Support Questions
Find answers, ask questions, and share your expertise
Announcements
Alert: Welcome to the Unified Cloudera Community. Former HCC members be sure to read and learn how to activate your account here.

amb_ranger_admin/ranger_admin_username user on kerberized cluster

Solved Go to solution

amb_ranger_admin/ranger_admin_username user on kerberized cluster

Explorer

Hi All,

I dont understand what (ranger_admin_username)"amb_ranger_admin" user is for? I enabled kerberos on my cluster and installed ranger. Everything is working very well. I changed "ranger_admin_username" value to some meaningless value but it is still working. So is ranger_admin_username still a relevant property in a kerberos enabled cluster? In the mean time there is no "amb_ranger_admin" in ambari internal users as well. It was not created by ambari or ranger.

1 ACCEPTED SOLUTION

Accepted Solutions

Re: amb_ranger_admin/ranger_admin_username user on kerberized cluster

Main purpose of amb_ranger_admin is for ambari to communicate to ranger to create ranger repositories (when ranger plugins get enabled).

In kerberos enabled clusters, starting from HDP 2.5/Ambari 2.4, service keytabs are used for the above purpose. Hence amb_ranger_admin is applicable only for non kerberos environments. What version of HDP are you using?

4 REPLIES 4

Re: amb_ranger_admin/ranger_admin_username user on kerberized cluster

Main purpose of amb_ranger_admin is for ambari to communicate to ranger to create ranger repositories (when ranger plugins get enabled).

In kerberos enabled clusters, starting from HDP 2.5/Ambari 2.4, service keytabs are used for the above purpose. Hence amb_ranger_admin is applicable only for non kerberos environments. What version of HDP are you using?

Highlighted

Re: amb_ranger_admin/ranger_admin_username user on kerberized cluster

Explorer

Hi @vperiasamy,

Thank you for quick response.

We are using 2.5.3. In the mean time, is this information still correct for ambari enabled plugins:

https://docs.hortonworks.com/HDPDocuments/HDP2/HDP-2.5.3/bk_security/content/hdfs_plugin_kerberos.ht...

What I understand, ambari making this config automatically? Am I correct?

Re: amb_ranger_admin/ranger_admin_username user on kerberized cluster

Starting from HDP 2.5.3, you don't need to setup separate lookup users mentioned in that link (for kerberized environments).

Re: amb_ranger_admin/ranger_admin_username user on kerberized cluster

Explorer

Thank you vperiasamy

Don't have an account?
Coming from Hortonworks? Activate your account here