Created on 10-31-2019 02:23 AM - last edited on 10-31-2019 03:53 AM by VidyaSargur
Hello!
Urgent problem
I'm working on Cloudera Flow Management 1.0.1 and to evaluate the feasibility to move HDF to CDF.
I'm meeting a problem that is how to config the Multi-Tenant Authorization with kerberos/LDAP in cloudera manager.
Could you please help me for the following questions ?
For HDF, there is apache ranger can config and implement the Multi-Tenant Authorization. It can be config in Ranger Admin GUI. How can I do the Multi-Tenant Authorization like HDF with CFM?
Thanks,
Paul
Created 10-31-2019 06:40 AM
Ranger is not offered in CFM, but will become part of the platform in the future.
The only authorization offering within NiFi and NiFi-Registry within CFM is the local file based authorizer. NiFi user and group authorization is controlled via the NiFi UI instead of through an external authorization provider like Ranger. This same local file base authorization was also an option in HDF.
https://docs.cloudera.com/cfm/1.0.1/securing-cfm/topics/cfm-enabling-tls.html
You can configure NiFi to sync users and groups from LDAP also. You can then through the NiFi UI assign authorization policies to these sync'd user and groups.
Thank you,
Matt
https://docs.cloudera.com/cfm/1.0.1/securing-cfm/topics/cfm-nifi-user-sync-ldap-properties.html
Created 10-31-2019 06:40 AM
Ranger is not offered in CFM, but will become part of the platform in the future.
The only authorization offering within NiFi and NiFi-Registry within CFM is the local file based authorizer. NiFi user and group authorization is controlled via the NiFi UI instead of through an external authorization provider like Ranger. This same local file base authorization was also an option in HDF.
https://docs.cloudera.com/cfm/1.0.1/securing-cfm/topics/cfm-enabling-tls.html
You can configure NiFi to sync users and groups from LDAP also. You can then through the NiFi UI assign authorization policies to these sync'd user and groups.
Thank you,
Matt
https://docs.cloudera.com/cfm/1.0.1/securing-cfm/topics/cfm-nifi-user-sync-ldap-properties.html
Created 11-01-2019 12:13 AM