About skoneru

skoneru · ‎04-02-2018

Express or rolling upgrade stops all the services including Knox, but it does not impact upgrade process since client would have got cookie and it will be able to access ambari until the current session is alive or cookie is not lost/expired. Resoultion if cookie is lost/session is expired: client should use local login to access the Ambari and proceed further. eg: <ambari_host:ambari_port>/#/login/local

skoneru · ‎12-25-2017

Please, refer to the steps in https://community.hortonworks.com/articles/15159/securing-solr-collections-with-ranger-kerberos.html

skoneru · ‎09-29-2017

Try this REST call- http://<ranger_admin_url>/service/assets/accessAudit?repoType=3&resourceTable=db_1/test_table&resourceType=@table

skoneru · ‎06-28-2017

In case of spark-hive client, if no database is specified in the connection url, it uses default db and tries to use that, since there is no policy configured for default db it fails. So, create a Ranger policy for default db granting access, whereas in case of HSI client the connection doesn't use any database.

skoneru · ‎03-30-2017

@Deepak Sharma , when you say it worked, I am expecting, that you didn't do 2-way ssl and it's only one way by storing HS2 certificate in Knox host. Please confirm.

skoneru · ‎03-29-2017

@li zhen Few questions 1- Is this a HA cluster? If so, is Ranger configured to talk to LoadBalancer. If Loadbalancer is configured then there is an additional step that should be done as defined in this docs. https://docs.hortonworks.com/HDPDocuments/Ambari-2.4.1.0/bk_ambari-upgrade/content/upgrading_HDP_post_upgrade_tasks_ranger_kerberos.html 2- is this cluster initially simple and later kerberos is enabled? 3- Also for any download request, you will notice 401 followed by 200(if there are changes to policies in repo) or 401 followed by 304(when there is no change in policies for this repo)

skoneru · ‎03-29-2017

As Knox interacts with Ranger, please make sure that Ranger Admin cert is in Knox truststore(which is cacerts) on Knox host.

skoneru · ‎03-27-2017

1- check if hive.server2.use.SSL property is set to true on Hive front , 2- make sure the HS2 host certificate(that exists in /etc/security/serverKeys) is copied to cacerts on knox host 3- make sure the knox topology is referring to https://<hiveserver2_host>:<port>;

skoneru · ‎06-13-2016

What version of Ambari are you relying on?

Online	Offline
Last Visited	‎04-02-2018 05:43 AM

Member Since	‎06-13-2016 09:00 AM
Last Visited	‎04-02-2018 05:43 AM
Posts	10
Kudos received	30

Cloudera Community

Re: what are the steps for sso enabled cluster upg...

Re: solr api is throwing error Cannot find key of ...

Re: how to get audits related to a particular reso...

Re: Question about beeline connection using spark-...

Re: Knox Proxy for Ranger when WE is enabled,

Re: what are the steps for sso enabled cluster upg...

Re: solr api is throwing error Cannot find key of ...

Re: how to get audits related to a particular reso...

Re: Question about beeline connection using spark-...

Re: knox to hivserver2 call does not work on ssl c...

Re: Atlas Metadata server start fail with hbase ta...

Re: Knox Proxy for Ranger when WE is enabled,

Re: knox to hivserver2 call does not work on ssl c...

Re: how to install ranger on hdp2.4.2 when ambari ...