Thanks Paul, very helpful for when setting up external clients and minimizing the privileges they have in Ranger. ... View more

For others that maybe have the same problem. The fix for us was to use the full username, setting the LDAP domain also:   user@REALM.COM   And for some tools the Use SASL option needs to be enabled. For example in Database Browser.   Hope it helps someone. ... View more

In that case, can you suggest a way to speed up the SSL communication with Impala ? Currently we are using Tableau to extract data from Impala. And with SSL activated, the data extraction is at least 30x to 100x slower than before. Did you see this behavior ? Do you have a remedy for it ? Thanks in advance. ... View more