Archives of Support Questions (Read Only)

This is an archived board for historical reference. Information and links may no longer be available or relevant
Announcements
This board is archived and read-only for historical reference. To ask a new question, please post a new topic on the appropriate active board.

Security from Windows to Hadoop

avatar
Expert Contributor

Hello

I am copying files from a windows shared folder into HDFS. There are a set of active directory permissions associated with each file on windows. How can i maintain the same permissions in HDFS?

Thanks

Ahamd

1 ACCEPTED SOLUTION

avatar

@Ahmad Debbas you can sync your AD identities to Ranger via LDAP user sync, as well as to the Linux OS using SSSD, and then create Ranger policies which mimic the permissions that you have in Windows.

SSSD - https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/Windows_Integration_Gu...

Ranger User Sync - https://docs.hortonworks.com/HDPDocuments/HDP2/HDP-2.3.4/bk_Ranger_Install_Guide/content/ranger_user...

Ranger Policies - http://hortonworks.com/hadoop-tutorial/manage-security-policy-hive-hbase-knox-ranger/

View solution in original post

3 REPLIES 3

avatar

@Ahmad Debbas you can sync your AD identities to Ranger via LDAP user sync, as well as to the Linux OS using SSSD, and then create Ranger policies which mimic the permissions that you have in Windows.

SSSD - https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/Windows_Integration_Gu...

Ranger User Sync - https://docs.hortonworks.com/HDPDocuments/HDP2/HDP-2.3.4/bk_Ranger_Install_Guide/content/ranger_user...

Ranger Policies - http://hortonworks.com/hadoop-tutorial/manage-security-policy-hive-hbase-knox-ranger/

avatar
Expert Contributor

This means i have to reassign these permissions manually? Is there a way to automate the assignment with the already present windows permissions?

avatar

You can use the Ranger API to create policies as well, so you could script the appropriate API calls given the right input data from your source OS.