Installing Apache Ranger with Ambari Postgresql

[#1]

Ranger installation is not as simple as Adding Service on Ambari.

Ranger also requires DB and Solr for audit.

In this tutorial we will go through installing Ranger or default postgres DB installed during Ambari Server installation.

If you did a vanilla Ambari-server Install (HDP 2.4) you should have postgres running.

1. Verify Default Post gresql running on Ambari-Server

   On the Ambari-Server if you run "ps -eaf | grep ambari | grep postgres" you should be able to verify postgres db running.

   7450-screen-shot-2016-09-02-at-40606-pm.png

2. We can see the process id is 9595. Running "netstat -anp | grep 9595" gives you the port number postgres DB is running on. We can try connecting using psql command. In our case it is running on default installation port 5432.

   7451-screen-shot-2016-09-02-at-40711-pm.png

3. Now Let's create DB for ranger and give it permissions. If you have sudo you can log into postgres with postgres user. For reference please take a look at (https://docs.hortonworks.com/HDPDocuments/HDP2/HDP-2.5.0/bk_security/content/configuring_postgresql_...)

   7452-screen-shot-2016-09-02-at-44349-pm.png

4. Confirm by running "\l" command

   7453-screen-shot-2016-09-02-at-44319-pm.png

5. Create Database ranger with user rangerdba.

   7454-screen-shot-2016-09-02-at-44349-pm.png

   7455-screen-shot-2016-09-02-at-44626-pm.png

6. Create Database ranger_audit, with user ranger_logger.

   7457-screen-shot-2016-09-02-at-50901-pm.png

   7458-screen-shot-2016-09-02-at-50912-pm.png

   Alter Password for rangerlogger 7459-screen-shot-2016-09-02-at-50940-pm.png

7. Verify Users via "/du"

   7461-screen-shot-2016-09-02-at-50931-pm.png

8. Verify databases with "/dt"

   7460-screen-shot-2016-09-02-at-51302-pm.png

9. Grant rangerlogger privileges

   7462-screen-shot-2016-09-02-at-51311-pm.png

10. The postgres database should have following databases ranger, ranger_audit created and users rangerdba and ranger_logger created.

11. Install HDP search so Ranger Audit will work. (

https://docs.hortonworks.com/HDPDocuments/HDP2/HDP-2.5.0/bk_security/content/solr_ranger_configure_s...

7456-screen-shot-2016-09-02-at-45658-pm.png

run setup and start solr

7463-screen-shot-2016-09-02-at-52719-pm.png

7465-screen-shot-2016-09-02-at-52805-pm.png

You should see solr up and running at port 6083.

Add Allow Access details for Ranger users: change listen_addresses='localhost' to listen_addresses='*' ('*' = any) to listen from all IPs in postgresql.conf. (You can find files by find ~name postgresql.conf)

7471-screen-shot-2016-09-02-at-102606-pm.png

ake the following changes to the Ranger db user and Ranger audit db user in the pg_hba.conf file. after editing the pg_hba.conf file, run the following command to restart the PostgreSQL database.

7468-screen-shot-2016-09-02-at-102035-pm.png

7472-screen-shot-2016-09-02-at-102452-pm.png

7474-screen-shot-2016-09-02-at-103059-pm.png

Below are my configuration screen captures(note I changed the user from ranger_admin to ranger_dba)

7475-screen-shot-2016-09-02-at-51020-pm.png

7476-screen-shot-2016-09-02-at-51053-pm.png

7477-screen-shot-2016-09-02-at-53137-pm.png

7478-screen-shot-2016-09-02-at-53149-pm.png

[#2]

@John Park just a comment that using the built in Ambari Infra SolrCloud deployment is likely simplest for using Solr to index the Ranger audit data. See https://docs.hortonworks.com/HDPDocuments/HDP2/HDP-2.5.0/bk_security/content/using_apache_solr_for_r...