question Does it need to ues Kerberos when install Ranger-storm plugin? in Archives of Support Questions (Read Only)

Does it need to ues Kerberos when install Ranger-storm plugin?

409556965 — Thu, 06 Oct 2016 16:16:48 GMT

Hi ALL:

We have successfully installed Storm Plugin for apache ranger, and we are also able to create policies within ranger, the problem is that when we click the Connection Test button after add a storm service,we got a error about Kerberos.The error report is that:

org.apache.ranger.plugin.client.HadoopException: executeUnderKerberos: Login failure using given configuration parameters, username : `admin`..

executeUnderKerberos: Login failure using given configuration parameters, username : `admin`.. kerberos.example.com: Name or service not known.

Hadoop Version:2.7.2

Ranger Version: 0.62

Storm Version:1.0.0

Any ideas or help in this regard will be appreciated.

Thanks in advance.

Regards,

Benny

Re: Does it need to ues Kerberos when install Ranger-storm plugin?

409556965 — Thu, 06 Oct 2016 16:20:13 GMT

we can see the plugin on Ranger admin in Audit >plugins tab

Re: Does it need to ues Kerberos when install Ranger-storm plugin?

mvaradkar — Thu, 06 Oct 2016 17:02:12 GMT

To enable ranger-storm-plugin need to have kerberos environment. Refer: Enabling Storm Plugin

Also link /etc/hadoop/conf/core-site.xml under /etc/storm/conf

Re: Does it need to ues Kerberos when install Ranger-storm plugin?

sshimpi — Thu, 06 Oct 2016 18:01:15 GMT

@hu bai Pls follow steps as per given on - https://github.com/abajwa-hw/security-workshops/blob/master/Setup-ranger-23.md#setup-storm-plugin-for-ranger

Re: Does it need to ues Kerberos when install Ranger-storm plugin?

409556965 — Thu, 06 Oct 2016 20:23:47 GMT

@Sagar Shimpi Thank you very much for you reply.Because I am a student ,I should study apache ranger wihtout Ambari. It also help for my work and thank you again for you reply.

Re: Does it need to ues Kerberos when install Ranger-storm plugin?

409556965 — Thu, 06 Oct 2016 20:34:13 GMT

@mvaradkar Thank you very much for you reply.we will follow you advice,and holp it will helps to solve the problem.thank you again.

Re: Does it need to ues Kerberos when install Ranger-storm plugin?

emaxwell — Sat, 08 Oct 2016 10:30:15 GMT

@hu bai

Contrary to popular belief, it is not necessary to enable Kerberos to use the Ranger plugin. Kerberos is for authentication, while Ranger does authorization. You can use other authentication techniques to identify the user, if you choose. Kerberos is a very secure and reliable way of authenticating a user, and that is why is is frequently used. However, you can use Unix auth or LDAP authentication in your cluster to identify the user. The username which submits the Storm topology is the one used for authorization with Ranger. Ranger will then use its policy information to determine what the user is allowed to do.

Re: Does it need to ues Kerberos when install Ranger-storm plugin?

aervits — Sat, 05 Nov 2016 00:18:30 GMT

@emaxwell just heard from engineering, in case of Storm, kerberos is required for Ranger authorization.