https://community.cloudera.com/t5/Archives-of-Support-Questions/How-can-I-prevent-end-users-from-using-Hadoop-service/m-p/129157#M18310 <P><A rel="user" href="https://community.cloudera.com/users/336/nshawa.html" nodeid="336">@Ned Shawa</A> Please see this <A href="http://docs.hortonworks.com/HDPDocuments/Ambari-2.1.2.0/bk_Ambari_Security_Guide/content/_optional_set_up_kerberos_for_ambari_server.html">http://docs.hortonworks.com/HDPDocuments/Ambari-2.1.2.0/bk_Ambari_Security_Guide/content/_optional_set_up_kerberos_for_ambari_server.html</A></P><P>Also, Keep users in edge node only. No access to Master and worker nodes</P><P>You can leverage knox for the same purpose.</P><P>Once kerberos is in place then only authenticated users will be able to access the environment.</P><P>Restricted access to keytabs. </P> Sun, 07 Feb 2016 08:17:55 GMT nsabharwal 2016-02-07T08:17:55Z https://community.cloudera.com/t5/Archives-of-Support-Questions/How-can-I-prevent-end-users-from-using-Hadoop-service/m-p/129154#M18307 Fri, 16 Sep 2022 10:02:48 GMT https://community.cloudera.com/t5/Archives-of-Support-Questions/How-can-I-prevent-end-users-from-using-Hadoop-service/m-p/129154#M18307 nshawa 2022-09-16T10:02:48Z https://community.cloudera.com/t5/Archives-of-Support-Questions/How-can-I-prevent-end-users-from-using-Hadoop-service/m-p/129155#M18308 <P><A rel="user" href="https://community.cloudera.com/users/336/nshawa.html" nodeid="336">@Ned Shawa</A></P><P>Kerberos the envriroment and ambari server </P> Sun, 07 Feb 2016 08:13:25 GMT https://community.cloudera.com/t5/Archives-of-Support-Questions/How-can-I-prevent-end-users-from-using-Hadoop-service/m-p/129155#M18308 nsabharwal 2016-02-07T08:13:25Z https://community.cloudera.com/t5/Archives-of-Support-Questions/How-can-I-prevent-end-users-from-using-Hadoop-service/m-p/129156#M18309 <P>need more elaboration on this, How will kerberos solve the problem?</P> Sun, 07 Feb 2016 08:15:03 GMT https://community.cloudera.com/t5/Archives-of-Support-Questions/How-can-I-prevent-end-users-from-using-Hadoop-service/m-p/129156#M18309 nshawa 2016-02-07T08:15:03Z https://community.cloudera.com/t5/Archives-of-Support-Questions/How-can-I-prevent-end-users-from-using-Hadoop-service/m-p/129157#M18310 <P><A rel="user" href="https://community.cloudera.com/users/336/nshawa.html" nodeid="336">@Ned Shawa</A> Please see this <A href="http://docs.hortonworks.com/HDPDocuments/Ambari-2.1.2.0/bk_Ambari_Security_Guide/content/_optional_set_up_kerberos_for_ambari_server.html">http://docs.hortonworks.com/HDPDocuments/Ambari-2.1.2.0/bk_Ambari_Security_Guide/content/_optional_set_up_kerberos_for_ambari_server.html</A></P><P>Also, Keep users in edge node only. No access to Master and worker nodes</P><P>You can leverage knox for the same purpose.</P><P>Once kerberos is in place then only authenticated users will be able to access the environment.</P><P>Restricted access to keytabs. </P> Sun, 07 Feb 2016 08:17:55 GMT https://community.cloudera.com/t5/Archives-of-Support-Questions/How-can-I-prevent-end-users-from-using-Hadoop-service/m-p/129157#M18310 nsabharwal 2016-02-07T08:17:55Z https://community.cloudera.com/t5/Archives-of-Support-Questions/How-can-I-prevent-end-users-from-using-Hadoop-service/m-p/129158#M18311 <P><A rel="user" href="https://community.cloudera.com/users/336/nshawa.html" nodeid="336">@Ned Shawa</A> See this <A target="_blank" href="http://www.slideshare.net/oom65/hadoop-security-architecture">slideshare</A></P> Sun, 07 Feb 2016 08:20:37 GMT https://community.cloudera.com/t5/Archives-of-Support-Questions/How-can-I-prevent-end-users-from-using-Hadoop-service/m-p/129158#M18311 nsabharwal 2016-02-07T08:20:37Z