HDFS Ranger Plugin is not effective?

[#1]

After Enable HDFS Ranger Plugin, I create policy in default service. But there is error when I execute command to read a directory. Here is the example:

[#2]

can you please add execute permission along with read and retry

[#3]

Yes, I add before. But it can not affect. And I see xa_portal.log not change.

[#4]

can you please attach same set screenshot after you gave execute permission too, and please attache screenshot of plugin audit in ranger also ,

[#5]

OK.

hdfs-ranger-audit-bigdata001istuarycom.txt

[#6]

can you please check if policy refresh is happening , check plugin audit , on ranger ui audit tab , and see the entry for hdfs plugin audit or you can check access log in ranger admin logs.

[#7]

yes, I can see in '/etc/ranger/mytest_hadoop/policycache' path there is a file named 'hdfs_mytest_hadoop.json'. the file contains policies under service 'mytest_hadoop'.

[#8]

check the last time when was policy refreshed , is it before the policy edit time? then there is some issue with policy refresh that you can debug in ranger access logs and namenode logs too.

[#9]

@Zhao Chaofeng

What error you see after adding execute permission?

[#10]

Hi, I can use my allow user to cat the assigned directory. Such as I want to use user 'hive' to cat '/user/accumulo' after I set allowing permission in ranger policy, but when I execute the command, hdfs permission policy prevent it.