question Re: Which ambari-server commands MUST be run as root? in Support Questions

Which ambari-server commands MUST be run as root?

TerryP — Thu, 15 Oct 2015 22:57:07 GMT

I am running the Ambari Server in a non-root environment as the ambari user. There are restricted sudo rules in place that limit the commands the ambari user can execute as root. Some of the ambari-server commands, such as adding a JDBC driver, will run as the ambari user. Other commands such as the setup-ldap option require root (sudo is this case) to run. I would rather update the sudo command list at once versus a case-by-case basis.

Re: Which ambari-server commands MUST be run as root?

pcodding — Thu, 15 Oct 2015 23:19:36 GMT

Hey @terry@hortonworks.com, please use the following docs for the Ambari Agent sudo commands, but for flexibility sake I would add sudo rights to your non-root user for 'sudo ambari-server' so that future JAAS setup, or reconfiguration will be covered.

http://docs.hortonworks.com/HDPDocuments/Ambari-2.1.2.0/bk_Ambari_Security_Guide/content/_configuring_ambari_for_non-root.html