Support Questions
Find answers, ask questions, and share your expertise

Users and Groups in Ambari HortonWorks

Explorer

manage.PNG

 

 

Hello Community,

 

I want to add users and groups but when i connect to ambari settings i could see only this.

Any idea please?

The version is 2.7.4

 

Many thanks in advance

Asma

4 REPLIES 4

Re: Users and Groups in Ambari HortonWorks

Mentor

@asmarz 

What sort of users do you want to add local Ambari users? You can add users on the Linux box the only condition is the user id should be more than 1000any user id below that will not be synced in Ambari when the usersync process runs.

 

To add local users see screenshot and steps below

User_Group.PNG

 

Create a local user

  • On the Ambari Admin page, browse to Users.
  • Click Create Local User.
  • Enter a unique user name. 
  • Enter a password, and then confirm that password.
  • Click Save.

create_local_user.PNG

 

Every user create in Ambari should have a home in hdfs usually in /users/xxx that can be achieved by CLI as user hdfs

$ hdfs dfs -mkdir /user/xxx

 

Grant the new user xxx  access rights, the group is usually hdfs
$ hdfs dfs -chown  xxx:<$group>

 

Managing local Ambari users

Enable user home directory creation

Steps

On your Ambari Server host, edit the ambari-properties file.
using a command-line editor
vi /etc/ambari-server/conf/ambari.properties
Add the following property: ambari.post.user.creation.hook.enabled=true
Add the script path to the ambari properties file: ambari.post.user.creation.hook=/var/lib/ambari-server/resources/scripts/post-user-creation-hook.sh

 

Important
In a Kerberized environment, you must modify the kinit file path in the default user creation hook script.
/var/lib/ambari-server/resources/scripts/post-user-creation-hook.sh

Restart Ambari server.
ambari-server restart

 

If you intend to create Linux users to be synced by the Ranger user sync then do that on the host level as root

Example

# useradd test1 

Make sure the user id is above 1000, that user will be synced by the user sync process but if you didn't enable the ambari.post.user.creation.hook  then you MUST create manually the home in HFDS

 

 

Re: Users and Groups in Ambari HortonWorks

Explorer

Thank you for your answer

 

Actually, in Ambari , I could not see USers and Groups page .. (Please check the screenshoot)

 

ambari.PNG

 

As I am the administrator of the platform, I use admin/admin

I will have developers who will use the hadoop platform. As the users are in AD , I think that I should integrate Hadoop with AD?

The strange thing that I don't have access to users and groups

What do you think please?

Should developers have access to Ambari?

Thanks and Regards

Asma

Re: Users and Groups in Ambari HortonWorks

Mentor

@asmarz 

 

You are looking at the wrong place, the navigation path to get that option is Ambari UI--->top Right triangle next to Admin give you a drop-down list

Under AdminUnder Admin

 

Ambari UiAmbari Ui

 

Users and GroupsUsers and Groups

 

Yes you can give read-only or limited privileges access to developers to understand the different roles see the roles can be accessed from the same pane see screenshot

 Understanding Ambari cluster roles and access
User.PNG

 

The Cluster User  is a read-only   role is a good one to give in the first instance because the developer might complain some service is down etc and with this role they can see all the service status etc and only alert you when they are RED down

 HTH

 

Re: Users and Groups in Ambari HortonWorks

Explorer

My bad !

Thank you very much for your answer. Now I can see the sun 🙂

So basically, the access to ambari server is that developers for example may monitor in read only of services are ok.

My question is now that how those developers could access the hadoop for their development?

I can test spark submit by connecting as a root user to one of the spark nodes.

In order to give access to developers to use the hadoop platform for their calculation , what should  I configure? /users are in AD

 

Thank you very much in advance for your help !

Asma