Knox not downloading Ranger polices

Hadoop16 — Thu, 09 May 2024 05:37:33 GMT

I'm able to list Knox topologies in Ranger and created Ranger policy for webhdfs. Ran the script ranger-knox-plugin.sh and created ranger-security, audits and policymgr-ssl xmls.
Configured one topology for webhdfs in knox and added below
<provider>
<role>authorization</role>
<name>XASecurePDPKnox</name>
<enabled>true</enabled>
</provider>

When I run curl to webhdfs I'm getting 403 error and I could see in Ranger audits access is denied by ranger-acl.

I could nail it down to policy not getting downloaded from Ranger but don't see any error in Knox gateway.log even after setting the logging to debug.

Knox is enabled with self-signed and ranger with no ssl. I imported knox cert to Ranger cacert.

Am I missing any steps in Knox configuration that could be preventing the policy download?

Any help is appreciated!

Re: Knox not downloading Ranger polices

Scharan — Thu, 09 May 2024 07:11:46 GMT

Hello @Hadoop16 Can you try adding public group to the ranger knox policy and then run webhdfs curl command

question Re: Knox not downloading Ranger polices in Support Questions

Knox not downloading Ranger polices

Re: Knox not downloading Ranger polices