Return-Path: X-Original-To: apmail-ambari-user-archive@www.apache.org Delivered-To: apmail-ambari-user-archive@www.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id 5318E11EFA for ; Sat, 29 Mar 2014 00:21:47 +0000 (UTC) Received: (qmail 57584 invoked by uid 500); 29 Mar 2014 00:21:46 -0000 Delivered-To: apmail-ambari-user-archive@ambari.apache.org Received: (qmail 57506 invoked by uid 500); 29 Mar 2014 00:21:46 -0000 Mailing-List: contact user-help@ambari.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: user@ambari.apache.org Delivered-To: mailing list user@ambari.apache.org Received: (qmail 57497 invoked by uid 99); 29 Mar 2014 00:21:46 -0000 Received: from nike.apache.org (HELO nike.apache.org) (192.87.106.230) by apache.org (qpsmtpd/0.29) with ESMTP; Sat, 29 Mar 2014 00:21:46 +0000 X-ASF-Spam-Status: No, hits=-0.7 required=5.0 tests=RCVD_IN_DNSWL_LOW,SPF_PASS X-Spam-Check-By: apache.org Received-SPF: pass (nike.apache.org: domain of yusaku@hortonworks.com designates 209.85.215.53 as permitted sender) Received: from [209.85.215.53] (HELO mail-la0-f53.google.com) (209.85.215.53) by apache.org (qpsmtpd/0.29) with ESMTP; Sat, 29 Mar 2014 00:21:40 +0000 Received: by mail-la0-f53.google.com with SMTP id b8so4290963lan.12 for ; Fri, 28 Mar 2014 17:21:19 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:date :message-id:subject:from:to:content-type; bh=E8qREFvcz+ZJXyrQ3Dkd2jAbiVtiUnxlqD+R4xwXAqA=; b=GgvmlSNwk9gNH4s54tvjWLquidl0zcHwfp9TPCf+k6AhbTIcSxv6ncDCOrf5AHlWkZ DeE6mcGqQ+pNUVhXWgbh4ey4FxmPrCq6wSSeCGwUU3n4jkQbO+KQ+K68B0ZgLY63CMTA OsToWHEz4R6ZREFzm1hGSz7qzl38uW8jQmNR9ZZaCE5xXnmdQhkFLXEkYQo3PmWW8c4q fOylgX3KbNIixhm9YOYyGOp9y+2EEm6KIPvY1dQ17Nk0J7009BbjEGJ1H4VyLnyxoofH 92YMIcguiLWETRQmG13CfXrnUnY2v4IHfTnjB0mnfN8vvMqijxChmY35klS9LUbnej+x Hg1A== X-Gm-Message-State: ALoCoQkc4jB0/vVacTOTabZ2bLILNw4SkHsVdbp0AHcNcbwLx4eFBeH6nj5rVdehOo4VCa/clhQVoTF0h68d8BI8LKXsfWOQgyFkOyO6dSZe7pmoxWDl4Hg= MIME-Version: 1.0 X-Received: by 10.152.190.135 with SMTP id gq7mr7688716lac.28.1396052479361; Fri, 28 Mar 2014 17:21:19 -0700 (PDT) Received: by 10.112.47.40 with HTTP; Fri, 28 Mar 2014 17:21:19 -0700 (PDT) In-Reply-To: References: Date: Fri, 28 Mar 2014 17:21:19 -0700 Message-ID: Subject: Re: install by user not root privilege From: Yusaku Sako To: user@ambari.apache.org Content-Type: text/plain; charset=US-ASCII X-Virus-Checked: Checked by ClamAV on apache.org No, you cannot use local linux account for provisioning if they are not "root". Currently, ambari-server needs to run as a non-root user, but ambari-agent has to run as root. This is because it needs root privileges to perform software installs via yum/zypper, directory creation, owner/permission modifications, etc. However, there's a JIRA open to allow non-root, sudo users to run the agents [1] [1] https://issues.apache.org/jira/browse/AMBARI-1596 Yusaku On Sat, Mar 22, 2014 at 6:36 PM, Anfernee Xu wrote: > Since my target machines are strictly controlled by my IT, all Linux local > account does not have root privilege, so they cannot run "sudo ...." > command. As a workaround, I can use my domain account to perform Ambari > installation(sever and agent), but my question is can I use local linux > account for provisioning(install Hadoop, HDFS Yarn)? > > -- > --Anfernee -- CONFIDENTIALITY NOTICE NOTICE: This message is intended for the use of the individual or entity to which it is addressed and may contain information that is confidential, privileged and exempt from disclosure under applicable law. If the reader of this message is not the intended recipient, you are hereby notified that any printing, copying, dissemination, distribution, disclosure or forwarding of this communication is strictly prohibited. If you have received this communication in error, please contact the sender immediately and delete it from your system. Thank You.