question Is it possible to import existing HBase ACL into ranger ? in Archives of Support Questions (Read Only)

Is it possible to import existing HBase ACL into ranger ?

nsabharwal — Tue, 02 Feb 2016 13:09:01 GMT

HDP 2.3.2

Ambari 2.1

HBase has several hundred ACL and we just installed ranger . We "need" to find a way to extract existing ACL and import into ranger

Re: Is it possible to import existing HBase ACL into ranger ?

jstraub — Tue, 02 Feb 2016 13:47:28 GMT

Importing permissions into Ranger should be easy, however I dont think there is an easy way to export all the Hbase permissions. @Nick Dimiduk @nmaillard any idea how to export all user permissions?

Re: Is it possible to import existing HBase ACL into ranger ?

abajwa — Tue, 02 Feb 2016 14:19:04 GMT

You can also create Ranger policies by issuing grant/revoke commands via hbase shell.

Check slide 25 here from @sneethiraj:

http://www.slideshare.net/Hadoop_Summit/securing-hadoop-with-apache-ranger

So if customer can get a list of the grant commands they previously issued, they could possible re-run them and get the Ranger policies automatically created.

Re: Is it possible to import existing HBase ACL into ranger ?

aervits — Tue, 02 Feb 2016 19:51:34 GMT

@Neeraj Sabharwal the new tutorial on ranger walks you through exporting a policy and importing it using rest API.

Re: Is it possible to import existing HBase ACL into ranger ?

nsabharwal — Tue, 02 Feb 2016 20:04:12 GMT

@bdurai @sneethiraj