MapR 5.2 is at End of Life (EOL) and no longer supported. Please see the latest documentation. This documentation is not being updated.

Home
5.2 Cluster Administration
This section contains information on administering the cluster and MapR-DB, configuring Gateways, and configuring and managing particular aspects of the MapR security infrastructure.
Configuring Security
Describes tasks for configuring MapR security, managing secure clusters, and administering auditing.
Configuring Mapr Security
Provides usage information for frequently used security functionality including Access Control Lists (ACLs), Access Control Expressions (ACEs), file permissions, and subnet whitelisting.
Authenticating Users
Provides information about MapR ticket, Kerberos, Pluggable Authentication Module (PAM) authentication.
Configuring PAM
Describes how PAM works with MapR.
Creating a Custom PAM Profile
Describes how to manually ensure a MapR-unique PAM.

MapR 5.2 Documentation

5.2 Cluster Administration
This section contains information on administering the cluster and MapR-DB, configuring Gateways, and configuring and managing particular aspects of the MapR security infrastructure.
- Administering the Cluster
  This section describes how to manage the nodes and services that make up a cluster.
- Monitoring the Cluster
  This section describes how to monitor the health and performance of a MapR cluster.
- Configuring and Managing MapR Gateways
  A MapR gateway mediates one-way communication between a source MapR cluster and a destination cluster. MapR-DB tables and MapR Streams streams can be replicated.
- Administering MapR-DB
  Administration of the MapR-DB is done primarily via the commmand line (maprcli) or with the MapR Control System (MCS). Regardless of whether the MapR-DB table is used for binary files or JSON documents, the same types of commands are used with slightly different parameter options. MapR-DB administration is associated with tables, columns and column families, and table regions.
- Configuring Security
  Describes tasks for configuring MapR security, managing secure clusters, and administering auditing.
  - Configuring Mapr Security
    Provides usage information for frequently used security functionality including Access Control Lists (ACLs), Access Control Expressions (ACEs), file permissions, and subnet whitelisting.
    - Getting Started with MapR Security
      Describes two core scenarios that allow quick implementation of security features.
    - Managing Encryption for MapR Core
      Provides information that allows you to use encryption across the MapR platform.
    - Authenticating Users
      Provides information about MapR ticket, Kerberos, Pluggable Authentication Module (PAM) authentication.
      - Tickets
        Introduces authenticate using tickets for users and MapR servers.
      - Configuring Kerberos
        Describes how Kerberos works with MapR tickets.
      - Configuring PAM
        Describes how PAM works with MapR.
        Configuring PAM for REST API
        Describes how to configure the JPAM login for REST API.
        Configuring PAM to use LDAP
        Describes the verifications and installation steps needed to configure PAM to use LDAP.
        Configuring PAM to use Kerberos
        Describes how to install the packages and configure the Kerberos client to use PAM.
        Creating a Custom PAM Profile
        Describes how to manually ensure a MapR-unique PAM.
    - Managing Access Controls
      Describes how to create, enable, and use ACLs and ACEs.
    - Managing Impersonation
      Provides instructions for enabling and using MapR impersonation features.
  - Managing Secure Clusters
    Provides procedures that will enable you to run use MapR clusters securely.
  - Managing Auditing
    Provides instructions for using MapR auditing features.
- Administrator's Reference
  This section contains in-depth reference information for the administrator.
- Glossary
  This section contains defintions for commonly used terms in MapR Converged Data Platform environments.

Creating a Custom PAM Profile

Describes how to manually ensure a MapR-unique PAM.

If you wish to ensure that MapR uses a MapR-unique PAM configuration, you can:

Leave the /etc/pam.d/sudo file as is - MapR strongly recommends against manually editing the /etc/pam.d/sudo file.
Create your own PAM profile in /etc/pam.d, naming it mapr-admin.
Manually edit mapr.login.conf and other ecosystem component configuration files to use mapr-admin only.

Example /etc/pam.d/mapr-admin File

Below are some simple examples of what might work in the PAM profile by editing mapr-admin or a different PAM profile.

NOTE: Be sure to consult with your Linux administrator before modifying PAM profiles.

account     required      pam_unix.so
account     sufficient    pam_succeed_if.so uid < 1000 quiet
#Uncomment the following line if ldap is used for user authentication.
#account     [default=bad success=ok user_unknown=ignore] pam_ldap.so
account     required      pam_permit.so
 
auth    sufficient      pam_unix.so nullok_secure 
auth    requisite       pam_succeed_if.so uid >= 1000 quiet
auth    sufficient      pam_ldap.so use_first_pass
auth    required        pam_deny.so
 
password    sufficient    pam_unix.so md5 obscure min=4 max=8 nullok try_first_pass
password    sufficient    pam_ldap.so
password    required      pam_deny.so
 
session     required      pam_limits.so
session     required      pam_unix.so
session     optional      pam_ldap.so

NOTE:

The file /etc/pam.d/sudo should be modified only with care and only when absolutely necessary.