question Re: Question of Ambari and Ranger account in Archives of Support Questions (Read Only)

Question of Ambari and Ranger account

prakashpunj — Thu, 25 Feb 2016 10:06:35 GMT

In Ranger, in order to assign a user to a policy ( directory access), that user must be in Ranger right. Is there a way to sync Ranger user account with Ambari user account. Why create multiple account in different system.

Is there a way to use Federated system, like google / facebook account. ??

what is the purpose of ranger user-sync ?

Thanks

Re: Question of Ambari and Ranger account

nsabharwal — Thu, 25 Feb 2016 10:08:26 GMT

@Prakash Punj

Yes you are right. In production , we use AD/LDAP sync with Ranger and Ambari so there is no duplicate effort.

For testing, you have to create users in both setup.

Is there a way to use Federated system, like google / facebook account. ?? No

Re: Question of Ambari and Ranger account

nsabharwal — Thu, 25 Feb 2016 10:10:35 GMT

Usersync pulls in users from UNIX, LDAP, or AD and populates Ranger's local user tables with these users.

Re: Question of Ambari and Ranger account

prakashpunj — Thu, 25 Feb 2016 10:13:00 GMT

Thanks @Neeraj Sabharwal

Re: Question of Ambari and Ranger account

nsabharwal — Thu, 25 Feb 2016 10:13:47 GMT

@Prakash Punj

You will find this very userful http://ranger.apache.org/faq.html

Re: Question of Ambari and Ranger account

prakashpunj — Thu, 25 Feb 2016 10:22:29 GMT

Thanks so much @Neeraj Sabharwal

Re: Question of Ambari and Ranger account

f_anastasopoulo — Fri, 07 Oct 2016 19:52:02 GMT

So how do i create a policy in Ranger for a specific user and see the policy implemented in e.g. HDFS or Hive?

Just create the user in both Ambari console and Ranger with the same username? The passwords have different formats though.