Proxy User Authentication

Applicable to MRS 3.3.0 and later versions.

You can use Ranger to authenticate a specified proxy user in HetuEngine for FusionInsight Manager user authentication. When you use the HetuEngine client, you can set --session-user to specify a proxy user.

For details about how to create an authentication user or proxy user, see Creating a HetuEngine User.

You need to enable Ranger authentication and grant the proxy user the permissions to manage the databases, tables, and columns of the data source. For details, see Adding a Ranger Access Permission Policy for HetuEngine.

Kerberos authentication is enabled for the cluster (the cluster is in security mode)
1. Use kinit to specify a user to be authenticated, for example, hetuadmin1. (The user must be a HetuEngine administrator and added to the supergroup user group to authenticate other users.)
  kinit hetuadmin1
  
  Enter the password as prompted and change the password upon your first login.
2. Use --session-user to specify a proxy user, for example, user1.
  hetu-cli --session-user user1

Kerberos authentication is disabled for the cluster (the cluster is in normal mode)
Use --user to specify a user to be authenticated, for example, user (must belong to the hetuuser user group). Use --session-user to specify a proxy user, for example, user1.

hetu-cli --user user --session-user user1