Support Questions
Find answers, ask questions, and share your expertise

how to use ldap to sync cluster user with Ambari and Ranger ?

Expert Contributor

Hello,

How to configure LDAP to sync users with ambari and Ranger for external authentication.

I am new to LDAP as well as Ranger, please provide me step by step guide through which I can sync user using LDAP.

Thanks.

2 REPLIES 2

Expert Contributor

Hi @heta desai,

Each service needs to be configured to use LDAP Server for login.(doc links below)

Once configured,

* For ambari-server, you need to run the following command periodically to sync up users and groups.

/usr/sbin/ambari-server sync-ldap --ldap-sync-admin-name=admin --ldap-sync-admin-password=admin --all 

* For Ranger, user can login once setup for ldap authentication

For both services, you need to grant respective privileges to user / groups, on what each can do upon login.

Documentation Links:

Ambari Server:

HORTONWORKS DOCS » APACHE AMBARI 2.6.1.5 » APACHE AMBARI ADMINISTRATION > Chapter 3. Managing Users and Groups > Local and LDAP User and Group Types:

  • Configure Ambari to use LDAP Server

https://docs.hortonworks.com/HDPDocuments/Ambari-2.6.1.5/bk_ambari-security/content/configure_ambari...

  • Synchronizing LDAP Users and Groups

https://docs.hortonworks.com/HDPDocuments/Ambari-2.6.1.5/bk_ambari-security/content/synchronizing_ld...

  • Specific Set of Users and Groups

https://docs.hortonworks.com/HDPDocuments/Ambari-2.6.1.5/bk_ambari-security/content/specific_set_of_...

  • Existing Users and Groups

https://docs.hortonworks.com/HDPDocuments/Ambari-2.6.1.5/bk_ambari-security/content/existing_users_a...

  • All Users and Groups

https://docs.hortonworks.com/HDPDocuments/Ambari-2.6.1.5/bk_ambari-security/content/all_users_and_gr...

Ranger:

HORTONWORKS DOCS » DATA PLATFORM 2.6.4 » SECURITY

  • Chapter 2. Authentication Configuring Ranger Authentication with UNIX, LDAP, or AD

https://docs.hortonworks.com/HDPDocuments/HDP2/HDP-2.6.4/bk_security/content/_configuring_ambari_for...

Take a Tour of the Community
Don't have an account?
Your experience may be limited. Sign in to explore more.