Skip to content

Commit

Permalink
Update active-directory.md
Browse files Browse the repository at this point in the history
  • Loading branch information
abajwa-hw authored Aug 6, 2016
1 parent d595066 commit 73a1d04
Showing 1 changed file with 22 additions and 22 deletions.
44 changes: 22 additions & 22 deletions extras/active-directory.md
Original file line number Diff line number Diff line change
Expand Up @@ -215,28 +215,28 @@ Import-Csv "Users.csv" | ForEach-Object {
- Give registersssd user permissions to join workstations to OU=HadoopNodes (needed to run 'adcli join' successfully). In 'Active Directory Users and Computers' app:
- Click on View > Advanced features
- Right Click on HadoopNodes
- Properties
- Security
- Advanced
- Permissions
- Add > 'Select a principal' > registersssd > Check names > Ok >
- Set 'Applies to' to: 'This object and all descendant objects. Select below checkboxes > OK
- Create Computer Objects
- Delete Computer Objects
- Add > 'Select a principal' > registersssd > Check names > Ok >
- Set 'Applies to' to: 'Descendant Computer Objects' > select below checkboxes > Ok > Apply
- Read All Properties
- Write All Properties
- Read Permissions
- Modify Permissions
- Change Password
- Reset Password
- Validated write to DNS host name
- Validated write to service principle name
For more details see: https://jonconwayuk.wordpress.com/2011/10/20/minimum-permissions-required-for-account-to-join-workstations-to-the-domain-during-deployment/
- Click on View > Advanced features
- Right Click on HadoopNodes
- Properties
- Security
- Advanced
- Permissions
- Add > 'Select a principal' > registersssd > Check names > Ok >
- Set 'Applies to' to: 'This object and all descendant objects. Select below checkboxes > OK
- Create Computer Objects
- Delete Computer Objects
- Add > 'Select a principal' > registersssd > Check names > Ok >
- Set 'Applies to' to: 'Descendant Computer Objects' > select below checkboxes > Ok > Apply
- Read All Properties
- Write All Properties
- Read Permissions
- Modify Permissions
- Change Password
- Reset Password
- Validated write to DNS host name
- Validated write to service principle name
For more details on steps above see reference material [here](https://jonconwayuk.wordpress.com/2011/10/20/minimum-permissions-required-for-account-to-join-workstations-to-the-domain-during-deployment/)
- create keytab for Ambari. This will be used later to kerborize Ambari before setting up views
Expand Down

0 comments on commit 73a1d04

Please sign in to comment.