Autogenerated Active Directory objects
Artikkel 02/01/2024
7 bidragsytere
Tilbakemeldinger
I denne artikkelen
This article describes what are the Active Directory (AD) accounts and groups that SQL Server creates during a big data cluster deployment.
Important
The Microsoft SQL Server 2019 Big Data Clusters add-on will be retired. Support for SQL Server 2019 Big Data Clusters will end on February 28, 2025. All existing users of SQL Server 2019 with Software Assurance will be fully supported on the platform and the software will continue to be maintained through SQL Server cumulative updates until that time. For more information, see the announcement blog post and Big data options on the Microsoft SQL Server platform .
Accounts & groups
The user accounts and groups are generated in the provided organizational unit (OU) during cluster deployment.
Each of the accounts represents a service in Big Data Clusters. The accounts own the Service Principal Names (SPNs) required by each service.
The deployment automatically generates account and group names. Beginning with SQL Server 2019 CU5, the account or group name prefix is the deployment namespace name (big data cluster name). If the cluster name is bdc for the items on this article, replace <prefix> with bdc to identify your accounts.
The pod suffix (-x) denotes a variable pod ID below. The names below don't include a variable prefix that is user provided during deployment.
The classic account name applies to deployments using versions before SQL Server 2019 CU5 and deployments done with "useSubdomain" option set to false in security configuration.
The following section provides more details about each account. For information about groups, skip to Groups .
Controller service account
Object
Account name
Scale set name
control
Pod name
control-x
Container name
controller
Service name
controller
Account name (without prefix)
ctrl
Account (with namespace prefix)
<prefix>-ctrl
Classic account name
ctrl-controller
Monitor service proxy service account
Object
Account name
Scale set name
mgmtproxy
Pod name
mgmtproxy-x
Container name
service-proxy
Service name
nginx
Account (without prefix)
ngxm
Account (with namespace prefix)
<prefix>-ngxm
Classic account name
nginx-mgmtproxy
LDAP lookup user
Used by grafana and hadoop services to look up users through LDAP.
Object
Account name
Scale set name
metricsui
Pod name
metricsui-x
Container name
grafana
Service name
grafana
Account name (without prefix)
ldap
Account name (with namespace prefix)
<prefix>-ldap
Classic account name
ldap-user
Master pool accounts
Master pool SQL Server user
Object
Account name
Scale set name
master
Pod name
master-x
Container name
mssql-server
Service name
mssql
Account name (without prefix)
sqmp-x/sqmp
Account name (with namespace prefix)
<prefix>-sqmp-x/<prefix>-sqmp
Classic account name
mssql-master-x
Master pool Data Warehouse DMS user
Object
Account name
Scale set name
master
Pod name
master-x
Container name
mssql-server
Service name
dwdms
Account (without prefix)
dmmp-x
Account (with namespace prefix)
<prefix>-dmmp-x
Classic account name
dwdms-master-x
Master pool Data Warehouse Engine user
Object
Account name
Scale set name
master
Pod name
master-x
Container name
mssql-server
Service name
dweng
Account (without prefix)
demp
Account (with namespace prefix)
<prefix>-demp-x
Classic account name
dweng-master-x
Compute pool accounts
Compute pool SQL Server user
Object
Account name
Scale set name
compute-0
Pod name
compute-0-x
Container name
mssql-server
Service name
mssql
Account (without prefix)
sqc0-x/sqlc0
Account (with namespace prefix)
<prefix>-sqc0-x/<prefix>-sqc0
Classic account name
mssql-compute-0-x
Compute pool Data Warehouse DMS user
Object
Account name
Scale set name
compute-0
Pod name
compute-0-x
Container name
mssql-server
Service name
dwdms
Account (without prefix)
dmc0-x
Account (with namespace prefix)
<prefix>-dmc0-x
Classic account name
dwdms-compute-0-x
Compute pool Data Warehouse Engine user
Object
Account name
Scale set name
compute-0
Pod name
compute-0-x
Container name
mssql-server
Service name
dweng
Account (without prefix)
dec0-x
Account (with namespace prefix)
<prefix>-dec0-x
Classic account name
dweng-compute-0-x
Data pool accounts
Data pool SQL Server user
Object
Account name
Scale set name
data-0
Pod name
data-0-x
Container name
mssql-server
Service name
mssql
Account (without prefix)
sqd0
Account (with namespace prefix)
<prefix>-sqd0
Classic account name
mssql-data-0
Storage pool accounts
Storage pool SQL Server user
Object
Account name
Scale set name
storage-0
Pod name
storage-0-x
Container name
mssql-server
Service name
mssql
Account (without prefix)
sqs0
Account (with namespace prefix)
<prefix>-sqs0
Classic account name
mssql-storage-0
Storage pool Yarn node manager service user
Object
Account name
Scale set name
storage-0
Pod name
storage-0-x
Container name
hadoop
Service name
Yarn Node Manager
Account (without prefix)
ynt0-x
Account (with namespace prefix)
<prefix>-ynt0-x
Classic account name
yarnnm-storage-0-x
Storage pool HTTP service user
Object
Account name
Scale set name
storage-0
Pod name
storage-0-x
Container name
hadoop
Service name
HDFS Datanode
Account (without prefix)
hdt0
Account (with namespace prefix)
<prefix>-hdt0
Classic account name
http-storage-0
Storage pool HDFS datanode service user
Object
Account name
Scale set name
storage-0
Pod name
storage-0-x
Container name
hadoop
Service name
HDFS Datanode
Account (without prefix)
hdt0
Account (with namespace prefix)
<prefix>-hdt0
Classic account name
hdfsdn-storage-0
HDFS accounts
HDFS Name node service user
Object
Account name
Scale set name
nmnode-0
Pod name
nmnode-0-x
Container name
hadoop
Service name
HDFS Namenode
Account (without prefix)
hdnn
Account (with namespace prefix)
<prefix>-hdnn
Classic account name
hdfsnn-nmnode
HDFS Name node HTTP service user
Object
Account name
Scale set name
nmnode-0
Pod name
nmnode-0-x
Container name
hadoop
Service name
HDFS Namenode
Account (without prefix)
htnn
Account (with namespace prefix)
<prefix>-htnn
Classic account name
http-nmnode
KMS accounts
Name node KMS service user
Object
Account name
Scale set name
nmnode-0
Pod name
nmnode-0-x
Container name
hadoop
Service name
KMS
Account (without prefix)
kmnn-x
Account (with namespace prefix)
<prefix>-kmnn-x
Classic account name
kms-nmnode-x
Zookeeper accounts
Zookeeper JournalNode service users
Object
Account name
Scale set name
zookeeper
Pod name
zookeeper-x
Container name
zookeeper
Service name
Journal node
Account (without prefix)
jnzk-x
Account (with namespace prefix)
<prefix>-jnzk-x
Classic account name
jn-zookeeper-x
Zookeeper HTTP service user
Object
Account name
Scale set name
zookeeper
Pod name
zookeeper-x
Container name
zookeeper
Service name
Zookeeper
Account (without prefix)
htzk
Account (with namespace prefix)
<prefix>-htzk
Classic account name
http-zookeeper
Sparkhead Yarn Resource Manager service user
Object
Account name
Scale set name
sparkhead
Pod name
sparkhead-x
Container name
hadoop-yarn-jobhistory
Service name
Yarn Resource Manager
Account (without prefix)
yrsh-x
Account (with namespace prefix)
<prefix>-yrsh-x
Classic account name
yarnrm-sparkhead-x
Sparkhead HTTP user
Object
Account name
Scale set name
sparkhead
Pod name
sparkhead-x
Container name
*
Service name
*
Account (without prefix)
htsh
Account (with namespace prefix)
<prefix>-htsh
Classic account name
http-sparkhead
Sparkhead Spark history service user
Object
Account name
Scale set name
sparkhead
Pod name
sparkhead-x
Container name
hadoop-livy-sparkhistory
Service name
Spark History Server
Account (without prefix)
shsh-x
Account (with namespace prefix)
<prefix>-shsh-x
Classic account name
sph-sparkhead-x
Sparkhead Livy service user
Object
Account name
Scale set name
sparkhead
Pod name
sparkhead-x
Container name
hadoop-livy-sparkhistory
Service name
Livy
Account (without prefix)
lvsh-x
Account (with namespace prefix)
<prefix>-lvsh-x
Classic account name
livy-sparkhead-x
Sparkhead Hive service user
Object
Account name
Scale set name
sparkhead
Pod name
sparkhead-x
Container name
hadoop-hivemetastore
Service name
Hive Metastore
Account (without prefix)
hvsh-x
Account (with namespace prefix)
<prefix>-hvsh-x
Classic account name
hive-sparkhead-x
Spark pool Yarn node manager service user
Object
Account name
Scale set name
spark-0
Pod name
spark-0-x
Container name
hadoop
Service name
Yarn Node Manager
Account (without prefix)
yns0-x
Account (with namespace prefix)
<prefix>-yns0-x
Classic account name
yarnnm-spark-0-x
Spark pool Yarn node manager HTTP user
Object
Account name
Scale set name
spark-0
Pod name
spark-0-x
Container name
hadoop
Service name
Yarn Node Manager
Account (without prefix)
hts0
Account (with namespace prefix)
<prefix>-hts0
Classic account name
http-spark-0
Knox accounts
Knox Gateway user
Object
Account name
Scale set name
gateway
Pod name
gateway-x
Container name
knox
Service name
Knox
Account (without prefix)
knox-x
Account (with namespace prefix)
<prefix>-knox-x
Classic account name
knox-gateway-x
Knox Gateway HTTP user
Object
Account name
Scale set name
gateway
Pod name
gateway-x
Container name
knox
Service name
Knox
Account (without prefix)
htgw
Account (with namespace prefix)
<prefix>-htgw
Classic account name
http-gateway
App accounts
App setup user
Object
Account name
Scale set name
appproxy
Pod name
appproxy-x
Container name
App Service Proxy
Service name
nginx
Account (without prefix)
apst
Account (with namespace prefix)
<prefix>-apst
Classic account name
app-setup
Groups
The following groups are created in the OU provided by the user. The members of the groups are the users created above for the corresponding services.
Data Warehouse DMS Service group
Object
Group name
Scale set name
master/compute-0
Pod name
master-x/compute-0-x
Container name
mssql-server
Service name
dwdms
Group (without prefix)
dmsvc
Account (with namespace prefix)
<prefix>-dmsvc
Classic account name
dwdms-service
Data Warehouse Engine Service group
Object
Group name
Scale set name
master/compute-0
Pod name
master-x/compute-0-x
Container name
mssql-server
Service name
dweng
Group (without prefix)
desvc
Account (with namespace prefix)
<prefix>-desvc
Classic account name
desvc
Related content