Support Questions
Find answers, ask questions, and share your expertise
Announcements
Alert: Welcome to the Unified Cloudera Community. Former HCC members be sure to read and learn how to activate your account here.

How does assign the NIS user and group to Capacity scheduler's queue?

Highlighted

How does assign the NIS user and group to Capacity scheduler's queue?

New Contributor

I am using NIS as authentication source, Does NIS user and group to Capacity scheduler's queue?

9 REPLIES 9

Re: How does assign the NIS user and group to Capacity scheduler's queue?

Mentor

Re: How does assign the NIS user and group to Capacity scheduler's queue?

Mentor

Re: How does assign the NIS user and group to Capacity scheduler's queue?

Mentor

In general, you will control permissions to YARN queues via Ranger policies. Right now you have admin_queue policy And submit_job, in the next ranger release there will be sent policies as well. Right now it falls back to ACL. See this https://community.hortonworks.com/questions/17660/yarn-queues-need-a-recipe-to-have-two-separate-adm...

So to sum up, you need to configure NIS with Ranger and then set up ranger yarn policy for queues

Re: How does assign the NIS user and group to Capacity scheduler's queue?

New Contributor

We are not using the Ranger as a enforcer. since, Its Isilon based HDFS system.

Re: How does assign the NIS user and group to Capacity scheduler's queue?

Mentor

Use the instructions in the community article I posted above. Each queue has submit job and admin queue

Re: How does assign the NIS user and group to Capacity scheduler's queue?

Re: How does assign the NIS user and group to Capacity scheduler's queue?

It's HDP 2.3.4 , Ambari 2.2.0 + OpenLDAP

This is the demo on How to setup queues? https://community.hortonworks.com/content/kbentry/10912/yarn-queues-and-cs-view-queue-mapping.html

Re: How does assign the NIS user and group to Capacity scheduler's queue?

New Contributor
@Neeraj Sabharwal

Thanks, let me check it out.

Re: How does assign the NIS user and group to Capacity scheduler's queue?

@vijayakumar Ramdoss This is the demo on Yarn and Ranger setup

https://community.hortonworks.com/content/kbentry/10797/apache-ranger-and-yarn-setup-security.html

You cannot use Ranger HDFS setup with Isilon but with other components it works

Yarn queue will work too.