Support Questions
Find answers, ask questions, and share your expertise
Announcements
Alert: Welcome to the Unified Cloudera Community. Former HCC members be sure to read and learn how to activate your account here.

Cloudbreak - Change owner of Cluster to LDAP group/users

Cloudbreak - Change owner of Cluster to LDAP group/users

New Contributor

Hi,

I have configured Cloudbreak with LDAP user authentication and group Authorization. When i log in to Cloudbreak UI using one of the LDAP users, i'm not able to view any of the available cluster, credentials which i can access using only the default user configured during the initial cloudbreak configuration. Could anyone help me how i can change the ownership of the cluster, credentials to a LDAP group/list of users.

Any help would be much appreciated.

Thanks,

Cibi

4 REPLIES 4

Re: Cloudbreak - Change owner of Cluster to LDAP group/users

Expert Contributor

Hi @Cibi Chakaravarthi,

Which CB version do you use?

Highlighted

Re: Cloudbreak - Change owner of Cluster to LDAP group/users

New Contributor

Hi @mmolnar,

CB Version is 2.7.0.

Re: Cloudbreak - Change owner of Cluster to LDAP group/users

Expert Contributor

Hi @Cibi Chakaravarthi

This is not working by default on CB 2.7, because we don't group users by account in this version.

we identified 2 possible solution:
1) Wait for 2.8 TP (coming pretty soon) or more preferably for 2.9 GA to have this feature
2) This involves some workaround as we don't really support this feature. Workaround includes the following:

  • editing uaa-changes.yml with account settings
  • restart CB
  • delete then add LDAP mapping again using cbd
  • running some SQL in CB DB to change ownership of current resources to this account instead of user (or start from a clean Cloudbreak installation)
  • clusters must be started from CB CLI as the UI doesn't support creating clusters for an account (cluster created vi UI would be only visible for the user who created it)

Re: Cloudbreak - Change owner of Cluster to LDAP group/users

New Contributor

Hi @mmolnar,

Thanks for the workaround. Me too thought of editing the ownership of the cluster in CB DB to a LDAP user, but i wanted to know whether i can provide access to the cluster resources in cloudbreak for all users within an LDAP group. If there is no possible workaround for this feature, will wait for future releases to bring out this feature. Thanks again!