Ranger installation is not as simple as Adding Service on Ambari. Ranger also requires DB and Solr for audit. In this tutorial we will go through installing Ranger or default postgres DB installed during Ambari Server installation. If you did a vanilla Ambari-server Install (HDP 2.4) you should have postgres running. Verify Default Post gresql running on Ambari-Server On the Ambari-Server if you run "ps -eaf | grep ambari | grep postgres" you should be able to verify postgres db running. 7450-screen-shot-2016-09-02-at-40606-pm.png We can see the process id is 9595. Running "netstat -anp | grep 9595" gives you the port number postgres DB is running on. We can try connecting using psql command. In our case it is running on default installation port 5432. 7451-screen-shot-2016-09-02-at-40711-pm.png Now Let's create DB for ranger and give it permissions. If you have sudo you can log into postgres with postgres user. For reference please take a look at (https://docs.hortonworks.com/HDPDocuments/HDP2/HDP-2.5.0/bk_security/content/configuring_postgresql_for_ranger.html) 7452-screen-shot-2016-09-02-at-44349-pm.png Confirm by running "\l" command 7453-screen-shot-2016-09-02-at-44319-pm.png Create Database ranger with user rangerdba. 7454-screen-shot-2016-09-02-at-44349-pm.png 7455-screen-shot-2016-09-02-at-44626-pm.png Create Database ranger_audit, with user ranger_logger. 7457-screen-shot-2016-09-02-at-50901-pm.png 7458-screen-shot-2016-09-02-at-50912-pm.png Alter Password for rangerlogger 7459-screen-shot-2016-09-02-at-50940-pm.png Verify Users via "/du" 7461-screen-shot-2016-09-02-at-50931-pm.png Verify databases with "/dt" 7460-screen-shot-2016-09-02-at-51302-pm.png Grant rangerlogger privileges 7462-screen-shot-2016-09-02-at-51311-pm.png The postgres database should have following databases ranger, ranger_audit created and users rangerdba and ranger_logger created. Install HDP search so Ranger Audit will work. ( https://docs.hortonworks.com/HDPDocuments/HDP2/HDP-2.5.0/bk_security/content/solr_ranger_configure_standalone.html) 7456-screen-shot-2016-09-02-at-45658-pm.png run setup and start solr 7463-screen-shot-2016-09-02-at-52719-pm.png 7465-screen-shot-2016-09-02-at-52805-pm.png You should see solr up and running at port 6083. Add Allow Access details for Ranger users: change listen_addresses='localhost' to listen_addresses='*' ('*' = any) to listen from all IPs in postgresql.conf . (You can find files by find ~name postgresql.conf) 7471-screen-shot-2016-09-02-at-102606-pm.png ake the following changes to the Ranger db user and Ranger audit db user in the pg_hba.conf file. after editing the pg_hba.conf file, run the following command to restart the PostgreSQL database. 7468-screen-shot-2016-09-02-at-102035-pm.png 7472-screen-shot-2016-09-02-at-102452-pm.png 7474-screen-shot-2016-09-02-at-103059-pm.png Below are my configuration screen captures(note I changed the user from ranger_admin to ranger_dba) 7475-screen-shot-2016-09-02-at-51020-pm.png 7476-screen-shot-2016-09-02-at-51053-pm.png 7477-screen-shot-2016-09-02-at-53137-pm.png 7478-screen-shot-2016-09-02-at-53149-pm.png ... View more