How to configure multiple domains with Apache Ranger in HDP 2.3 ?

[#1]

Guys,

We have configured A/D with Ranger for a single domain on the Kerberized cluster. The customer requirement is to setup policies for multiple domains.(Namely 5 domains) How do we achieve this on HDP 2.3 cluster?

Thank you.

[#2 · Accepted solution]

@Smart Solutions

This is not possible yet as far as I know. @bganesan @bdurai

[#3]

Thanks @Neeraj Sabharwal

[#4]

@Smart Solutions I don't think this is a Ranger specific issue. Get users/groups into Ranger can be done by provisioning to a file and using Ranger to sync from that file.

The bigger question is how would you realize groups at OS level or within Hadoop. If you are using SSSD, have you been able to make it work across multiple domains.

[#5]

@bganesan Thanks!

[#6]

Using Centrify with AD handles this

[#7]

Thanks @Ancil McBarnett.