HDFS Forum

ldap for ambari setup

  • #21296
    Jason Morse
    Participant

    I do not see an Ambari section so I am posting this in here. I set the ldap settings in the ambari.properties file and still cannot authenticate using ldap. Do I need to change any of the default settings that are in the properties file or just add the given entries at the bottom (which is what I did)? I took the settings for authentication.ldap.base & authentication.ldap.managerDn from one of our working websphere servers that currently authenticates with ldap so I know those are correct. Just wondering if you have any suggestions for common problems.

to create new topics or reply. | New User Registration

  • Author
    Replies
  • #21357
    Robert
    Participant

    Hi Jason,
    Does the /var/log/ambari-server/ambari-server.log show any messages?

    Regards,
    Robert

    #21359
    Jason Morse
    Participant

    Yes it does messages below. I’m not sure why it says search base is not set. I did set that property. Thanks for your help!

    22:46:50,831 INFO AmbariLocalUserDetailsService:62 – Loading user by name: myusername
    22:46:50,833 INFO AmbariLocalUserDetailsService:67 – user not found
    22:46:50,833 INFO AmbariLdapAuthenticationProvider:129 – Reloading properties
    22:46:50,834 INFO AmbariLdapAuthenticationProvider:79 – LDAP Properties changed – rebuilding Context
    22:46:50,834 INFO DefaultSpringSecurityContextSource:57 – URL ‘ldap://ldap.server.com:389/dc=ambari,dc=apache,dc=org’, root DN is ‘dc=ambari,dc=apache,dc=org’
    22:46:50,835 INFO FilterBasedLdapUserSearch:89 – SearchBase not set. Searches will be performed from the root: dc=ambari,dc=apache,dc=org
    22:46:50,842 INFO SpringSecurityLdapTemplate:235 – Ignoring PartialResultException

    #21360
    Jason Morse
    Participant

    the base is set like below.

    authentication.ldap.base=OU=myou,DC=mydc,DC=mydc,DC=mydc

    #21394
    tedr
    Moderator

    Hi Jason,

    Should not the property have been authentication.ldap.baseDn, instead of authentication.ldap.base?

    Thanks,
    Ted.

    #21452
    Jason Morse
    Participant

    oops…it works now thanks a lot for your help!

    #21456
    tedr
    Moderator

    Hi Jason,

    Thanks for letting us know.

    Ted.

The topic ‘ldap for ambari setup’ is closed to new replies.

Support from the Experts

A HDP Support Subscription connects you experts with deep experience running Apache Hadoop in production, at-scale on the most demanding workloads.

Enterprise Support »

Become HDP Certified

Real world training designed by the core architects of Hadoop. Scenario-based training courses are available in-classroom or online from anywhere in the world

Training »

Hortonworks Data Platform
The Hortonworks Data Platform is a 100% open source distribution of Apache Hadoop that is truly enterprise grade having been built, tested and hardened with enterprise rigor.
Get started with Sandbox
Hortonworks Sandbox is a self-contained virtual machine with Apache Hadoop pre-configured alongside a set of hands-on, step-by-step Hadoop tutorials.
Modern Data Architecture
Tackle the challenges of big data. Hadoop integrates with existing EDW, RDBMS and MPP systems to deliver lower cost, higher capacity infrastructure.