Acceldata
ODP

Configure Security

Enabling Authentication

Each Livy instance can have independent security settings:

Kerberos Authentication

# /etc/livy3_3_3_3/conf/livy.conf
livy.server.auth.type = kerberos
livy.server.auth.kerberos.principal = livy/_HOST@REALM
livy.server.auth.kerberos.keytab = /etc/security/keytabs/livy.service.keytab
livy.server.launch.kerberos.principal = livy@REALM
livy.server.launch.kerberos.keytab = /etc/security/keytabs/livy.service.keytab

SSL/TLS Configuration

# Enable SSL
livy.keystore = /path/to/keystore.jks
livy.keystore.password = changeit
livy.key-password = changeit

Access Control

# Restrict access by user
livy.server.access-control.enabled = true
livy.server.access-control.users = user1,user2,user3
# Admin users
livy.superusers = admin1,admin2