question Re: User impersonation in Zeppelin in Archives of Support Questions (Read Only)

User impersonation in Zeppelin

dw — Thu, 26 May 2016 22:07:07 GMT

Is Zeppelin able to impersonate a user when authentication is used today ?

For instance a user x is authenticated on Zeppelin and run a Spark job. Does Spark see x or Zeppelin ? what about Zeppelin with Livy ?

Re: User impersonation in Zeppelin

jyadav — Thu, 26 May 2016 23:00:10 GMT

@Bigdata Lover

I think impersonation with Livy will work with set of prerequisites, please refer below article published by @vshukla

https://community.hortonworks.com/articles/34424/apache-zeppelin-on-hdp-242.html

Please also refer for general roadmap https://cwiki.apache.org/confluence/display/ZEPPELIN/Zeppelin+Roadmap

Re: User impersonation in Zeppelin

dw — Thu, 26 May 2016 23:08:54 GMT

Hi @Jitendra Yadav

Thanks for your answer. I have already read these two articles but the situation is not clear.

The first article talks about impersonation in Livy not in Zeppelin. Is Zeppelin able to send the user identity ?

In the second article it's only saying Multi-tenancy and user impersonation are on the roadmap.

I am looking for a an accurate answer.

Thanks

Re: User impersonation in Zeppelin

rchoudhary — Fri, 27 May 2016 01:18:24 GMT

@Bigdata Lover Please take a look here - http://hortonworks.com/apache/zeppelin/#section_3. When you use %spark interpreter, as of now the job runs as Zeppelin. The impersonation works at this point in time, only with the Livy interpreter, %lspark. In this case, the jobs will run as the logged-in user.

Re: User impersonation in Zeppelin

dw — Fri, 27 May 2016 01:35:14 GMT

Thanks for confirming that user impersonation works with Livy interpreter %lspark