We are using NiFi (deployed by Ambari), with users authenticated by LDAP (FreeIPA), and authorisations by Ranger policies. Some of our policies include resource wildcards (e.g. /process-groups/*). As a result NiFi logs include Resources [...] include a wildcard value. Skipping policy for viewing purposes. Will still be used for access decisions. What does "Skipping policy for viewing purposes" mean? Is it viewing of the policy itself, or viewing of resource(s)? We are able to view the policies in Ranger Admin. Where would the thing be viewed? We are able to view the resources in the NiFi canvas.
... View more
I am running Ambari 2.7.3, HDP 3.0.1, and HDF 3.3.0 on RHEL 7.x. I've configured Auto Start globally ("recovery_enabled": "true", "recovery_type": "AUTO_START"), for all services, and for all components in Ambari. I'm testing what circumstances services/components are automatically started. It appears that: Action: Kill the processes of a service, on a remote host (e.g. `killall -u nifi`) Result: the service is automatically restarted Action: Shutdown/restart a remote host Result: services on host are restarted, shortly after boot Action: Shutdown/restart the ambari-server host Result: ambari-server and ambari-agent start on boot. No services or components are restarted. Is the third result expected? Is Auto Start meant to work when the Ambari server itself is restarted?
... View more