Created 03-14-2016 10:15 AM
Guys,
We have configured A/D with Ranger for a single domain on the Kerberized cluster. The customer requirement is to setup policies for multiple domains.(Namely 5 domains) How do we achieve this on HDP 2.3 cluster?
Thank you.
Created 03-14-2016 06:05 PM
This is not possible yet as far as I know. @bganesan @bdurai
Created 03-14-2016 06:05 PM
This is not possible yet as far as I know. @bganesan @bdurai
Created 03-15-2016 11:45 AM
Thanks @Neeraj Sabharwal
Created 03-14-2016 07:00 PM
@Smart Solutions I don't think this is a Ranger specific issue. Get users/groups into Ranger can be done by provisioning to a file and using Ranger to sync from that file.
The bigger question is how would you realize groups at OS level or within Hadoop. If you are using SSSD, have you been able to make it work across multiple domains.
Created 03-14-2016 07:33 PM
@bganesan Thanks!
Created 05-24-2016 02:41 PM
Using Centrify with AD handles this
Created 05-24-2016 04:28 PM
Thanks @Ancil McBarnett.