本文旨在对企业级Hadoop 大数据平台安全管理机制进行探究。首先介绍当前企业级Hadoop 大数据集群安全管理方案存在的问题和不足；然后结合当前Hadoop 生态圈安全管理组件的发展现状和第三方安全信息管理解决方案，针对现有的Hadoop 大数据平台安全管理机制的不足进行优化和整合；最后提出了以Ranger+FreeIPA(Kerberos+LDAP)为整体的Hadoop 大数据平台安全管理解决方案。

The purpose of this paper is to explore the security management mechanism of enterprise Hadoop big data platform.First it introduces the existing problems and deficiencies in enterprise Hadoop big data cluster safety management; then combined with the current development status and the third party Hadoop ecosystem safety management module of security information management solutions, it solves the problems of Hadoop big data platform security management mechanism by optimization and integration;finally it puts forward the Ranger+FreeIPA (Kerberos+LDAP) solution.