Adding User in kerberised Cluster

[#1]

How to add user in kerberized cluster?

I have AD integration with kerberos?

Do we need to add user on OS level ? @Shelton

[#2]

@kiranpune Which users are you talking about. CM users or some other user?

[#3]

##- cm as well as some other user-##

[#4]

@kiranpune ,

What is your CM version? Here is the latest documentation on Cloudera website. The step 3, 6 and 7 maybe the answer to your question.

https://docs.cloudera.com/cloudera-manager/7.0.3/security-kerberos-authentication/topics/cm-security...

Thanks,

Li

[#5]

Suppose we added user peter in active directory then do we need to add OS level

[#6]

Hi @kiranpune ,

Based on step 7 below, the answer is yes that you need to add the user in OS level.

https://docs.cloudera.com/cloudera-manager/7.0.3/security-kerberos-authentication/topics/cm-security...

Here:

Make sure all hosts in the cluster have a Linux user account with the same name as the first component of that user's principal name. For example, the Linux account joe should exist on every box if the user's principal name is joe@YOUR-REALM.COM. You can use LDAP for this step if it is available in your organization.

Thanks,

Li

[#7 · Accepted solution]

Best way is to join your nodes using SSSD service it will solve users directory creation problem + group mapping.