question Re: Apache Ranger external user in Support Questions

Apache Ranger external user

hrajpurohit — Tue, 06 Sep 2016 14:37:14 GMT

Hi,

How can i get a user created in ambari in Apache Ranger?

Thank you.

Re: Apache Ranger external user

frank93 — Tue, 06 Sep 2016 14:40:54 GMT

Hi,

You can not create user in Ambari that will be visible in Apache Ranger. You need to create user in Apache Ranger and then in your local system (with the same username), or you can synchronize users with Active Directory.

To create user in Apache Ranger you need to have admin privileges, then go to Settings -> Users/Groups and "Add New User"

Re: Apache Ranger external user

hrajpurohit — Tue, 06 Sep 2016 14:45:03 GMT

Thank you,

Can you help me understand creating user in Apache ranger and creating user in my local system with same username?

I have created a policy in Ranger and i want to restrict a user from selecting table in Hive view but i cannot find that user in Apache Ranger.

Re: Apache Ranger external user

frank93 — Tue, 06 Sep 2016 15:00:52 GMT

@Hitesh Rajpurohit

You need to create user with the same username in Apache Ranger. For example: you created user "testuser" in your system, then you need to create the same user (testuser) in Apache Ranger, and policies now will work for the "testuser" in your system.

Re: Apache Ranger external user

hrajpurohit — Tue, 06 Sep 2016 15:04:40 GMT

By System you mean My Laptop?

Re: Apache Ranger external user

frank93 — Tue, 06 Sep 2016 15:12:44 GMT

I mean the environment where your Apache Ranger and the rest is installed. It can be sandbox or your Laptop's operating system if it is the place where Hadoop is installed.

Re: Apache Ranger external user

dsharma — Tue, 06 Sep 2016 15:39:05 GMT

there is no automatic sync from ambari to ranger. but if the user you created in ambari present also in your machine and unix sync is configured in ranger then it will be automatically syncd.

but as there are three ways to sync users in ambari

1) UNIX

2) LDAP/AD

3) File

so there can be following solution that suits your use case

a) either configure same AD server for both ranger and ambari , so users will be in sync

b) if you are creating users manually in ambari then you can use file sync and keep on adding the same users in file what you creating in ambari

Re: Apache Ranger external user

hrajpurohit — Tue, 06 Sep 2016 16:00:17 GMT

Thank you,

Re: Apache Ranger external user

hrajpurohit — Tue, 06 Sep 2016 16:00:48 GMT

Thank you,

Re: Apache Ranger external user

hrajpurohit — Wed, 07 Sep 2016 12:09:26 GMT

@Edgar Daeds Hello,

can you tell me how to login with UNIX user in Ambari?

Re: Apache Ranger external user

frank93 — Wed, 07 Sep 2016 15:29:38 GMT

@Hitesh Rajpurohit

You can either sync Ambari or create users manually in Ambari. To create users manually - as admin user in Ambari click "admin" button in the upper right corner and then "Manage Ambari". To sync Ambari check this https://community.hortonworks.com/questions/50169/ambari-synch-with-local-unix-groups-and-users.html

Re: Apache Ranger external user

hrajpurohit — Thu, 08 Sep 2016 14:00:22 GMT

The link which you gave to sync users in ambari is of syncing Ambari with LDAP but i have UNIX users and i have to sync unix users with Ambari Web UI

Re: Apache Ranger external user

hrajpurohit — Thu, 08 Sep 2016 14:02:55 GMT

Hello Deepak,

I have created a policy in Ranger and i have assigned it to a user in UNIX and i want that user in Ambari so that when he tries to perform a specific task policy is activated and user id denied. Can you help me how to do that like how to get UNIX user in Ambari?

Thank you

Re: Apache Ranger external user

frank93 — Fri, 09 Sep 2016 16:43:01 GMT

I am not sure that you can sync UNIX users with Ambari (I have never tried), but I would create UNIX users manually in Ambari.