question Re: How to setup Ranger NiFi policy auth based on LDAP group ? in Archives of Support Questions (Read Only)

How to setup Ranger NiFi policy auth based on LDAP group ?

geko — Thu, 19 Oct 2017 15:35:05 GMT

Hi,

I setup HDF (in particular NiFi & Ranger) to fetch users&groups from AD and do auth against AD.

Defining policies in Ranger for NiFi, based on AD users, is working as expected after logging in to NiFi with AD credentials.

The only thing that is not working are the policies which grants access based on AD groups.

There is this article from almost a year ago. Does it still apply @Bryan Bende? Means, NiFi policies based on AD group membership is not working ?

Thanks in advance....

Re: How to setup Ranger NiFi policy auth based on LDAP group ?

bkosaraju — Thu, 19 Oct 2017 18:42:38 GMT

@Gerd Koenig,

Apperently Yes, Still this is the case with HDF 3.0, we have tried this a month back and eventually gave up after figuring out that this is not supported at this moment.

Re: How to setup Ranger NiFi policy auth based on LDAP group ?

MattWho — Thu, 19 Oct 2017 19:20:11 GMT

@Gerd Koenig

HDF 3.0 does not have support of Ranger groups or LDAP groups. This should be a new feature in the HDF release coming out early next year.

Thanks,

Matt

Re: How to setup Ranger NiFi policy auth based on LDAP group ?

geko — Fri, 20 Oct 2017 13:33:27 GMT

Hi @Matt Clarke , thanks for your reply. Will dive back into this with the release you mentioned.

You're saying "no support of Ranger or LDAP Groups", but support of Ranger is already there, although limited to user-based policies. Or did I misunderstand something here ?!?!

Re: How to setup Ranger NiFi policy auth based on LDAP group ?

MattWho — Fri, 20 Oct 2017 19:10:40 GMT

@Gerd Koenig

I edited my response to be more clear. While Ranger is supported, the use of Ranger Groups is not.

Thanks,

Matt