Support Questions
Find answers, ask questions, and share your expertise

How does assign the NIS user and group to Capacity scheduler's queue?

I am using NIS as authentication source, Does NIS user and group to Capacity scheduler's queue?

9 REPLIES 9

Re: How does assign the NIS user and group to Capacity scheduler's queue?

Mentor

Re: How does assign the NIS user and group to Capacity scheduler's queue?

Mentor

Re: How does assign the NIS user and group to Capacity scheduler's queue?

Mentor

In general, you will control permissions to YARN queues via Ranger policies. Right now you have admin_queue policy And submit_job, in the next ranger release there will be sent policies as well. Right now it falls back to ACL. See this https://community.hortonworks.com/questions/17660/yarn-queues-need-a-recipe-to-have-two-separate-adm...

So to sum up, you need to configure NIS with Ranger and then set up ranger yarn policy for queues

Re: How does assign the NIS user and group to Capacity scheduler's queue?

We are not using the Ranger as a enforcer. since, Its Isilon based HDFS system.

Re: How does assign the NIS user and group to Capacity scheduler's queue?

Mentor

Use the instructions in the community article I posted above. Each queue has submit job and admin queue

Re: How does assign the NIS user and group to Capacity scheduler's queue?

Re: How does assign the NIS user and group to Capacity scheduler's queue?

It's HDP 2.3.4 , Ambari 2.2.0 + OpenLDAP

This is the demo on How to setup queues? https://community.hortonworks.com/content/kbentry/10912/yarn-queues-and-cs-view-queue-mapping.html

Re: How does assign the NIS user and group to Capacity scheduler's queue?

@Neeraj Sabharwal

Thanks, let me check it out.

Re: How does assign the NIS user and group to Capacity scheduler's queue?

@vijayakumar Ramdoss This is the demo on Yarn and Ranger setup

https://community.hortonworks.com/content/kbentry/10797/apache-ranger-and-yarn-setup-security.html

You cannot use Ranger HDFS setup with Isilon but with other components it works

Yarn queue will work too.