I want to add users and groups but when i connect to ambari settings i could see only this.
Any idea please?
The version is 2.7.4
Many thanks in advance
What sort of users do you want to add local Ambari users? You can add users on the Linux box the only condition is the user id should be more than 1000any user id below that will not be synced in Ambari when the usersync process runs.
To add local users see screenshot and steps below
Create a local user
Every user create in Ambari should have a home in hdfs usually in /users/xxx that can be achieved by CLI as user hdfs
$ hdfs dfs -mkdir /user/xxx
Grant the new user xxx access rights, the group is usually hdfs
$ hdfs dfs -chown xxx:<$group>
Enable user home directory creation
On your Ambari Server host, edit the ambari-properties file.
using a command-line editor
Add the following property: ambari.post.user.creation.hook.enabled=true
Add the script path to the ambari properties file: ambari.post.user.creation.hook=/var/lib/ambari-server/resources/scripts/post-user-creation-hook.sh
In a Kerberized environment, you must modify the kinit file path in the default user creation hook script.
Restart Ambari server.
If you intend to create Linux users to be synced by the Ranger user sync then do that on the host level as root
# useradd test1
Make sure the user id is above 1000, that user will be synced by the user sync process but if you didn't enable the ambari.post.user.creation.hook then you MUST create manually the home in HFDS
Thank you for your answer
Actually, in Ambari , I could not see USers and Groups page .. (Please check the screenshoot)
As I am the administrator of the platform, I use admin/admin
I will have developers who will use the hadoop platform. As the users are in AD , I think that I should integrate Hadoop with AD?
The strange thing that I don't have access to users and groups
What do you think please?
Should developers have access to Ambari?
Thanks and Regards
You are looking at the wrong place, the navigation path to get that option is Ambari UI--->top Right triangle next to Admin give you a drop-down list
Yes you can give read-only or limited privileges access to developers to understand the different roles see the roles can be accessed from the same pane see screenshot
The Cluster User is a read-only role is a good one to give in the first instance because the developer might complain some service is down etc and with this role they can see all the service status etc and only alert you when they are RED down
My bad !
Thank you very much for your answer. Now I can see the sun 🙂
So basically, the access to ambari server is that developers for example may monitor in read only of services are ok.
My question is now that how those developers could access the hadoop for their development?
I can test spark submit by connecting as a root user to one of the spark nodes.
In order to give access to developers to use the hadoop platform for their calculation , what should I configure? /users are in AD
Thank you very much in advance for your help !