very thanks for @Neeraj Sabharwal `s response in advance, 1. I have a little confused about how to setting the ip address ranger, am I suppose to specify namenode host ip? 2. What about earlier version of HDP like 2.3.0?
... View more
Executing consume/publish steps: Step1: connect to kafka-broker server step2: changer user
$ su kafka step3: go to bin folder
$ cd /usr/hdp/2.3.0.0-2557/kafka/bin step4: create a topic
$ ./kafka-topics.sh --create --zookeeper {hostname}:2181 --replication-factor 1 --partitions 1 --topic test step5: execute publish message
$ ./kafka-console-producer.sh --broker-list {hostname}:6667--topic test This is a test message
//it should be denied right? step6: execute consume message
$ ./kafka-console-consumer.sh --zookeeper {hostname}:2181 --topic test --from-beginning //it also should be denied?
... View more
BTW, the following steps are how I enabled ranger for kafka and executed Publish/Consume actions: 1. In kafka Configs > Advanced ranger-kafka-aduit > enable "Audit to DB" and changed value of "xasecure.audit.destination.hdfs.dir" to "hdfs://140.92.XX.XX:8020/ranger/audit" 2. Configs > Advanced ranger-kafka-plugin-properties > enable "Enable Ranger for KAFKA" 3. save changes and restart KAFKA 4. go to Ranger admin UI and I saw the repository of kafka has been created automatically
... View more
Hi @Neeraj Sabharwal, I still can not deny Publish and Consume actions,my policy setting as below: my environment is not a kerberized cluster and also I did not observe any records in Access of Audit,any suggestion? thanks.
... View more
I found in "ambari-web/app/models/stack_service.js" that we could comment out the "doNotShowAndInstall" function in order to show up Ranger or Ranger KMS in first installation.
... View more
