question What is the lifecycle of users created with Ambari in AD - removal/(re-)creation? in Support Questions https://community.cloudera.com/t5/Support-Questions/What-is-the-lifecycle-of-users-created-with-Ambari-in-AD/m-p/95714#M59073 Wed, 21 Oct 2015 20:19:46 GMT hkropp 2015-10-21T20:19:46Z What is the lifecycle of users created with Ambari in AD - removal/(re-)creation? https://community.cloudera.com/t5/Support-Questions/What-is-the-lifecycle-of-users-created-with-Ambari-in-AD/m-p/95714#M59073 Wed, 21 Oct 2015 20:19:46 GMT https://community.cloudera.com/t5/Support-Questions/What-is-the-lifecycle-of-users-created-with-Ambari-in-AD/m-p/95714#M59073 hkropp 2015-10-21T20:19:46Z Re: What is the lifecycle of users created with Ambari in AD - removal/(re-)creation? https://community.cloudera.com/t5/Support-Questions/What-is-the-lifecycle-of-users-created-with-Ambari-in-AD/m-p/95715#M59074 <P><STRONG>Creation</STRONG>: Users are created in AD upon initial kerberization, as well as adding services, or hosts to the cluster. A test principal is created during the wizard to test the kerberos client configuration and operations, as well as all of the appropriate principals for the services that are deployed in the cluster. During that process, passwords are generated and set in Active Directory. Those passwords are not permanently stored in Ambari and are only used for keytab generation.</P><P><STRONG>Update</STRONG>: Post-wizard completion, the principal regeneration process will regenerate and set those passwords in AD.</P><P><STRONG>Deletion</STRONG>: During removal of services, or hosts, or disabling kerberos, the appropriate principals are removed from AD.</P> Wed, 21 Oct 2015 21:19:11 GMT https://community.cloudera.com/t5/Support-Questions/What-is-the-lifecycle-of-users-created-with-Ambari-in-AD/m-p/95715#M59074 pcodding 2015-10-21T21:19:11Z Re: What is the lifecycle of users created with Ambari in AD - removal/(re-)creation? https://community.cloudera.com/t5/Support-Questions/What-is-the-lifecycle-of-users-created-with-Ambari-in-AD/m-p/95716#M59075 <P>This is prime RunBook material!</P> Wed, 21 Oct 2015 22:02:38 GMT https://community.cloudera.com/t5/Support-Questions/What-is-the-lifecycle-of-users-created-with-Ambari-in-AD/m-p/95716#M59075 TerryP 2015-10-21T22:02:38Z Re: What is the lifecycle of users created with Ambari in AD - removal/(re-)creation? https://community.cloudera.com/t5/Support-Questions/What-is-the-lifecycle-of-users-created-with-Ambari-in-AD/m-p/95717#M59076 <P>I'll work on getting this and the password creation methods into the docs ASAP.</P> Wed, 21 Oct 2015 22:46:54 GMT https://community.cloudera.com/t5/Support-Questions/What-is-the-lifecycle-of-users-created-with-Ambari-in-AD/m-p/95717#M59076 pcodding 2015-10-21T22:46:54Z