Stack Overflow
Stack Overflow

Questions tagged [apache-ranger]

Apache Ranger is a framework to enable, monitor and manage comprehensive data security across the Hadoop platform. The vision with Ranger is to provide comprehensive security across the Apache Hadoop ecosystem.

Apache Ranger has the following goals:

  • Centralized security administration to manage all security related tasks in a central UI or using REST APIs.
  • Fine grained authorization to do a specific action and/or operation with Hadoop component/tool and managed through a central administration tool Standardize authorization method across all Hadoop components.
  • Enhanced support for different authorization methods - Role based access control, attribute based access control etc.
  • Centralize auditing of user access and administrative actions (security related) within all the components of Hadoop.

References

Related Tags

115 questions
1
vote
1 answer

What determines what user / groups Ranger can see when setting policies?

Have users on local machines that have HDFS /user dirs that do not show up as possible users when setting Ranger policies I can see that Ranger already have a place where you can see and add users in the settings menu of the ranger UI, but not sure…
lampShadesDrifter
  • 3,925
  • 8
  • 40
  • 102
1
vote
1 answer

Can't start Kafka Connect: Timeout expired while fetching topic metadata

Trying to run Kafka Connect for the first time, with an existing Kafka deployment. using SASL_PLAINTEXT and kerberos authentication. The first time I try and start connect-distributed, I see: ERROR Uncaught exception in herder work thread, exiting: …
UtterlyConfused
  • 983
  • 1
  • 10
  • 18
1
vote
1 answer

User not found Error in Ranger Kylin plugin integration

I am working on Ranger Kylin plugin installation. And I have completed the plugin installation. Ranger is showing Kylin services and policy on its web page. Ranger admin UI is successfully connected with kylin and policy cache json file in…
Bharat Bhushan
  • 11
  • 1
1
vote
2 answers

Ranger Permissions | Hive table acess based on Partition Directory

I was looking for help on following usecase to be implemted by Ranger Authorization service in HDP. I have a hive table 'customer' which holds below two partitions loaded from…
Shashi
  • 2,686
  • 7
  • 35
  • 67
1
vote
0 answers

How to execute curl command from python script?

I was running curl command from unix shell for adding the users in ranger (hadoop) but I want to run the same curl command from python script, How to achieve the same ? Please find below curl command for the same : curl -u admin:admin -v -X POST…
Jay
  • 296
  • 10
  • 25
1
vote
0 answers

Apache Ranger cannot connect to Hive through spark sql

We have a working installation of Apache Ranger 1.0.0. We did hive service setup and defined policies on hive tables to restrict access. This hive service is using a jbdc connection string with port 10000 (default port). It is working fine. We tried…
Marsi
  • 115
  • 11
1
vote
1 answer

Is it possible to integrate an HDInsight cluster with on-premises AD?

I've tried domain joined HDInsight cluster by integrating the HDInsight with Azure AD. I would like to know, if this integration can also support On-prem AD ?
Vineesha.C
  • 333
  • 3
  • 13
1
vote
0 answers

In Apache Ranger, how to create service in hdfs-plugin with Rest Api call?

I am trying to create a service in hdfs-plugin. I am refering this link. I have tried below curl command: curl -H "Content-Type: application/json" -X POST -d '{"configs": {"password": "*****","username":…
user5431918
  • 107
  • 1
  • 6
1
vote
0 answers

Ranger Knox Plugin error

I am trying to enable Ranger Knox plugin. I created a service called 'knoxdev', test connection is successful. But still I am not able to see service 'knoxdev' in audit->plugin tab. I have hdfs plugin enabled too and service created for same as…
user5431918
  • 107
  • 1
  • 6
1
vote
0 answers

the role of GENERATE_EEK and GET_METADATA in hdfs transparent encryption

I am little unclear on what the ACL for GENERATE_EEK and GET_METADATA allow. From a naive understanding of HDFS transparent encryption it seems that GENERATE_EEK would be a request to generate an EDEK for an encryption zone (EZ). So say…
sunny
  • 824
  • 1
  • 14
  • 36
1
vote
1 answer

How to create reverse dns lookup zone for Premium HDInsight?

I have created a DNS zone in the azure. For example, for the IP range 192.0.2.128/26,I have created 128-26.2.0.192.in-addr.arpa. Now how should I create PTR records for Hdinsight vm's to be created ?
Vineesha.C
  • 333
  • 3
  • 13
1
vote
0 answers

How to enable the "service name" field in Apache Ranger's audits?

Is it possible to enable the "service name" field in Apache Ranger's audits ? This field is mentioned at: https://cwiki.apache.org/confluence/display/RANGER/Apache+Ranger+0.5+-+User+Guide#ApacheRanger0.5-UserGuide-Audit If yes, does it depend on the…
ml_mau5
  • 11
  • 3
1
vote
2 answers

How to add users to Apache Ranger via REST API

As in the title, how to manually add a user to Apache Ranger via REST API. Could you post an example of curl call? Could you post in addiction an url where i can find the docs for: http::6080/service/xusers/???
user2548436
  • 915
  • 2
  • 16
  • 35
0
votes
0 answers

Managing contents of SPARK_CONF_DIR on k8s

I am using Apache Spark and Ranger on Kubernetes using cluster mode. In order to integrate Ranger with Spark, I need to add xml files in the conf dir. The driver pod gets spun up as part of the spark submit. How can I add files to /opt/spark/conf…
Conundrum
  • 43
  • 1
  • 6
0
votes
0 answers

Issue with Apache-ranger setup

We are trying to setup Apache ranger using docker image using the commands mentioned below mkdir -p ${HOME}/git cd ${HOME}/git git clone https://github.com/apache/ranger.git cd ${HOME}/git/ranger …
Amit
  • 1
  • 1
1 2
3
4 5 6 7 8