@Sagar Shimpi Is it's FIPS 140-2 compliant ? I believe it's no afaik Ranger KMS is based on Hadoop KMS https://hadoop.apache.org/docs/stable/hadoop-kms/index.html ... View more

@Jasper Ranger service - configuration has details on which hadoop components is using Ranger for authorization and what policies are there which can be enabled / disabled / audited or not. These service definitions gets created when you enable ranger for the respective components from Ambari and restart the service These properties which are there against the services are used only for Test Connection and Lookup functionality which allows you to select the resource when you maintain policies, i.e auto population of the resource based on the resource name you are going to type in the field. e.g For Hive when you maintain policies if the "Database" field if there are multiple databases in hive and some of them starts with letter "d" and you type "d" in that field in brings up a list of databases which starts with "d". Same case with HDFS it will bring the matching directories for the "PATH". Same with other components too. To do this operation, Ranger communicates with respective hadoop component and brings those details. The user and config maintained here will be used for this communication and in kerberos it will be a service principal which will be used. These users will have policy to do these operations. This is the main purpose of these configuration and it DOESN'T stop you from using the RANGER plugin if the TEST CONNECTION / LOOKUP is not working. It is just for added convenience when maintaining policies. There are lot of misconception around it. In Kerberos environment in HDP 2.5 where ranger itself is kerberized , there are some "Add New Configuration" parameters get configured which maintains various users which communicates with Ranger admin to download policies, tags, service creation from ambari, service check etc. ... View more

I have received e-credit on my examlocal account. Now I will be able reschedule my exam again. ... View more

@Simran Kaur Please find answers inline - 1. a node means a server, right? No VM'S ? - Node means server. A server can be physical hardware or virtual machine also. 2. How many servers I would need to add to have a healthy cluster - It depends upon what type of configuration you use for production. Generally a broader question to discuss. For Master services I would recommend to deploy on individual node and slave nodes as per your requirement. In case of HA you need to revisit placement of the above services. master1 - Active NN,ZK,JN master1 - Standby NN, ZK, JN,RM, AM,HS master1 - Ambari, ZK, HIVE,SQOOP,OOZIE,HUE,Ranger,etc.. Slave Nodes - DN,N,etc.. 3. Which of the above mentioned services should be co-located? - For HDFS make sure JN should run most probably on both namenodes, also if possible you should have dedicated disk for JN and ZK. 4. What should be the distribution like? - You can go for n-1 distribution [where is n=latest stable release from hdp] You can migrate services after installation. ... View more