Support Questions
Find answers, ask questions, and share your expertise
Announcements
Alert: Welcome to the Unified Cloudera Community. Former HCC members be sure to read and learn how to activate your account here.

Can I disable the default Ambari and Ranger admin user accounts?

Solved Go to solution
Highlighted

Can I disable the default Ambari and Ranger admin user accounts?

I would like to disable the default Ranger and Ambari admin accounts after I have integrated with LDAP and assigned AD users to be admins. Is this possible? The UI does not seem to allow me disable these accounts even if there are other admins identified.

1 ACCEPTED SOLUTION

Accepted Solutions
Highlighted

Re: Can I disable the default Ambari and Ranger admin user accounts?

To disable admin user in Ranger, Gautham had shared the below steps:

  1. Log in to Ranger Admin using admin/admin
  2. Go to “Settings” -> “Users/Groups”
    1. Select one of the external user synced using LDAP( E.g : ldap_admin )
    2. Change its role to ADMIN
    3. Click Save
  3. Log out of Ranger Admin
  4. Log in to Ranger Admin using the external user (ldap_admin)
  5. Go to “Settings” -> “Users/Groups”
    1. Click on the checkbox next to admin user
    2. Select "Set Status” -> “Disabled” from the top right.
  6. Log out of Ranger Admin

After this point the default admin user will not be able to login and the new admin will be ldap_admin.

Important Note : You will have to change the following Ambari properties to take note of new admin user

  • “Ranger” -> “Configs” -> “Advanced ranger-env”
    • admin_username ( This should be the external user that you designated as admin in 2.1 above )
    • admin_password ( The password of above user )

View solution in original post

2 REPLIES 2
Highlighted

Re: Can I disable the default Ambari and Ranger admin user accounts?

The Ambari admin account can be disabled, and if you really like, deleted from the manage ambari users area of the Ambari gui. Of course, you cannot disable it if logged in as admin, you need to log in with another admin account to do it.

Highlighted

Re: Can I disable the default Ambari and Ranger admin user accounts?

To disable admin user in Ranger, Gautham had shared the below steps:

  1. Log in to Ranger Admin using admin/admin
  2. Go to “Settings” -> “Users/Groups”
    1. Select one of the external user synced using LDAP( E.g : ldap_admin )
    2. Change its role to ADMIN
    3. Click Save
  3. Log out of Ranger Admin
  4. Log in to Ranger Admin using the external user (ldap_admin)
  5. Go to “Settings” -> “Users/Groups”
    1. Click on the checkbox next to admin user
    2. Select "Set Status” -> “Disabled” from the top right.
  6. Log out of Ranger Admin

After this point the default admin user will not be able to login and the new admin will be ldap_admin.

Important Note : You will have to change the following Ambari properties to take note of new admin user

  • “Ranger” -> “Configs” -> “Advanced ranger-env”
    • admin_username ( This should be the external user that you designated as admin in 2.1 above )
    • admin_password ( The password of above user )

View solution in original post

Don't have an account?
Coming from Hortonworks? Activate your account here