About frank93

frank93 · ‎09-12-2017

@Leonid Fedotov Have you disabled scheduler somehow? The problem is that any user can run scheduler as a user running Zeppelin. I am afraid that the only option is interference into the source code.

frank93 · ‎06-28-2017

@Jonas Straub @Vikas Gadade Thank you for clarify. Is there any workaround for that? Or is it fixed in HDP2.6? I also use SSSD + Kerberos only on management nodes. On Nodemanager hosts AD users does not exists thus YARN is not working.

frank93 · ‎06-20-2017

The problem was with case conversion. I got firstly Upper case conversion for groups, then created some policies, then changed to none conversion, but in .json files were still appearing Upper case converted group names

frank93 · ‎06-20-2017

Hi, I have a strange problem. I have configured Ranger Usersync with AD and it works good. All groups, users and group membership are synced correctly. Problem scenario: user1 belongs to groups group1 and group2. When I create policy (no matter what kind of - hdfs, hive, hbase) for group1, user1 has access. But when I create policy for group2, user1 does not have access. Both groups are returned when I run "hdfs groups user1". In Ranger GUI user1 belongs to both groups. The cluster was Kerberized one week ago, and I do not remember if both groups were working before Kerberos. HDP2.5 and Ranger 0.6.0. This is not a sandbox cluster. There are no errors in ranger/usersync logs. Do you have any ideas?

frank93 · ‎05-12-2017

I solved the problem by using MySQL master-master replication + MySQL Router as proxy. It works perfect!

frank93 · ‎05-11-2017

@Avijeet Dash As I remember I had problems with Hive View 1.5. Could you try using Hive View version 1.0?

frank93 · ‎05-11-2017

@Tom Stewart Did you define the group names in the [roles] section?

frank93 · ‎05-11-2017

Finally solved. I changed hbase.thrift.kerberos.principal to "HTTP/_HOST@myrealm" and now it works. Thanks for help.

frank93 · ‎05-10-2017

Och ok, thank you for explanation.

frank93 · ‎05-10-2017

@ed day Try this: wget http://public-repo-1.hortonworks.com/HDP/ubuntu14/2.x/updates/2.6.0.3/hdp.list

Online	Offline
Last Visited	‎02-02-2018 11:23 AM

Member Since	‎03-04-2016 02:22 PM
Last Visited	‎02-02-2018 11:23 AM
Posts	165
Kudos received	35

Cloudera Community

Re: Ranger policies not working for some groups

Re: HUE HBase Kerberos Authentication failed

Re: Getting OutOfMemoryError: GC overhead limit ex...

Re: HDP 2.3 to 2.5 Rolling Upgrade MySQL Requireme...

Re: Apache Ranger external user

Re: Scheduler in Zeppelin

Re: Adding a new user to the cluster

Re: Ranger policies not working for some groups

Ranger policies not working for some groups

Re: Hive database replication with MySQL Cluster

Re: Ambari HIVE view

Re: Zeppelin AD users not binded to groups

Re: HUE HBase Kerberos Authentication failed

Re: Error while installing HDP 2.4.2 using ambari....

Re: Can someone confirm these repos exist for HDP ...