\.0\.0\.1):(50030|50070|50060|50075) # Comma-separated list of regular expressions, # which match any prefix of 'host:port/path' of requested proxy target. # This does not support matching GET parameters. ## blacklist= ########################################################################### # Settings to configure Impala ########################################################################### [impala] # Host of the Impala Server (one of the Impalad) ## server_host=localhost # Port of the Impala Server ## server_port=21050 # Kerberos principal ## impala_principal=impala/hostname.foo.com # Turn on/off impersonation mechanism when talking to Impala ## impersonation_enabled=False # Number of initial rows of a result set to ask Impala to cache in order # to support re-fetching them for downloading them. # Set to 0 for disabling the option and backward compatibility. ## querycache_rows=50000 # Timeout in seconds for thrift calls ## server_conn_timeout=120 # Hue will try to close the Impala query when the user leaves the editor page. # This will free all the query resources in Impala, but also make its results inaccessible. ## close_queries=true # If QUERY_TIMEOUT_S > 0, the query will be timed out (i.e. cancelled) if Impala does not do any work # (compute or send back results) for that query within QUERY_TIMEOUT_S seconds. ## query_timeout_s=600 ########################################################################### # Settings to configure HBase Browser ########################################################################### [hbase] # Comma-separated list of HBase Thrift servers for clusters in the format of '(name|host:port)'. # Use full hostname with security. hbase_clusters=(Bigtop|<%= @hbase_thrift_url %>) # HBase configuration directory, where hbase-site.xml is located. ## hbase_conf_dir=/etc/hbase/conf # Hard limit of rows or columns per row fetched before truncating. ## truncate_limit = 500 # 'buffered' is the default of the HBase Thrift Server and supports security. # 'framed' can be used to chunk up responses, # which is useful when used in conjunction with the nonblocking server in Thrift. ## thrift_transport=buffered ########################################################################### # Settings to configure Solr Search ########################################################################### [search] # URL of the Solr Server solr_url=<%= @solr_url %> # Requires FQDN in solr_url if enabled ## security_enabled=false ## Query sent when no term is entered empty_query=*:* ########################################################################### # Settings to configure Solr Indexer ########################################################################### [indexer] # Location of the solrctl binary. ## solrctl_path=/usr/bin/solrctl # Location of the solr home. ## solr_home=/usr/lib/solr # Zookeeper ensemble. ## solr_zk_ensemble=localhost:2181/solr # The contents of this directory will be copied over to the solrctl host to its temporary directory. ## config_template_path=/../hue/desktop/libs/indexer/src/data/solr_configs ########################################################################### # Settings to configure Job Designer ########################################################################### [jobsub] # Location on local FS where examples and template are stored. ## local_data_dir=..../data # Location on local FS where sample data is stored ## sample_data_dir=...thirdparty/sample_data ########################################################################### # Settings to configure Job Browser. ########################################################################### [jobbrowser] # Share submitted jobs information with all users. If set to false, # submitted jobs are visible only to the owner and administrators. ## share_jobs=true ########################################################################### # Settings to configure the Zookeeper application. ########################################################################### [zookeeper] [[clusters]] [[[default]]] # Zookeeper ensemble. Comma separated list of Host/Port. # e.g. localhost:2181,localhost:2182,localhost:2183 ## host_ports=localhost:2181 # The URL of the REST contrib service (required for znode browsing) ## rest_url=http://localhost:9998 ########################################################################### # Settings to configure the Spark application. ########################################################################### [spark] # URL of the REST Spark Job Server. ## server_url=http://localhost:8090/ ########################################################################### # Settings for the User Admin application ########################################################################### [useradmin] # The name of the default user group that users will be a member of ## default_user_group=default ########################################################################### # Settings for the Sentry lib ########################################################################### [libsentry] # Hostname or IP of server. ## hostname=localhost # Port the sentry service is running on. ## port=8038 # Sentry configuration directory, where sentry-site.xml is located. ## sentry_conf_dir=/etc/sentry/conf
查找差异