LDAP/PAM/Kerberos management

The Lightweight Directory Access Protocol (LDAP) is used for identity management in enterprises. In order to use LDAP-based authentication, we need to use the following flags: setup-ldap (for setting up ldap properties with ambari) and sync-ldap (to perform a synchronization of the data from the ldap server):

Example: ambari-server setup-ldapExample: ambari-server sync-ldap

Pluggable Authentication Module (PAM) is at the core of the authentication and authorization in any UNIX or Linux operating systems. If we want to leverage the PAM-based access for Ambari then we need to run it with the setup-pam option. If we then want to move from LDAP to PAM-based authentication, we need to run it with migrate-ldap-pam

Get Modern Big Data Processing with Hadoop now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.