Home | About | Sematext search-lucene.com search-hadoop.com
NEW: Monitor These Apps!
elasticsearch, apache solr, apache hbase, hadoop, redis, casssandra, amazon cloudwatch, mysql, memcached, apache kafka, apache zookeeper, apache storm, ubuntu, centOS, red hat, debian, puppet labs, java, senseiDB
 Search Hadoop and all its subprojects:

Switch to Plain View
Hadoop >> mail # user >> kerberos mapreduce question


+
Koert Kuipers 2012-06-07, 13:20
+
Mapred Learn 2012-06-07, 14:46
+
Koert Kuipers 2012-06-07, 14:49
+
slim tebourbi 2012-06-07, 14:57
Copy link to this message
-
Re: kerberos mapreduce question
If you provision your user/group information via LDAP to all your nodes it
is not a nightmare.

On Thu, Jun 7, 2012 at 7:49 AM, Koert Kuipers <[EMAIL PROTECTED]> wrote:

> thanks for your answer.
>
> so at a large place like say yahoo, or facebook, assuming they use
> kerberos, every analyst that uses hive has an account on every node of
> their large cluster? sounds like an admin nightmare to me
>
> On Thu, Jun 7, 2012 at 10:46 AM, Mapred Learn <[EMAIL PROTECTED]
> >wrote:
>
> > Yes, User submitting a job needs to have an account on all the nodes.
> >
> > Sent from my iPhone
> >
> > On Jun 7, 2012, at 6:20 AM, Koert Kuipers <[EMAIL PROTECTED]> wrote:
> >
> > > with kerberos enabled a mapreduce job "runs as" the user that submitted
> > it.
> > > does this mean the user that submitted the job needs to have linux
> > accounts
> > > on all machines on the cluster?
> > >
> > > how does mapreduce do this (run jobs as the user)? do the tasktrackers
> > use
> > > secure impersonation to run-as the user?
> > >
> > > thanks! koert
> >
>

--
Alejandro
NEW: Monitor These Apps!
elasticsearch, apache solr, apache hbase, hadoop, redis, casssandra, amazon cloudwatch, mysql, memcached, apache kafka, apache zookeeper, apache storm, ubuntu, centOS, red hat, debian, puppet labs, java, senseiDB