question Re: How to use blueprints with pre-created accounts for services in Archives of Support Questions (Read Only)

How to use blueprints with pre-created accounts for services

james_jones — Fri, 19 May 2017 10:28:18 GMT

Is there a way to use blueprints assuming we have pre-created service accounts (created in AD/Centrify), and if so, which I could use some help. I assume that in the blueprints I could add properties something like this:

"spark_user" : "svcspark",

"spark_group" : "svcspark"

Part 1 of this question -- Will that cause Spark to run as svcspark?

Also, related to this, I noticed there are now 3 options (checkboxes) in Ambari 2.5.0.3 which may relate to pre-created accounts. These are found under Misc when adding a service:

Skip group modifications
Have Ambari manage UIDs
Whether to skip creating users and groups in a sysprepped cluster

Part 2 of this question -- Can these be set in blueprints and if so, how?

Our plan is to use blueprints but we need to create all service accounts in AD/Centrify before Ambari or services are installed.

Thanks

Re: How to use blueprints with pre-created accounts for services

pminovic — Fri, 19 May 2017 21:02:44 GMT

Hi @james.jones

The answer is Yes to both your questions.

Regarding Spark user and group, in "spark-env" block of "configurations" you can set exactly what you said:

"spark_user" : "svcspark",
"spark_group" : "svcspark"

and yes, Spark will run as svcspark. Regarding Part 2, those settings can be provided in the "cluster-env" block. Property names and defaults are

"ignore_groupsusers_create" : "false",
"override_uid" : "true",
"sysprep_skip_create_users_and_groups" : "false",

The best way to familiarize with these and other "obscure" properties is to export a blueprint from an existing cluster, and explore cluster-env and other config blocks. HTH.

Re: How to use blueprints with pre-created accounts for services

james_jones — Fri, 19 May 2017 21:06:23 GMT

@Predrag Minovic

Awesome! Thank you.

Re: How to use blueprints with pre-created accounts for services

avinash_panduga — Fri, 18 Aug 2017 05:02:52 GMT

Can someone explain about these settings functionality? especially No.3, what does ambari do when we check them?

Skip group modifications
Have Ambari manage UIDs
Whether to skip creating users and groups in a sysprepped cluster