Member since
01-21-2019
122
Posts
12
Kudos Received
10
Solutions
My Accepted Solutions
| Title | Views | Posted |
|---|---|---|
| 8880 | 02-12-2019 04:26 AM |
02-12-2019
04:26 AM
@dhieru singh, If you enable atlas .authorizer.impl = ranger, then you need to add policies in ranger admin for atlas service. You can close the thread if above answer have resolved the issue. Thanks
... View more
02-11-2019
06:10 PM
Another question? Do I also need to cretae and add policy-store.txt , as of now I do not have any such file in the directory/usr/hdp/current/atlas-server/conf/. Do not add policy-store.txt for HDP3, Please check if atlas-simple-authz-policy.json present, if not add atlas-simple-authz-policy.json and edit the JSON file to add the role for your user holger_gov or its group. HTH
... View more
02-11-2019
10:32 AM
@dhieru singh can you please check if user holger_gov exists in users-credentials.properties stored in directory /usr/hdp/current/atlas-server/conf/
... View more
11-20-2017
10:45 PM
4 Kudos
The steps to set up Atlas with Ldaps (ssl) are below. Download the AD CA certificate on Atlas instance
echo -n | openssl s_client -connect ad.xx.xx.com:636 | sed -ne '/-BEGIN CERTIFICATE-/,/-END CERTIFICATE-/p' > /root/ldaps-ca.cert
View the certificate
openssl x509 -noout -text -in /root/ldaps-ca.cert
Import the AD CA certificate to trust-store in Atlas instance.
$JAVA_HOME/bin/keytool -import -alias AD -keystore /home/nixon/ad-truststore -file /root/ldaps-ca.cert
#remember the password used while importing into trust-store Verify the certificate added to trust-store.
$JAVA_HOME/bin/keytool -list -alias AD -keystore /etc/atlas/conf/ad-truststore
Change ownership of trust-store if needed
chown atlas:hadoop /etc/atlas/conf/ad-truststore
Add the following config to Atlas Advanced atlas-env metadata_opts via Ambari, so that ATLAS_OPTS is set within atlas-env.sh -Djavax.net.ssl.trustStore=/etc/atlas/conf/ad-truststore -Djavax.net.ssl.trustStorePassword=<password> Or can be added as env variable in atlas_start.py for atlas java process.
... View more
Labels: