1. Documentation
2. 2024.1 (Latest) 2024.0 10.3 10.2 10.1 10.0 9.10 9.9 9.8 9.7 9.6 9.5 9.4 9.3 9.2 9.1 9.0 8.2 8.1 8.0 7.6
3. Legacy
4. Configure
5. Security
6. Radoop Proxy Security

Configuring Radoop Proxy Security

RapidMiner Radoop makes it possible to connect to the Hadoop cluster via the Radoop Proxy service, which can be installed along with RapidMiner Server. This guide explains how to establish secured connections between:

• RapidMiner Studio and Radoop Proxy
• Radoop Proxy and RapidMiner Server.

Creating a secure Radoop Proxy Connection

If you aim to establish an SSL-encrypted Radoop Proxy connection, please take the following steps:

Create SSL connection with a well-known certificate

1. Find and open the proxy configuration file, which is located at radoop-proxy/proxy.properties in the RapidMiner Server installation directory by default.

2. To enable SSL connections, sslEnabled=true property setting is required. Furthermore, you have to define the private key by uncommenting (remove # character) and setting the following lines, like:

   • keystorePath=<keystore_file>
   • keystorePassword=<private_keypass>

3. Create a new Radoop Proxy Connection from RapidMiner Studio or from RapidMiner Server (for the latter option, make sure that Radoop extension is installed on RapidMiner Server).

Provide the location of Radoop Proxy server and RapidMiner Server credentials, and check Use SSL and leave the Keystore file and Keystore password fields empty.

Click Test connection to check whether the Radoop Proxy connection was configured correctly.

Create SSL connection without a well-known certificate

1. Generate the keystores. Run the following commands (for further customization parameters, see Oracle documentation).

    keytool -genkeypair -alias server -keyalg RSA -keypass <private_keypass> -storepass <private_keypass> -keystore server-keystore.jks
       
    keytool -exportcert -alias server -storepass <private_keypass> -file server.cer -keystore server-keystore.jks
       
    keytool -importcert -v -trustcacerts -alias server -file server.cer -keystore client-trust-keystore.jks -keypass <public_keypass> -storepass <public_keypass>
       
    rm server.cer
   

   Note down all passwords, as they will be needed in the following steps.

2. Find and open the proxy configuration file, which is located at radoop-proxy/proxy.properties in the RapidMiner Server installation directory by default.

3. To enable SSL connections, sslEnabled=true property setting is required. Furthermore, you have to define the generated private key of Radoop Proxy by uncommenting (remove # character) and setting the following lines, like:

   • keystorePath=keystore.jks
   • keystorePassword=<private_keypass>

   Use the same password (<private_keypass>) that you provided in Step 1.

4. Create a new Radoop Proxy Connection from RapidMiner Studio or from RapidMiner Server (for the latter option, make sure that Radoop extension is installed on RapidMiner Server).

Provide the location of Radoop Proxy server and RapidMiner Server credentials. Check Use SSL, and fill in the required fields:

• Keystore file: Insert the private keystore file (client-trust-keystore.jks) location here.
• Keystore password: Type in the <public_keypass> used in Step 1.

Click Test connection to check whether the Radoop Proxy connection was configured correctly.

Establishing HTTPS connection between Radoop Proxy and RapidMiner Server

If HTTPS connection is configured for RapidMiner Server with a well-known certificate, you can make Radoop Proxy use the HTTPS port for authentication. To make these changes, open the proxy configuration file (radoop-proxy/proxy.properties in the RapidMiner Server installation directory) and find the two blocks after # authentication by RapidMiner server line. Comment out the first block, and uncomment the second one (add and remove # signs, respectively):

# authentication by RapidMiner server
#serverAuthenticationScheme=http
#serverAuthenticationHost=localhost
#serverAuthenticationPort=8080
#serverAuthenticationUrl=/api/rest/instance

serverAuthenticationScheme=https
serverAuthenticationHost=localhost
serverAuthenticationPort=8443
serverAuthenticationUrl=/api/rest/instance

Make sure that the property values match your RapidMiner Server configuration.