Does a Knox user need to be in hdsf?

[#1]

I am still trying to wrap my head around all the different components of hdfs, hadoop, etc. My understanding is that Knox can serve as a proxy user for someone to give him access to a Kerberos secured cluster. Currently I am using Knox synced with LDAP. Does that user need to have a directory in hdfs?

[#2 · Accepted solution]

Hello @Raffi Abberbock ,

If an LDAP user is coming in via Knox, the user need not have a directory in HDFS. Instead, the LDAP user needs to have permision to access the HDFS objects.

Thanks.

[#3]

@Vipin Rathor Thanks for the answer! The authorization to services such as hive and hbase can be done through Ranger?

[#4]

Yes, authorization can be done through Ranger.