You are viewing a plain text version of this content. The canonical link for it is here.
Posted to user@accumulo.apache.org by "Terry P." <te...@gmail.com> on 2013/05/15 22:07:47 UTC
Alternate user for tracer
To help get the Accumulo root password out of my accumulo-site.xml file
(security folks get touchy when they find 'root' and 'password' together in
a clear text file), I'd like to configure the tracer to run as a separate
user.
Is it as simple as:
1. create a user and give that user create_table permissions
2. edit accumulo-site.xml and set trace.user value to new user and
trace.password to its password
3. stop the tracer using bin/stop-server.sh <tracer-server> tracer
4. drop the existing trace table
5. start the tracer using bin/start-server.sh <tracer-server> tracer
Thanks in advance everyone.
Re: Alternate user for tracer
Posted by "Terry P." <te...@gmail.com>.
Beauty, that's even cleaner Eric as then I can reuse the existing trace
table and keep its data.
Thanks for the quick reply!
-tp
On May 15, 2013, at 3:27 PM, Eric Newton <er...@gmail.com> wrote:
Yes. But, technically, you don't have to give it CREATE_TABLE perms if you
create the table first, and give the tracer user WRITE perms.
-Eric
On Wed, May 15, 2013 at 4:07 PM, Terry P. <te...@gmail.com> wrote:
> To help get the Accumulo root password out of my accumulo-site.xml file
> (security folks get touchy when they find 'root' and 'password' together in
> a clear text file), I'd like to configure the tracer to run as a separate
> user.
>
> Is it as simple as:
>
> 1. create a user and give that user create_table permissions
> 2. edit accumulo-site.xml and set trace.user value to new user and
> trace.password to its password
> 3. stop the tracer using bin/stop-server.sh <tracer-server> tracer
> 4. drop the existing trace table
> 5. start the tracer using bin/start-server.sh <tracer-server> tracer
>
> Thanks in advance everyone.
>
Re: Alternate user for tracer
Posted by Eric Newton <er...@gmail.com>.
Yes. But, technically, you don't have to give it CREATE_TABLE perms if you
create the table first, and give the tracer user WRITE perms.
-Eric
On Wed, May 15, 2013 at 4:07 PM, Terry P. <te...@gmail.com> wrote:
> To help get the Accumulo root password out of my accumulo-site.xml file
> (security folks get touchy when they find 'root' and 'password' together in
> a clear text file), I'd like to configure the tracer to run as a separate
> user.
>
> Is it as simple as:
>
> 1. create a user and give that user create_table permissions
> 2. edit accumulo-site.xml and set trace.user value to new user and
> trace.password to its password
> 3. stop the tracer using bin/stop-server.sh <tracer-server> tracer
> 4. drop the existing trace table
> 5. start the tracer using bin/start-server.sh <tracer-server> tracer
>
> Thanks in advance everyone.
>