also the default relaxed mode shell. The following command can also be used for the same
purpose.
#
ux-tenant-relax bob
For more information, refer to the
ux-tenant-relax
man page.
Assign Restricted User Access to a User
Execute the
ux-tenant-restrict
command to assign restricted access to a user.
#
ux-tenant-restrict bob
For more information, refer to the
ux-tenant-restrict
man page.
Remove User's Tenant Membership
Use the
ux-tenant-remove-user
command, either to:
●
remove
bob
from tenant membership or to remove
bob
entirely from the authorized users list:
#
ux-tenant-remove-user -u bob mytenant
●
remove
bob
entirely from the authorized users list:
#
ux-tenant-remove-user -u bob
For more information, refer to the
ux-tenant-remove-user
man page.
View List of Authorized Users
Execute the
ux-tenant-list-users
to view the list of authorized users.
For more information, refer to the
ux-tenant-list-users
man page.
Urika-GX Mesos and Kerberos Authorization
Once a user is entered in the authorized user list and granted either tenant membership or relaxed access to
Urika-GX, the user is able to log into Urika-GX , either in a tenant VM or on a physical login node. The user still
will not have the ability to launch jobs under Mesos or (in the secure service mode) to access HDFS. In order to
permit these forms of access, the user must be assigned a Mesos principal and secret and must (in the secure
service mode) be assigned a kerberos keytab.
Discover New users
Use the
usm-sync-users
command to discover new users and create Mesos and Kerberos
credentials for all of them.
#
usm-sync-users
For more information, refer to the
usm-sync-users
man page.
Security
S3016
207
