Member since
09-10-2015
261
Posts
85
Kudos Received
43
Solutions
My Accepted Solutions
Title | Views | Posted |
---|---|---|
1199 | 11-15-2018 10:21 PM | |
620 | 09-05-2018 09:03 PM | |
1217 | 03-19-2018 09:15 PM | |
912 | 03-16-2018 08:40 PM | |
504 | 02-09-2018 05:25 PM |
11-15-2018
10:21 PM
Looks like user does not have the right access in ranger.
... View more
11-15-2018
10:19 PM
Please look at import API. http://ranger.apache.org/apidocs/resource_ServiceREST.html#resource_ServiceREST_importPoliciesFromFile_POST
... View more
11-05-2018
05:10 PM
They are created during the component restart after ranger plugin is enabled. Check ambari console logs for the component (hdfs, hive etc) restarts to find out repo creation messages.
... View more
10-25-2018
06:16 PM
1 Kudo
This is probably similar to https://issues.apache.org/jira/browse/RANGER-2234. Please set auto increment value in your mysql conf to 1.
... View more
09-26-2018
06:14 PM
Can you post the error?
... View more
09-26-2018
06:13 PM
This seems to be caused by Ambari script not being able to talk to Ranger. Can you check the external URL defined in Ranger config?
... View more
09-26-2018
06:10 PM
EZK ==> Encryption Zone Key. Keys generated by users to encrypt encryption zones are EZKs. Not sure what you are asking below. >> is it possible to programmatically determine that Master Key and EZKs are correct >> is it possible to encrypt Master Key within Service Master Key and password?
... View more
09-05-2018
09:03 PM
Ranger KMS and Hive workloads will continue to work even when Ranger is down. They will use the local cache of ranger policies downloaded from Ranger. Each plugin pulls the policies periodically (default 30 sec) from Ranger. *** If you found this answer addressed your question, please take a moment to login and click the "accept" link on the answer.
... View more
09-05-2018
08:59 PM
-- Master key and EZK are stored in DB. -- If keys can be created and encryption zones can be setup successfully that is an indication. -- Postgres DB backup is a recommended way to backup keys stored in DB. *** If you found this answer addressed your question, please take a moment to login and click the "accept" link on the answer.
... View more
09-05-2018
08:55 PM
How many ranger admin instances are there? Looks like the install was triggered from more than one which caused this situation. I would suggest the below. -- Remove entry for PatchTagModulePermission_J10005 from x_db_version_h table -- Start only one ranger admin instance (at least to isolate this issue). -- Once the install is successful, you can start the other ranger admin instances. *** If you found this answer addressed your question, please take a moment to login and click the "accept" link on the answer.
... View more
06-12-2018
01:24 PM
What version of HDP is used here? In kerberos env, there is no need to setup 2-way SSL (from HDP 2.5 onwards). If kerberos is not used, 2-way SSL is required between Ranger plugins and Ranger Admin. Please refer https://docs.hortonworks.com/HDPDocuments/HDP2/HDP-2.6.5/bk_security/content/configure_hbase_plugin_ssl.html
... View more
06-04-2018
08:46 PM
HDP 2.6.4 should already have this fix, which was already back ported to HDP 2.6.3. https://docs.hortonworks.com/HDPDocuments/HDP2/HDP-2.6.3/bk_release-notes/content/fixed_issues.html
... View more
05-15-2018
07:06 PM
See https://issues.apache.org/jira/browse/HIVE-6415. Transform clause is disallowed.
... View more
05-15-2018
06:56 PM
What kind of integration are you planning?
... View more
05-15-2018
06:55 PM
Yes, and having the DB on its own host is recommended if possible.
... View more
05-08-2018
01:52 PM
This error means Ranger usersync is not able to communicate to Ranger admin to sync the users. Usersync uses kerberos to communicate to Ranger Admin. Make sure you have all the right keytabs for ranger components (if not, regenerate keytabs from Ambari) and the keytab files have right principals and permissions. Check for any errors in both usersync logs and ranger admin logs (are there any errors related to spnego keytab?)
... View more
04-27-2018
03:06 PM
Also take a look at https://community.hortonworks.com/content/supportkb/150187/unable-to-view-ranger-audit-when-ssl-is-enabled-on.html
... View more
04-27-2018
03:04 PM
Can you please take a look at the instructions in https://community.hortonworks.com/content/kbentry/92987/setup-ranger-to-use-ambari-infra-solr-enabled-in-s.html
... View more
04-27-2018
02:23 PM
@Abhilash Chandra 1. requestUser is a query parameter for the rest call, so there is no way to pass "<>". You would have to script from your end to see data for users you are interested in. 2. Yes, Ranger provides data in JSON format. You can present it as you like outside of Ranger. 3. From within Ranger UI, you should be able to use Access Audit tab to apply these filters on audit data.
... View more
04-27-2018
04:21 AM
yes, you can explore using that.
... View more
04-27-2018
04:20 AM
yes, that is true. Above Ambari patch mentioned was back-ported to Ambari used with IOP 4.2.5.
... View more
04-27-2018
04:19 AM
Do you have SSL enabled for Ranger?
... View more
04-27-2018
04:15 AM
Yes, the java patches are required to accommodate the changes in new versions.
... View more
04-27-2018
04:13 AM
1 Kudo
You can probably use /service/access/accessAudit api. Please note the parameter requestUser. For example... curl -k -i --header "Accept:application/json" -H "Content-Type: application/json" --user admin:admin -X GET "http://localhost:6080/service/assets/accessAudit?page=0&pageSize=25&startIndex=0&sortBy=eventTime&startDate=04%2F27%2F2018&requestUser=hive"
... View more
04-27-2018
04:01 AM
I don't think there is any straight way to get what you are looking for. May be you can query Ambari to get the status of the services?
... View more
04-03-2018
07:11 PM
AMBARI-18425 will be available in Ambari 2.7.0 (to be released). In the meanwhile, if using Ambari 2.6.x (with HDP 2.6.x), set the authentication method as UNIX and add a custom property ranger.pam.authentication.enabled in ranger-admin-site.xml and set it to true.
... View more
04-02-2018
05:50 PM
This is because of the Ambari version used, which will be addressed in the next version. https://issues.apache.org/jira/browse/AMBARI-18425
... View more
04-02-2018
03:55 PM
Can you check if there are any errors in ranger admin logs? That should give clue on why repository creation failed.
... View more
03-20-2018
01:12 AM
This functionality is not available. I am still not sure why this is required, because you can load the whole HDFS logs into a hive table and do analysis. If you'd like to store only a particular user's activity, you can perform the filtering when loading this data. If you store a second copy, it is just going to take more space.
... View more
03-19-2018
09:18 PM
Ranger stores all audit logs in Solr (for showing in Ranger UI) and in HDFS (for long-term archive). Could you please elaborate on why what you are asking is required?
... View more