Member since
09-25-2015
93
Posts
66
Kudos Received
19
Solutions
My Accepted Solutions
Title | Views | Posted |
---|---|---|
911 | 10-12-2017 08:30 PM | |
553 | 02-22-2017 12:19 AM | |
1130 | 02-01-2017 07:12 PM | |
912 | 01-23-2017 11:58 PM | |
505 | 12-06-2016 10:50 PM |
11-09-2017
07:09 PM
@Prashant Chaudhari you mentioned that ranger audits log to spool directory, do you mean that it just puts in local spool and not getting into HDFS? Do you see any exceptions in the NIFI log related to ranger audit please check.
... View more
11-06-2017
11:44 PM
@Jack Jackson I didnt have any issue building using the following, what error you get while building? mvn clean compile package assembly:assembly
... View more
10-12-2017
08:30 PM
If you want to to just use the a later version of ranger you can do it manually replace the jars with new jars after extracting or building the jars. Refer. https://cwiki.apache.org/confluence/display/RANGER/Apache+Ranger+0.5.0+Installation#ApacheRanger0.5.0Installation-Laydownthebuildintoappropriateplaces
... View more
09-28-2017
11:35 PM
1 Kudo
Are you using the Ambari Infra Solr, if so there are a property "Ranger audit service users" in Ambari infra, add your user in there and check.
... View more
09-28-2017
11:29 PM
@Jacqualin jasmin
Try changing it in Amabri respective Log4j configuration. I know in older versions it is not there. If it's there you can change it ( admin-log4j, usersync-log4j, tagsync-log4j section)
... View more
09-28-2017
11:23 PM
@Magesh Kumar Check in xa_portal.log what error you get when you configure db. Just FYI, DB is not supported anymore for Ranger audits and Solr is the option for you in later versions.
... View more
05-23-2017
01:27 AM
@li zhen Unit test are added in ranger 0.7. Please refer that and it should also work for you. https://github.com/apache/ranger/blob/ranger-0.7/hive-agent/src/test/java/org/apache/ranger/services/hive/HIVERangerAuthorizerTest.java
... View more
05-23-2017
01:21 AM
2 Kudos
@Jan Lenhardt is this a HA cluster? If so could you please link core-site.xml and hdfs-site.xml to the the ranger/conf folder, restart ranger and try?
... View more
02-22-2017
12:19 AM
Ranger audits the hdfs files and folders for which there is policy to audit, other request falls back to HDFS acl. Audit folders in hdfs for ranger audits are owned by respective component's super user ( when enabling plugin it gets created accordingly) and it has necessary hdfs acl to create the audit logs. Hence there is no circular dependency on this to audit back all the audits written into HDFS. As far as I know you can also start Ranger after HFDS is available, only thing while starting HDFS via Ambari, start service does checks which might take sometime before it come up, there is no relation to HDFS being Ranger's audit sink.
... View more
02-15-2017
01:55 AM
There is solution put around for this please refer https://issues.apache.org/jira/browse/RANGER-1310
... View more
02-07-2017
06:34 PM
We shall update the doc. I see that show databases is not there
... View more
02-07-2017
06:28 PM
1 Kudo
@khireswar Kalita what HDP version you are using? "Show Databases" when ranger is enabled will show only those databases which the user / group has access. Do you see the audits for your operation in ranger?
... View more
02-01-2017
07:12 PM
2 Kudos
@Javier Teixeira Quevedo
Also please check in ranger install folder /usr/hdp/2.XXXX/ranger-admin/ews/webapp/WEB-INF/classes/ranger-plugins , atlas/ranger-atlas-plugin.*.jar is present. This is same plugin jar which is part of atlas ranger plugin install. SOLUTION :
cp /usr/hdp/2.5.0.0-1245/atlas/libext/ranger-atlas-plugin-impl/ranger-atlas-plugin-0.6.0.2.5.0.0-1245.jar /usr/hdp/2.5.0.0-1245/ranger-admin/ews/webapp/WEB-INF/classes/ranger-plugins/atlas folder and not to /usr/hdp/2.5.0.0-1245/ranger-admin/ews/lib folder
... View more
01-30-2017
11:41 PM
@Jacqualin jasmin check that in Ambari the quick link what is the hostname it is used. If the hostname is not in your dns lookup /etc/host config in OS you might need to configure it to get the hostname resolved to correct IP and viceversa
... View more
01-23-2017
11:58 PM
@sreehari takkelapati you can bump the audit data in hdfs into hive table and do a report as needed for you. Please check this out.https://community.hortonworks.com/articles/60802/ranger-audit-in-hive-table-a-sample-approach-1.html
... View more
01-12-2017
10:25 PM
@Dinesh Das Ranger is not supported in HIVE CLI. What version of HDP are using? If Ranger Policy is not in effective may be the plugin is not enabled correctly or something wrong. Do you get any audit in Ranger admin? Also as @svenkat requested please provide your use case that will help us.
... View more
01-11-2017
07:09 PM
1 Kudo
@Dinesh Das Row Filtering and Column masking are supported in Ranger. This may cater your use case of column value level restriction. Please check it out and let us know is this what you were looking for? https://cwiki.apache.org/confluence/display/RANGER/Row-level+filtering+and+column-masking+using+Apache+Ranger+policies+in+Apache+Hive
... View more
12-22-2016
06:50 PM
@chennuri gouri shankar looks like you have a space in front of your ranger admin url. check it out and remove it if its there . " http://dm1.example.com:6080/service/plugins/policies/download/datametica"
... View more
12-21-2016
11:07 PM
1 Kudo
@Leslie Chang you need to check the service definition you created for your service Here is the sample one check for HIVE. check it out https://github.com/apache/incubator-ranger/blob/master/agents-common/src/test/resources/admin/service-defs/test-hive-servicedef.json
... View more
12-19-2016
04:40 PM
1 Kudo
S3 is not supported in Ranger as of now
... View more
12-16-2016
05:24 PM
I am not sure if this is Ranger related. Could you please provide hiveserver2.log?
... View more
12-14-2016
09:15 PM
@Prashobh Balasundaram which version of Ranger / HDP you are using, it may be that in your version that API is not there and later release has it
... View more
12-07-2016
09:11 PM
Make user "sami" belongs to hdfs group and then try hive command line.
... View more
12-06-2016
10:50 PM
1 Kudo
Looking at the error Permission denied: user=hive, access=EXECUTE, inode="/apps/hive/warehouse":hdfs:hdfs:d--------- it is hdfs which is doing the Authorization check and not allowing. Do you have the policy for the use "hive" if not create one with read, write and execute permission as your hdfs level permission is 000
... View more
12-05-2016
07:15 PM
@Sami Ahmad Check these documents https://cwiki.apache.org/confluence/display/RANGER/Install+and+Configure+Solr+for+Ranger+Audits+-+Apache+Ranger+0.5 https://community.hortonworks.com/questions/69582/ranger-trying-to-use-solr.html#answer-69584
... View more
12-01-2016
11:04 PM
You need to enable the "Audit to solr" Refer the documentation https://docs.hortonworks.com/HDPDocuments/HDP2/HDP-2.5.3/bk_security/content/using_apache_solr_for_ranger_audits.html
... View more
12-01-2016
02:00 AM
@Alexander Denissov may I know why you need to give authorization to just create database or schema alone? @Madhan Neethiraj Ping you on this to check if this is possible with current model. Please provide your input.
... View more
11-30-2016
11:25 PM
" Error: Client not found in Kerberos database while getting initial credentials" , is saying that principal 'hive' is not in the KDC , you need to create one to do a kinit with it.
... View more
11-30-2016
10:10 PM
Hive ranger plugin is only for HiveServer2 and not for Spark thrift Server. LLAP in HDP2.5 Tech preview would be another option for it.
... View more
11-28-2016
05:11 PM
2 Kudos
@Sriram Rangarajan Apache Ranger doesn't have a plugin for Hive Metastore as such. Ranger Plugin which is there is for HiveServer2. Please refer this doc for the supported plugins https://docs.hortonworks.com/HDPDocuments/HDP2/HDP-2.4.2/bk_installing_manually_book/content/installing_ranger_plugins.html. If you are specifically looking for Ranger Hive Metastore plugin it is in design stage and refer this https://cwiki.apache.org/confluence/display/RANGER/Design+Proposal+for+Hive+Metastore+Plugin Regarding your questions Q 1) Test connection config for Hive Plugin Please refer https://community.hortonworks.com/questions/25115/ranger-hive-repository-test-connection-fails-in-ke.html Q 2 ) No, you wont be able to see those Roles, its not supported in Ranger hive Plugin. In Ranger UI when you create policy you will see the Privileges like "select", "insert", "update", "delete" that you can assign to the user in the form of Permissions. But if you are creating a role say for example "marketing" and "finance" these won't appear in Ranger UI. Q 3) No, HDFS plugin is not mandatory for hive plugin to work. Q 4) Solr in ranger is used for storing the audit for the authorization done, it not mandatory, although you won't be able to avail the auditing feature in the ranger.
... View more