Member since
01-26-2016
8
Posts
9
Kudos Received
0
Solutions
02-05-2016
03:41 AM
2 Kudos
Hi @Neeraj Sabharwal I already resolved this problem by your suggestion. The points of key are the following columns in Advanced ranger-ugsync-site.
ranger.usersync.source.impl.class
org.apache.ranger.ldapusersync.process.LdapUserGroupBuilder
ranger.usersync.sink.impl.class
org.apache.ranger.ldapusersync.process.PolicyMgrUserGroupBuilder
There are no hints on the HDP 2.3.2 document. After these configuration, I could see the users of ldap server on my reanger UI. Thanks.
... View more
02-03-2016
10:15 AM
1 Kudo
HDP version: 2.3.4 Ambari: 2.1.1 First, I installed ranger service on ambari. Then I refer to the HDP document https://docs.hortonworks.com/HDPDocuments/HDP2/HDP-2.3.2/bk_Ranger_Install_Guide/content/configuring_ranger_authentication.html#ranger_ldap_settings and https://docs.hortonworks.com/HDPDocuments/HDP2/HDP-2.3.2/bk_Ranger_Install_Guide/content/ranger-usersync_settings.html I set several sections of ranger on ambari. Such as "Ranger Setting" "LDAP Settings" "Advanced ranger-ugsync-site". Unfortunately, when I login the ranger UI(http://RANGER_IP:6080), I could not see any user or group from my ldap server. In addition, if I set those configurations successfully, how can I verify it ? I Only verify in user/group page on Ranger UI. It is true? If the Hue service connect to ldap server, we only login from our accounts of ldap server. Does the ranger UI offers this method of verification ?
... View more
Labels:
- Labels:
-
Apache Ranger
01-26-2016
03:52 AM
2 Kudos
Kerberos version: 1.10.3-10 HBase version: 1.1.1 <Pre-condition> 1. Kerberos Installed <Reproduce steps> 1. use root to create hbase4 account 2. registered hbase4 in Kerberos server 3. change user to hbase4 ($su hbase4) 4. get ticket: kinit -k -t /etc/security/keytabs/hbase4.user.keytab hbase4@EXAMPLE.COM 5. $cd /usr/hdp/2.3.0.0-2557/hbase/bin 6. $./hbase shell 7. hbase(main):001:0> create 'results','name','scores' Actual Result:
ERROR: org.apache.hadoop.hbase.security.AccessDeniedException: Insufficient permissions (user=hbase4@EXAMPLE.COM, scope=default, params=
[namespace=default,table=default:results1,family=name|scores],action=CREATE)
... View more
Labels:
- Labels:
-
Apache HBase