Configuring HDP Security with Active Directory/IPA

[#1]

There have been a number of questions recently on using AD/IPA with HDP 2.3 security:

1. How to setup Active Directory/IPA?
2. How to setup cluster OS to recognize users from AD using SSSD?
3. How to enable kerberos for authentication?
4. How to install Ranger for authorization/audit and setup plugins for HDFS, Hive, HBase, Kafka, Storm, Yarn, Knox and test these components on kerborized cluster?
5. How to sync Ranger user/group sync with AD/IPA?
6. How to integrate Knox with AD/IPA?
7. How to setup encryption at rest with Ranger KMS?

To help answer some of these questions, the partner team have prepared cheatsheets on security workshops. These are living materials with sample code snippets which are being updated/enhanced per the feedback from the field so rather than replicate the materials here, the latest materials can be referenced at the GitHub repo linked from here:

https://community.hortonworks.com/repos/4465/workshops-on-how-to-setup-security-on-hadoop-using.html

To help get started with security, we have also made available secured sandbox and LDAP VMs after running through above steps.

Note that these are unofficial and for the final word on security with HDP, the official docs should be referenced at: http://docs.hortonworks.com. For example:

• http://docs.hortonworks.com/HDPDocuments/Ambari-2.1.1.0/bk_Ambari_Security_Guide/content/ch_amb_sec_...
• http://docs.hortonworks.com/HDPDocuments/HDP2/HDP-2.3.2/bk_Ranger_Install_Guide/content/ch_overview_...
• http://docs.hortonworks.com/HDPDocuments/HDP2/HDP-2.3.2/bk_Ranger_KMS_Admin_Guide/content/ch_ranger_...

For help with the workshop materials please use GitHub issues:

https://github.com/abajwa-hw/security-workshops/issues