This document explains how to secure NiFi with existing Certificate Authorities (CA) certificates (without NiFi LDAP Authentication). The prerequisites for this scenario (issued by the IT department): The final result will include a self-signed external CA (the root), a keystore…
Azure Data Lake Storage Gen2 (ADLS Gen2) delivers a cloud-based data storage solution that is scalable, secure, and characterized by high availability. If you deploy an ODP cluster alongside Azure Data Lake Storage for data processing and analysis, this documentation serves as…
OBF password obfuscation converts plaintext passwords into an obfuscated format to prevent casual exposure in configuration files. This method is supported for components that explicitly state OBF format compatibility. Run the following commands to locate the required Jetty utility JAR…
By default, Ambari uses an internal database as the user store for authentication and authorization. If you want to configure LDAP or Active Directory (AD) external authentication, you must configure Ambari to authenticate external users, configure Ambari to use an…
This guide explains how to secure remote client connections to HiveServer2 by configuring it to use Lightweight Directory Access Protocol for Authentication (LDAP). LDAP is a widely used protocol for directory services and is commonly used for managing user and group…
LDAP support in Trino Gateway is only used to authenticate users who will be logging into Trino Gateway to view information such as which cluster a query was routed to, rules, etc., and is not needed when setting up authentication…
Configure Trino to authenticate directory users, resolve their group memberships, and assign their queries to resource groups. The configuration includes the following files: Replace all placeholders with values appropriate for your environment. Manual configuration: Complete the following steps directly on…
You can use the steps below to configure NGINX as a reverse proxy that protects access to MLflow running on a node with basic authentication (username and password). You’ll be prompted to enter a password. Replace mlflowuser with your preferred…
This guide describes how to configure Apache Knox to authenticate users against Okta using the KnoxSSO service together with the pac4j federation provider. After completing the steps in this guide, users accessing Knox-protected resources are redirected to Okta for authentication and…
The current authentication setup for JupyterHub with YarnSpawner and HDFSCM supports both Dummy Authentication for testing purposes and LDAP for production use, providing flexibility based on the deployment requirements. Choose any one of the following authentication. The Dummy Authentication in…
OAuth/OIDC, sessions, JWTs, SSO patterns, and security considerations.
An article joins this feed when it matches these terms. Each one is also a search of its own.