Should Apache Ranger be installed before kerberization or after?

Question

Hello All,

I have an HDP 3.1 cluster that is neither kerberized nor it has ranger installed.

Now, I have a requirement to Kerberize it and also enable Role Based Access Control using Ranger.

1. Should I first go with Kerberization and then installation of Ranger or vice versa?

2. Any cautions to be taken with both of these approaches?

3. Is there a requirement/recommended for implementing TLS/SSL for all the services while Kerberizing the cluster?

Thank You,

Megh Vidani

smdas · Accepted Answer

Hello @vidanimegh

Thanks for using Cloudera Community. To answer your query,

(I) There is no dependency between the 2 Services with respect to which one should be installed first. If you have to pick, First Authenticate & then, Authorise i.e. Setup Kerberos first before installing Ranger.

(II) Again, no caution required as there is no explicit dependency.

(III) For HDP Stack, there is no requirement to enable TLS/SSL before Kerberos. Recommend to perform the Steps (Enabling Kerberos | Enabling Ranger | Enable TLS/SSL) via Ambari for easier management.

Let us know if you have any further queries.

- Smarak

Sign up

Please use your Cloudera account.

Login to the community

Please use your Cloudera account.