Support Questions

Find answers, ask questions, and share your expertise

User impersonation in Zeppelin

avatar
Explorer

Is Zeppelin able to impersonate a user when authentication is used today ?

For instance a user x is authenticated on Zeppelin and run a Spark job. Does Spark see x or Zeppelin ? what about Zeppelin with Livy ?

1 ACCEPTED SOLUTION

avatar
New Contributor

@Bigdata Lover Please take a look here - http://hortonworks.com/apache/zeppelin/#section_3. When you use %spark interpreter, as of now the job runs as Zeppelin. The impersonation works at this point in time, only with the Livy interpreter, %lspark. In this case, the jobs will run as the logged-in user.

View solution in original post

4 REPLIES 4

avatar
Super Guru
@Bigdata Lover

I think impersonation with Livy will work with set of prerequisites, please refer below article published by @vshukla

https://community.hortonworks.com/articles/34424/apache-zeppelin-on-hdp-242.html

Please also refer for general roadmap https://cwiki.apache.org/confluence/display/ZEPPELIN/Zeppelin+Roadmap

avatar
Explorer

Hi @Jitendra Yadav

Thanks for your answer. I have already read these two articles but the situation is not clear.

The first article talks about impersonation in Livy not in Zeppelin. Is Zeppelin able to send the user identity ?

In the second article it's only saying Multi-tenancy and user impersonation are on the roadmap.

I am looking for a an accurate answer.

Thanks

avatar
New Contributor

@Bigdata Lover Please take a look here - http://hortonworks.com/apache/zeppelin/#section_3. When you use %spark interpreter, as of now the job runs as Zeppelin. The impersonation works at this point in time, only with the Livy interpreter, %lspark. In this case, the jobs will run as the logged-in user.

avatar
Explorer

Thanks for confirming that user impersonation works with Livy interpreter %lspark