question Re: Security from Windows to Hadoop in Archives of Support Questions (Read Only)

Security from Windows to Hadoop

afdebbas — Mon, 31 Oct 2016 20:31:23 GMT

Hello

I am copying files from a windows shared folder into HDFS. There are a set of active directory permissions associated with each file on windows. How can i maintain the same permissions in HDFS?

Thanks

Ahamd

Re: Security from Windows to Hadoop

slachterman — Mon, 31 Oct 2016 21:42:39 GMT

@Ahmad Debbas you can sync your AD identities to Ranger via LDAP user sync, as well as to the Linux OS using SSSD, and then create Ranger policies which mimic the permissions that you have in Windows.

SSSD - https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/Windows_Integration_Guide/sssd-ad-integration.html

Ranger User Sync - https://docs.hortonworks.com/HDPDocuments/HDP2/HDP-2.3.4/bk_Ranger_Install_Guide/content/ranger_user_sync_ldap_ad.html

Ranger Policies - http://hortonworks.com/hadoop-tutorial/manage-security-policy-hive-hbase-knox-ranger/

Re: Security from Windows to Hadoop

afdebbas — Mon, 31 Oct 2016 21:53:18 GMT

This means i have to reassign these permissions manually? Is there a way to automate the assignment with the already present windows permissions?

Re: Security from Windows to Hadoop

slachterman — Mon, 31 Oct 2016 22:33:23 GMT

You can use the Ranger API to create policies as well, so you could script the appropriate API calls given the right input data from your source OS.