---
title: "Access web by console application"
slug: "secure-hadoop-use-3"
updated: 2026-10-08T07:04:14Z
published: 2026-10-08T07:04:14Z
canonical: "guide.ncloud-docs.com/secure-hadoop-use-3"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://guide.ncloud-docs.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Access web by console application

Available in VPC

You can manage Cloud Hadoop cluster's information and status using the web UIs provided by NAVER Cloud Platform's Cloud Hadoop (such as Ambari and Hue).

              Note

              

Some web UIs, such as HDFS NameNode UI, can only be accessed through SSH tunneling. For more information, see [Access Web UI using tunneling](/docs/en/hadoop-vpc-6).

## Preliminary task

In order to access a cluster node, the following preparations need to be made in advance:

| Item | Description | Guide |
| --- | --- | --- |
| Set SSL VPN | Secure access from the outside to the network configured within NAVER Cloud Platform. - Add VPN range to subnet's route table. - Download, install, and run SSL VPN client. | - [Set SSL VPN](/docs/en/hadoop-vpc-5#1-ssl-vpn-%EC%84%A4%EC%A0%95) - [SSL VPN user guide (VPC)](/docs/en/sslvpn-start-vpc) |
| Set ACG | Add the fixed IP of the device to access the cluster's ACG settings and the allowed port for the target page. - Access source: User's static IP (can be entered by clicking **[myIp]**) - Allowed port: 8443 for Ambari, and 8421 for HDFS NameNode. | [Set firewall (ACG)](/docs/en/server-acg-vpc) |
| Authentication key | Private key (.pem) required for accessing the cluster. | [Manage authentication key for direct cluster access](/docs/en/hadoop-vpc-4#%ED%81%B4%EB%9F%AC%EC%8A%A4%ED%84%B0-%EC%A7%81%EC%A0%91-%EC%A0%91%EC%86%8D-%EC%9D%B8%EC%A6%9D%ED%82%A4%EB%B3%80%EA%B2%BD) |
| Domain | Domain required for access to the cluster node. You can view it in the domain item of the cluster details. | [Check cluster details](/docs/en/hadoop-vpc-4#%ED%81%B4%EB%9F%AC%EC%8A%A4%ED%84%B0%EC%83%81%EC%84%B8%EC%A0%95%EB%B3%B4%ED%99%95%EC%9D%B8) |

### 1. Set SSL VPN

SSL VPN must be set to ensure secure access from outside to the network configured within NAVER Cloud Platform. For more information on SSL VPN settings, see [Set SSL VPN](/docs/en/hadoop-vpc-5#1SSLVPN%EC%84%A4%EC%A0%95).

### 2. Set ACG rules

To change the ACG rules of a cluster:

1. In the VPC environment of the NAVER Cloud Platform console, navigate to **Menu** > **All Services** > **Compute** > **Server** > **ACG**.
2. Select the ACG of the cluster you want to access and click **[ACG settings]**.  

![cloudhadoop-server-acg1_ko](https://cdn.document360.io/6998976f-9d95-4df8-b847-d375892b92c2/Images/Documentation/cloudhadoop-server-acg1_en.png?sv=2026-02-06&spr=https&st=2026-10-27T18%3A01%3A31Z&se=2026-10-27T19%3A01%3A31Z&sr=c&sp=r&sig=UtN%2Fz0LHbmT7EQXWmOt6HeqafDvpty2A7WQnMvzvw7g%3D)
3. Enter the following 4 information items and add ACG Rule:
  - Protocol: TCP
  - Access source: IP of the local device used for SSH communication
  - Allowed port: `8443` for Ambari, and `8421` for HDFS NameNode
  - Note (optional)  

![cloudhadoop-server-acg2_ko](https://cdn.document360.io/6998976f-9d95-4df8-b847-d375892b92c2/Images/Documentation/cloudhadoop-server-acg2_en.png?sv=2026-02-06&spr=https&st=2026-10-27T18%3A01%3A31Z&se=2026-10-27T19%3A01%3A31Z&sr=c&sp=r&sig=UtN%2Fz0LHbmT7EQXWmOt6HeqafDvpty2A7WQnMvzvw7g%3D)

              Note

              

- Application web UI list by cluster version and type The following is the list of application web UIs provided for each version and type of Cloud Hadoop clusters.
- Cloud Hadoop cluster versions 1.3 and 1.4

| Cluster version | Cluster type | Cluster add-on | Application Web | Application Web Reference Site |
| --- | --- | --- | --- | --- |
| 1.3 1.4 | Core Hadoop | Provided by default. | Ambari Web Console | [https://ambari.apache.org/](https://ambari.apache.org/) |
| Core Hadoop | Provided by default. | Hue Admin | [https://gethue.com/](https://gethue.com/) |
| Core Hadoop | Provided by default. | Zeppelin Notebook | [https://zeppelin.apache.org/](https://zeppelin.apache.org/) |
| Core Hadoop | Provided by default. | Ranger | [https://ranger.apache.org](https://ranger.apache.org) |
| HBase | Provided by default. | Ambari Web Console | [https://ambari.apache.org/](https://ambari.apache.org/) |
| HBase | Provided by default. | Ranger | [https://ranger.apache.org](https://ranger.apache.org) |
| Spark | Provided by default. | Ambari Web Console | [https://ambari.apache.org/](https://ambari.apache.org/) |
| Spark | Provided by default. | Hue Admin | [https://gethue.com/](https://gethue.com/) |
| Spark | Provided by default. | Zeppelin Notebook | [https://zeppelin.apache.org/](https://zeppelin.apache.org/) |
| Spark | Provided by default. | Ranger | [https://ranger.apache.org](https://ranger.apache.org) |
| Presto | Provided by default. | Ambari Web Console | [https://ambari.apache.org/](https://ambari.apache.org/) |
| Presto | Provided by default. | Hue Admin | [https://gethue.com/](https://gethue.com/) |
| Presto | Provided by default. | Zeppelin Notebook | [https://zeppelin.apache.org/](https://zeppelin.apache.org/) |
| Presto | Provided by default. | Presto Coordinator | [https://prestodb.io/](https://prestodb.io/) |
| Presto | Provided by default. | Ranger | [https://ranger.apache.org](https://ranger.apache.org) |

- Cloud Hadoop cluster versions 1.5, 1.6, 1.7, 1.8, 1.9, 2.0, 2.1, 2.2, and 2.3

| Cluster version | Cluster type | Cluster add-on | Application Web | Application Web Reference Site |
| --- | --- | --- | --- | --- |
| 1.5 1.6 1.7 1.8 1.9 2.0 2.1 2.2 2.3 | Core Hadoop with Spark | Provided by default. | Ambari Web Console | [https://ambari.apache.org/](https://ambari.apache.org/) |
| Core Hadoop with Spark | Provided by default. | Hue Admin | [https://gethue.com/](https://gethue.com/) |
| Core Hadoop with Spark | Provided by default. | Zeppelin Notebook | [https://zeppelin.apache.org/](https://zeppelin.apache.org/) |
| Core Hadoop with Spark | Provided by default. | Ranger | [https://ranger.apache.org/](https://ranger.apache.org/) |
| Core Hadoop with Spark | Provided by default. | Namenode | [https://hadoop.apache.org/](https://hadoop.apache.org/) |
| Core Hadoop with Spark | Provided by default. | Yarn Timeline Server | [https://hadoop.apache.org/](https://hadoop.apache.org/) |
| Core Hadoop with Spark | Provided by default. | Yarn Resource Manager | [https://hadoop.apache.org/](https://hadoop.apache.org/) |
| Core Hadoop with Spark | Provided by default. | Tez | [https://tez.apache.org/](https://tez.apache.org/) |
| Core Hadoop with Spark | Provided by default. | Oozie | [https://oozie.apache.org/](https://oozie.apache.org/) |
| Core Hadoop with Spark | Provided by default. | Spark History Server | [https://spark.apache.org/](https://spark.apache.org/) |
| Core Hadoop with Spark | Presto | Presto Coordinator | [https://prestodb.io/](https://prestodb.io/) |
| Core Hadoop with Spark | HBase | HBase Master | [https://hbase.apache.org/](https://hbase.apache.org/) |
| Core Hadoop with Spark | Impala | Impala Server, Impala Statestore, Impala Catalog | [https://impala.apache.org/](https://impala.apache.org/) |
| Core Hadoop with Spark | Kudu | Kudu Master | [https://kudu.apache.org/](https://kudu.apache.org/) |
| Core Hadoop with Spark | Trino | Trino Coordinator | [https://trino.io/](https://trino.io/) |
| Core Hadoop with Spark | NiFi | NiFi | [https://nifi.apache.org/](https://nifi.apache.org/) |

              Caution

              

You cannot use the File Browser upload feature of NameNode UI from Cloud Hadoop 1.5 and higher. Use Hue for upload.

## Access Web UI

You can access each web UI using DNS.

              Note

              

From Cloud Hadoop 2.1 and higher, you must complete Ncloud account login authentication to access the Web UI due to SSO integration.

To access the available web UIs:

1. In the VPC environment of the NAVER Cloud Platform console, navigate to **Menu** > **All Services** > **Big Data & Analytics** > **Cloud Hadoop**.
2. Select the cluster to access the web UI from the cluster list, and then click **[View by application]**.
3. Click the web UI link in the note field from the popup's web UI list.
4. On the Ncloud login authentication page, log in with your Ncloud account.  

![chadoop-sso-1-1](https://cdn.document360.io/6998976f-9d95-4df8-b847-d375892b92c2/Images/Documentation/chadoop-sso-1-1.png?sv=2026-02-06&spr=https&st=2026-10-27T18%3A01%3A31Z&se=2026-10-27T19%3A01%3A31Z&sr=c&sp=r&sig=UtN%2Fz0LHbmT7EQXWmOt6HeqafDvpty2A7WQnMvzvw7g%3D)

              Caution

              

- Due to a reinforced SSL security policy, an error may occur when accessing the self-signed certificate URL if the user environment is macOS Catalina or Chrome. Click the empty space in the error screen and enter `thisisunsafe` with the keyboard to access.
- If a potential security risk warning message is displayed in the Mozilla Firefox browser, click **[Advanced]**, and then click **[Accept the risk and continue]**.

              Note

              

After executing Kerberize, the Kerberos authentication is added when accessing the web UI page. For more information about Kerberize, see the [Secure Hadoop configuration (optional)](/docs/en/hadoop-vpc-10) guide.

### Access through private IP

Access can be made using the private IP of each node with SSL VPN turned on. Click the **Quick Links** from each [Ambari UI](/docs/en/hadoop-vpc-8) menu and FQDN will be used instead of the host's private IP. Replace FQDN with private IP and access.

## Change password

### Ambari

To set and change the Ambari UI access password, click **[Manage cluster] > Initialize cluster admin password** on the Cloud Hadoop console. For more information, see [Initialize cluster admin password](/docs/en/hadoop-vpc-4#%ED%81%B4%EB%9F%AC%EC%8A%A4%ED%84%B0-%EA%B4%80%EB%A6%AC%EC%9E%90-%ED%8C%A8%EC%8A%A4%EC%9B%8C%EB%93%9C-%EC%B4%88%EA%B8%B0%ED%99%94). ![chadoop-3-3-04_ko](https://cdn.document360.io/6998976f-9d95-4df8-b847-d375892b92c2/Images/Documentation/chadoop-3-3-04_en.png?sv=2026-02-06&spr=https&st=2026-10-27T18%3A01%3A31Z&se=2026-10-27T19%3A01%3A31Z&sr=c&sp=r&sig=UtN%2Fz0LHbmT7EQXWmOt6HeqafDvpty2A7WQnMvzvw7g%3D)

### Hue

Because Hue does not synchronize with LDAP automatically, if you create Hue for the first time in a Secure Hadoop environment, you must manually synchronize LDAP accounts through the Hue UI.

To synchronize an LDAP account:

1. Change the login type from LDAP to Local.  

![chadoop-3-3-zeppelin_ko](https://cdn.document360.io/6998976f-9d95-4df8-b847-d375892b92c2/Images/Documentation/chadoop-3-3-hue-01_en.png?sv=2026-02-06&spr=https&st=2026-10-27T18%3A01%3A31Z&se=2026-10-27T19%3A01%3A31Z&sr=c&sp=r&sig=UtN%2Fz0LHbmT7EQXWmOt6HeqafDvpty2A7WQnMvzvw7g%3D)
2. Click **[Manage Users]**.  

![chadoop-3-3-zeppelin_ko](https://cdn.document360.io/6998976f-9d95-4df8-b847-d375892b92c2/Images/Documentation/chadoop-3-3-hue-02_en.png?sv=2026-02-06&spr=https&st=2026-10-27T18%3A01%3A31Z&se=2026-10-27T19%3A01%3A31Z&sr=c&sp=r&sig=UtN%2Fz0LHbmT7EQXWmOt6HeqafDvpty2A7WQnMvzvw7g%3D)
3. Click **[Sync LDAP users/groups]** for synchronization.  

![chadoop-3-3-zeppelin_ko](https://cdn.document360.io/6998976f-9d95-4df8-b847-d375892b92c2/Images/Documentation/chadoop-3-3-hue-03_en.png?sv=2026-02-06&spr=https&st=2026-10-27T18%3A01%3A31Z&se=2026-10-27T19%3A01%3A31Z&sr=c&sp=r&sig=UtN%2Fz0LHbmT7EQXWmOt6HeqafDvpty2A7WQnMvzvw7g%3D)

#### Change password

To change the password for accessing the Hue UI:

1. Run PuTTY and access the edge node through SSH. For more information, see the [Access cluster node through SSH](/docs/en/hadoop-vpc-5) guide.
2. Depending on whether you are using a Local account or an LDAP account, run one of the following commands to change the password.

- LOCAL account

```
$ cd /usr/hdp/3.1.0.0-78/hue/build/env/bin  # Cloud Hadoop 1.x
$ cd /usr/nch/3.1.0.0-78/hue/build/env/bin  # Cloud Hadoop 2.x

$ pwd

$ sudo -s   # root

$ echo "from django.contrib.auth.models import User; 
u = User.objects.get(username='existing user name');
u.set_password('new password');
u.save()
" | ./hue shell
```

Or, change the password using the `hue changepassword` command as follows:

```
$ cd /usr/hdp/3.1.0.0-78/hue/build/env/bin  # Cloud Hadoop 1.x
$ cd /usr/nch/3.1.0.0-78/hue/build/env/bin  # Cloud Hadoop 2.x

$ sudo ./hue changepassword 'existing user name'
Changing password for user 'existing user name'
Password:
Password (again):
Password changed successfully for user 'existing user name'
```
- LDAP account
  - Change it using the `ldapmodify` command.

```
ldif=/tmp/modify-account.ldif
HASH_USER_PW=$(slappasswd -h "{SSHA}" -s "신규_패스워드")

cat <<EOF | tee $ldif
dn: uid=account name,ou=users,dc=USER,dc=GUIDE
changetype: modify
replace: userPassword
userPassword: ${HASH_USER_PW}
EOF

ldapmodify \
  -H ldap://localhost:389 \
  -D "cn=root,dc=USER,dc=GUIDE" \
  -w "Kerberos_password" \
  -f "$ldif"
```

### Zeppelin Notebook

In Cloud Hadoop, Zeppelin Notebooks are managed by Ambari. Therefore, it is recommended to access the [Ambari UI](/docs/en/secure-hadoop-use-3#WEBUI%EC%A0%91%EC%86%8D) and perform tasks rather than directly accessing the cluster to change files and run scripts.

To change your Zeppelin Notebook password:

1. After accessing the Ambari UI, log in with the cluster admin account ID and password.
2. Click **Zeppelin Notebook** from the left-side bar.
3. Click the **[CONFIGS]** tap at the top.
4. Click the **Advanced-zeppelin-shiro-ini** item, and edit the password.  

![chadoop-3-3-zeppelin_ko](https://cdn.document360.io/6998976f-9d95-4df8-b847-d375892b92c2/Images/Documentation/chadoop-3-3-zeppelin_en.png?sv=2026-02-06&spr=https&st=2026-10-27T18%3A01%3A31Z&se=2026-10-27T19%3A01%3A31Z&sr=c&sp=r&sig=UtN%2Fz0LHbmT7EQXWmOt6HeqafDvpty2A7WQnMvzvw7g%3D)
5. Click **[Save]** at the bottom right corner.
6. In the top-right corner, click **[Actions]** > **Restart All**, and click **[Confirm Restart All]** in the popup.

If you follow the above sequence and access Zeppelin Notebook, you will see that the password change has been applied.