Created 03-28-2019 05:51 PM
Hello,
If you have 4 environments such as DEV, QA, PREPROD and PROD, for the authentication would you keep separate ADs or would you keep same?
Created 03-29-2019 05:19 AM
Hi @Anpan
It is better to have one AD for each environment.
You can control each user with setting up a different principal's like hdfs principal for DEV users and separate for PROD users.
You can easy maintained different OU and Groups for each Environment as per requirement in your organisation.
It is also recommended to have only one AD server for each environment. This will be cost effective and easy to manage OU , Groups and Princiapls etc..
Thanks,
Owez
Created 03-29-2019 05:36 AM
@Anpan K It depends your environment. You can use a single AD with different Ou's created for different environment . Only thing you need to make sure is all the environments should be on same network if not so some natting would be require but still acheivable.
.
Created 03-29-2019 12:28 PM
The reason I would like to keep AD for each environment is that mainly security. Why would we need to have same AD for Dev and PROD?
What are the advantages and disadvantages of having same AD for all the environment?
I would agree with Owez to keep separate AD.
Created 03-29-2019 12:29 PM
The reason I would like to keep AD for each environment is that mainly security. Why would we need to have same AD for Dev and PROD?
What are the advantages and disadvantages of having same AD for all the environment?
I would agree with Owez to keep separate AD.