question Re: Does a Knox user need to be in hdsf? in Archives of Support Questions (Read Only)

Does a Knox user need to be in hdsf?

rabberbo — Fri, 04 Nov 2016 09:01:08 GMT

I am still trying to wrap my head around all the different components of hdfs, hadoop, etc. My understanding is that Knox can serve as a proxy user for someone to give him access to a Kerberos secured cluster. Currently I am using Knox synced with LDAP. Does that user need to have a directory in hdfs?

Re: Does a Knox user need to be in hdsf?

VR46 — Fri, 04 Nov 2016 18:19:43 GMT

Hello @Raffi Abberbock ,

If an LDAP user is coming in via Knox, the user need not have a directory in HDFS. Instead, the LDAP user needs to have permision to access the HDFS objects.

Thanks.

Re: Does a Knox user need to be in hdsf?

rabberbo — Fri, 04 Nov 2016 20:31:31 GMT

@Vipin Rathor Thanks for the answer! The authorization to services such as hive and hbase can be done through Ranger?

Re: Does a Knox user need to be in hdsf?

VR46 — Fri, 04 Nov 2016 20:45:21 GMT

Yes, authorization can be done through Ranger.