question Re: Adding User in kerberised Cluster in Support Questions

Adding User in kerberised Cluster

kiranpune — Thu, 23 Jan 2020 16:27:10 GMT

How to add user in kerberized cluster?

I have AD integration with kerberos?

Do we need to add user on OS level ? @Shelton

Re: Adding User in kerberised Cluster

GangWar — Thu, 23 Jan 2020 17:34:54 GMT

@kiranpune Which users are you talking about. CM users or some other user?

Re: Adding User in kerberised Cluster

kiranpune — Thu, 23 Jan 2020 18:33:07 GMT

##- cm as well as some other user-##

Re: Adding User in kerberised Cluster

lwang — Thu, 23 Jan 2020 18:51:35 GMT

@kiranpune ,

What is your CM version? Here is the latest documentation on Cloudera website. The step 3, 6 and 7 maybe the answer to your question.

https://docs.cloudera.com/cloudera-manager/7.0.3/security-kerberos-authentication/topics/cm-security-kerberos-enabling-step6-user-principals.html

Thanks,

Re: Adding User in kerberised Cluster

kiranpune — Fri, 24 Jan 2020 05:26:42 GMT

Suppose we added user peter in active directory then do we need to add OS level

Re: Adding User in kerberised Cluster

lwang — Mon, 27 Jan 2020 19:42:50 GMT

Hi @kiranpune ,

Based on step 7 below, the answer is yes that you need to add the user in OS level.

https://docs.cloudera.com/cloudera-manager/7.0.3/security-kerberos-authentication/topics/cm-security-kerberos-enabling-step7-prepare-cluster.html

Here:

Make sure all hosts in the cluster have a Linux user account with the same name as the first component of that user's principal name. For example, the Linux account joe should exist on every box if the user's principal name is joe@YOUR-REALM.COM. You can use LDAP for this step if it is available in your organization.

Thanks,

Re: Adding User in kerberised Cluster

goga — Tue, 28 Jan 2020 11:39:22 GMT

Best way is to join your nodes using SSSD service it will solve users directory creation problem + group mapping.