After LDAP authentication is enabled for a service, you must provide your LDAP username and password when you access the service. This improves the security of the service. You can enable LDAP authentication for a service in the EMR console by performing simple operations. This frees you from the complex configuration of LDAP authentication.

Prerequisites

A Hadoop cluster is created in EMR V3.34.0 or later V3.X.X, or in EMR V4.8.0 or later V4.X.X. For more information, see Create a cluster.

Enable LDAP authentication

  1. Go to the Hue service page.
    1. Log on to the Alibaba Cloud EMR console.
    2. In the top navigation bar, select the region where your cluster resides and select a resource group based on your business requirements.
    3. Click the Cluster Management tab.
    4. On the Cluster Management page, find your cluster and click Details in the Actions column.
    5. In the left-side navigation pane, choose Cluster Service > Hue.
  2. Enable LDAP authentication.
    1. On the Hue service page, choose Actions > Enable LDAP Authentication in the upper-right corner.
    2. In the Cluster Activities dialog box, click OK.
  3. Click History in the upper-right corner.
    After Successful appears in the Status column, the operation is successful.
  4. Restart Hue.
    1. On the Hue service page, choose Actions > Restart Hue in the upper-right corner.
    2. In the Cluster Activities dialog box, specify Description and click OK.
    3. In the Confirm message, click OK.

Access the Hue web UI

  1. Go to the Cluster Overview page.
    1. Log on to the Alibaba Cloud EMR console.
    2. In the top navigation bar, select the region where your cluster resides and select a resource group based on your business requirements.
    3. Click the Cluster Management tab.
    4. On the Cluster Management page, find your cluster and click Details in the Actions column.
  2. In the left-side navigation pane, click Connect Strings.
  3. On the Public Connect Strings page, click the link for Hue.
    Use your LDAP username and password to log on to the Hue web UI.
    Notice The first user who logs on to the Hue web UI after LDAP authentication is enabled becomes the administrator of Hue.

Disable LDAP authentication

  1. Go to the Hue service page.
    1. Log on to the Alibaba Cloud EMR console.
    2. In the top navigation bar, select the region where your cluster resides and select a resource group based on your business requirements.
    3. Click the Cluster Management tab.
    4. On the Cluster Management page, find your cluster and click Details in the Actions column.
    5. In the left-side navigation pane, choose Cluster Service > Hue.
  2. Disable LDAP authentication.
    1. On the Hue service page, choose Actions > Disable LDAP Authentication in the upper-right corner.
    2. In the Cluster Activities dialog box, click OK.
  3. Click History in the upper-right corner.
    After Successful appears in the Status column, the operation is successful.
  4. Restart Hue.
    1. On the Hue service page, choose Actions > Restart Hue in the upper-right corner.
    2. In the Cluster Activities dialog box, specify Description and click OK.
    3. In the Confirm message, click OK.