Chapter 5. Configuring Zeppelin Security
Zeppelin uses Apache Shiro to provide authentication and authorization (access control).
This chapter describes how to configure and enable several Zeppelin security features:
Configure authentication. Zeppelin supports a Shiro-based identity source for testing and informal use, as well as LDAP and Active Directory identity sources for production use. After authentication is enabled, when users connect to Apache Zeppelin they are prompted for login credentials.
Optionally, limit who can configure Zeppelin interpreter, credential, and configuration settings; notebooks; and data.
Optionally, configure the Zeppelin UI to run over SSL (HTTPS).
Optionally, configure Zeppelin to run on a Kerberos-enabled cluster.
If Ranger is enabled on your cluster, no additional configuration steps are required to have Ranger work with Zeppelin. Note, however, that a Ranger policy change takes about five to ten minutes to take effect.