ambari-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From 王苹 <suansua...@gmail.com>
Subject Can Ambari run Flume with other user
Date Fri, 04 Nov 2016 11:56:10 GMT
Hi Experts,
I'm using Flume on Ambari and found there's a configurable flume_user
option as Flume run-as user.  When I edit it to one of my local user
"user999" only in users group, it will change my user and make it in hadoop
group.
Flume agent can be ran by any user, why it has such limitation on Ambari to
change the users into hadoop group?

>From log, it changes all users UID even I just use one user user999 to run
Flume. Why it traverses all users?
...
2016-11-04 02:50:22,121 - File['/var/lib/ambari-agent/tmp/changeUid.sh']
{'content': StaticFile('changeToSecureUid.sh'), 'mode': 0555}
2016-11-04 02:50:22,135 - User['hive'] {'gid': 'hadoop', 'uid': '1008',
'groups': ['hadoop']}
2016-11-04 02:50:22,136 - Modifying user hive
2016-11-04 02:50:22,149 - File['/var/lib/ambari-agent/tmp/changeUid.sh']
{'content': StaticFile('changeToSecureUid.sh'), 'mode': 0555}
2016-11-04 02:50:22,164 - User['user999'] {'gid': 'hadoop', 'uid': '1051',
'groups': ['hadoop']}
2016-11-04 02:50:22,165 - *Modifying user user999*
2016-11-04 02:50:23,114 - File['/var/lib/ambari-agent/tmp/changeUid.sh']
{'content': StaticFile('changeToSecureUid.sh'), 'mode': 0555}
2016-11-04 02:50:23,130 - User['zookeeper'] {'gid': 'hadoop', 'uid':
'1001', 'groups': ['hadoop']}
2016-11-04 02:50:23,131 - Modifying user zookeeper
2016-11-04 02:50:23,148 - File['/var/lib/ambari-agent/tmp/changeUid.sh']
{'content': StaticFile('changeToSecureUid.sh'), 'mode': 0555}
2016-11-04 02:50:23,163 - User['ams'] {'gid': 'hadoop', 'uid': '1002',
'groups': ['hadoop']}
2016-11-04 02:50:23,164 - Modifying user ams
2016-11-04 02:50:23,178 - User['ambari-qa'] {'gid': 'hadoop', 'uid': 0,
'groups': ['users']}
2016-11-04 02:50:23,179 - Modifying user ambari-qa
2016-11-04 02:50:23,200 - File['/var/lib/ambari-agent/tmp/changeUid.sh']
{'content': StaticFile('changeToSecureUid.sh'), 'mode': 0555}
2016-11-04 02:50:23,213 - User['hdfs'] {'gid': 'hadoop', 'uid': '1004',
'groups': ['hadoop']}
2016-11-04 02:50:23,214 - Modifying user hdfs
2016-11-04 02:50:23,230 - File['/var/lib/ambari-agent/tmp/changeUid.sh']
{'content': StaticFile('changeToSecureUid.sh'), 'mode': 0555}
2016-11-04 02:50:23,244 - User['sqoop'] {'gid': 'hadoop', 'uid': '1009',
'groups': ['hadoop']}
2016-11-04 02:50:23,245 - Modifying user sqoop
2016-11-04 02:50:23,263 - File['/var/lib/ambari-agent/tmp/changeUid.sh']
{'content': StaticFile('changeToSecureUid.sh'), 'mode': 0555}
2016-11-04 02:50:23,276 - User['yarn'] {'gid': 'hadoop', 'uid': '1005',
'groups': ['hadoop']}
2016-11-04 02:50:23,277 - Modifying user yarn
2016-11-04 02:50:23,291 - File['/var/lib/ambari-agent/tmp/changeUid.sh']
{'content': StaticFile('changeToSecureUid.sh'), 'mode': 0555}
2016-11-04 02:50:23,303 - User['hcat'] {'gid': 'hadoop', 'uid': '1010',
'groups': ['hadoop']}
2016-11-04 02:50:23,303 - Modifying user hcat
2016-11-04 02:50:23,318 - File['/var/lib/ambari-agent/tmp/changeUid.sh']
{'content': StaticFile('changeToSecureUid.sh'), 'mode': 0555}
2016-11-04 02:50:23,330 - User['mapred'] {'gid': 'hadoop', 'uid': '1006',
'groups': ['hadoop']}
2016-11-04 02:50:23,331 - Modifying user mapred
2016-11-04 02:50:23,347 - File['/var/lib/ambari-agent/tmp/changeUid.sh']
{'content': StaticFile('changeToSecureUid.sh'), 'mode': 0555}
...

This blocks me using Flume on Ambari as I want flume agent run-as local
user not in hadoop group.

Can someone share some information on the users management for this? Thanks
a lot for help!

Best Wishes!

Mime
  • Unnamed multipart/alternative (inline, None, 0 bytes)
View raw message