Support Questions
Find answers, ask questions, and share your expertise
Announcements
Alert: Welcome to the Unified Cloudera Community. Former HCC members be sure to read and learn how to activate your account here.

How to create a application user/group across the cluster

How to create a application user/group across the cluster

New Contributor

Hi,

I am trying to create a application user/group for ingesting data, or application user can run a job how this can be handle and how this user can reflect too all nodes at one shot! can i use ansible for this so it can be reflect to all nodes? or any other way we have solution for this?

7 REPLIES 7

Re: How to create a application user/group across the cluster

Hi Naveen, you have the option to add local users/group or sync with LDAP: See http://docs.hortonworks.com/HDPDocuments/Ambari-2.2.1.0/bk_Ambari_Admin_Guide/content/_local_and_lda...

Re: How to create a application user/group across the cluster

Super Guru
@Naveen R

You can create users in LDAP and use them across machines or create users on each machine. If security is enabled, which I guess it is, then Kerberos principals need to be created and will be mapped to unix users using hadoop.security.auth_to_local property. Kerberos principals have a FQDN components sothey will be separate for each node.

I am not sure how ansible can help with this requirement. The easiest way to automate this is to use Ambari.

Highlighted

Re: How to create a application user/group across the cluster

New Contributor

thanks for you response,

let's say i have a application user for application purpose ex: twitteruser how this user need to be created across all nodes? we don't want to create a user with there own name if that user left again we need to rewite the code for deployment

i already set up user in ldap so those can use in ambari access level only

Re: How to create a application user/group across the cluster

New Contributor

@ ward bekker @ mqureshi

Re: How to create a application user/group across the cluster

Super Guru

just connect your nodes to LDAP. That's it. @Ward Bekker has shared the instructions.

Re: How to create a application user/group across the cluster

New Contributor

is user " twitteruser" is created and how the passwords can manage on it?

Re: How to create a application user/group across the cluster

Super Guru

It's all going to be through LDAP. Otherwise create a twitteruser on all nodes (with same password) - not recommended.

Don't have an account?
Coming from Hortonworks? Activate your account here