question Re: How to configure multiple domains with Apache Ranger in HDP 2.3 ? in Archives of Support Questions (Read Only)

How to configure multiple domains with Apache Ranger in HDP 2.3 ?

smartninja723 — Mon, 14 Mar 2016 17:15:08 GMT

Guys,

We have configured A/D with Ranger for a single domain on the Kerberized cluster. The customer requirement is to setup policies for multiple domains.(Namely 5 domains) How do we achieve this on HDP 2.3 cluster?

Thank you.

Re: How to configure multiple domains with Apache Ranger in HDP 2.3 ?

nsabharwal — Tue, 15 Mar 2016 01:05:20 GMT

@Smart Solutions

This is not possible yet as far as I know. @bganesan @bdurai

Re: How to configure multiple domains with Apache Ranger in HDP 2.3 ?

bganesan — Tue, 15 Mar 2016 02:00:29 GMT

@Smart Solutions I don't think this is a Ranger specific issue. Get users/groups into Ranger can be done by provisioning to a file and using Ranger to sync from that file.

The bigger question is how would you realize groups at OS level or within Hadoop. If you are using SSSD, have you been able to make it work across multiple domains.

Re: How to configure multiple domains with Apache Ranger in HDP 2.3 ?

nsabharwal — Tue, 15 Mar 2016 02:33:12 GMT

@bganesan Thanks!

Re: How to configure multiple domains with Apache Ranger in HDP 2.3 ?

smartninja723 — Tue, 15 Mar 2016 18:45:46 GMT

Thanks @Neeraj Sabharwal

Re: How to configure multiple domains with Apache Ranger in HDP 2.3 ?

amcbarnett — Tue, 24 May 2016 21:41:51 GMT

Using Centrify with AD handles this

Re: How to configure multiple domains with Apache Ranger in HDP 2.3 ?

smartninja723 — Tue, 24 May 2016 23:28:38 GMT

Thanks @Ancil McBarnett.