Question of Ambari and Ranger account

[#1]

In Ranger, in order to assign a user to a policy ( directory access), that user must be in Ranger right. Is there a way to sync Ranger user account with Ambari user account. Why create multiple account in different system.

Is there a way to use Federated system, like google / facebook account. ??

what is the purpose of ranger user-sync ?

Thanks

[#2 · Accepted solution]

@Prakash Punj

Yes you are right. In production , we use AD/LDAP sync with Ranger and Ambari so there is no duplicate effort.

For testing, you have to create users in both setup.

Is there a way to use Federated system, like google / facebook account. ?? No

[#3]

Usersync pulls in users from UNIX, LDAP, or AD and populates Ranger's local user tables with these users.

[#4]

So how do i create a policy in Ranger for a specific user and see the policy implemented in e.g. HDFS or Hive?

Just create the user in both Ambari console and Ranger with the same username? The passwords have different formats though.

[#5]

Thanks @Neeraj Sabharwal

[#6]

@Prakash Punj

You will find this very userful http://ranger.apache.org/faq.html

[#7]

Thanks so much @Neeraj Sabharwal