The Lightweight Directory Access Protocol (LDAP) is used for identity management in enterprises. In order to use LDAP-based authentication, we need to use the following flags: setup-ldap (for setting up ldap properties with ambari) and sync-ldap (to perform a synchronization of the data from the ldap server):
Example: ambari-server setup-ldapExample: ambari-server sync-ldap
Pluggable Authentication Module (PAM) is at the core of the authentication and authorization in any UNIX or Linux operating systems. If we want to leverage the PAM-based access for Ambari then we need to run it with the setup-pam option. If we then want to move from LDAP to PAM-based authentication, we need to run it with migrate-ldap-pam