Support Questions

Find answers, ask questions, and share your expertise

Security from Windows to Hadoop

avatar
Expert Contributor

Hello

I am copying files from a windows shared folder into HDFS. There are a set of active directory permissions associated with each file on windows. How can i maintain the same permissions in HDFS?

Thanks

Ahamd

1 ACCEPTED SOLUTION

avatar

@Ahmad Debbas you can sync your AD identities to Ranger via LDAP user sync, as well as to the Linux OS using SSSD, and then create Ranger policies which mimic the permissions that you have in Windows.

SSSD - https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/Windows_Integration_Gu...

Ranger User Sync - https://docs.hortonworks.com/HDPDocuments/HDP2/HDP-2.3.4/bk_Ranger_Install_Guide/content/ranger_user...

Ranger Policies - http://hortonworks.com/hadoop-tutorial/manage-security-policy-hive-hbase-knox-ranger/

View solution in original post

3 REPLIES 3

avatar

@Ahmad Debbas you can sync your AD identities to Ranger via LDAP user sync, as well as to the Linux OS using SSSD, and then create Ranger policies which mimic the permissions that you have in Windows.

SSSD - https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/Windows_Integration_Gu...

Ranger User Sync - https://docs.hortonworks.com/HDPDocuments/HDP2/HDP-2.3.4/bk_Ranger_Install_Guide/content/ranger_user...

Ranger Policies - http://hortonworks.com/hadoop-tutorial/manage-security-policy-hive-hbase-knox-ranger/

avatar
Expert Contributor

This means i have to reassign these permissions manually? Is there a way to automate the assignment with the already present windows permissions?

avatar

You can use the Ranger API to create policies as well, so you could script the appropriate API calls given the right input data from your source OS.