dfs.block.access.token.enable true dfs.namenode.name.dir /hadoop/hdfs/namenode dfs.datanode.data.dir /hadoop/hdfs/datanode dfs.namenode.kerberos.principal nn/_HOST@ESRICHINA.COM dfs.namenode.keytab.file /etc/security/keytab/nn.service.keytab dfs.namenode.kerberos.internal.spnego.principal HTTP/_HOST@ESRICHINA.COM dfs.secondary.namenode.kerberos.principal sn/_HOST@ESRICHINA.COM dfs.secondary.namenode.keytab.file /etc/security/keytab/sn.service.keytab dfs.secondary.namenode.kerberos.internal.spnego.principal HTTP/_HOST@ESRICHINA.COM dfs.datanode.kerberos.principal dn/_HOST@ESRICHINA.COM dfs.datanode.keytab.file /etc/security/keytab/dn.service.keytab dfs.datanode.data.dir.perm 700 dfs.datanode.address 0.0.0.0:61004 dfs.datanode.http.address 0.0.0.0:61006 dfs.http.policy HTTPS_ONLY dfs.data.transfer.protection integrity dfs.https.port 50470 dfs.https.address hadoop01.esrichina.com:50470 dfs.webhdfs.enabled true dfs.web.authentication.kerberos.principal HTTP/_HOST@ESRICHINA.COM dfs.web.authentication.kerberos.keytab /etc/security/keytab/spnego.service.keytab dfs.permissions.supergroup hdfs The name of the group of super-users.