Questions tagged [apache-ranger]

Apache Ranger is a framework to enable, monitor and manage comprehensive data security across the Hadoop platform. The vision with Ranger is to provide comprehensive security across the Apache Hadoop ecosystem.

Apache Ranger has the following goals:

  • Centralized security administration to manage all security related tasks in a central UI or using REST APIs.
  • Fine grained authorization to do a specific action and/or operation with Hadoop component/tool and managed through a central administration tool Standardize authorization method across all Hadoop components.
  • Enhanced support for different authorization methods - Role based access control, attribute based access control etc.
  • Centralize auditing of user access and administrative actions (security related) within all the components of Hadoop.

References

Related Tags

115 questions
0
votes
1 answer

"Host 'xxxx is not allowed to connect to this MySQL server" when installing Ranger DBs via Ambari

Trying to install an HDP cluster on 3 centos7 nodes (for testing / evaluation purposes) and am encountering errors at the part when am asked to configure DBs for Ranger and Ranger KMS. When running the connection tests for automated DB and DB user…
lampShadesDrifter
  • 3,925
  • 8
  • 40
  • 102
0
votes
0 answers

Ranger is not installing in Kerberos Hadoop cluster

I have installed the Kerberos Hadoop cluster from Ambari V2.7.3 and HDP 3.1.1 Now I am installing Apache ranger from Ambari In the same Hadoop cluster. But I am facing below errors while installing Ranger. RuntimeError: Failed to execute command…
pujara
  • 21
  • 1
  • 8
0
votes
0 answers

Apache Ranger is Failed to install in Kerberos Hadoop cluster

I have enabled Kerberos from Ambari 2.7.2 and tested authentication from Kafka and HBase.Now I have tried to install Apache Ranger for Authorization. using Mysql DB in Unix based. ranger admin is installed but ranger user-sync is not installing. I…
pujara
  • 21
  • 1
  • 8
0
votes
0 answers

One particular user alone not synced to Ranger from LDAP

We are using LDAP/AD sync source to sync users from LDAP to Apache Ranger. But as per our observation, only one particular user is not syncing to Ranger. We cross verified and confirmed that user is present at LDAP side with proper data as other…
Bukkasamudram
  • 351
  • 1
  • 2
  • 10
0
votes
0 answers

How to authenticate HBase user using java code which is configured with Apache ranger

I am using a ranger for HBase authorization. manually I created users in ranger and I tested. it is working. Now I want to pass the user from Java code to test the authorization for Hbase.
pujara
  • 21
  • 1
  • 8
0
votes
1 answer

Syncing Azure Data Lake Storage User permission with Apache Ranger & Active Directory

Architecture : Bigdata cluster deployed using Hortonworks Cloudbreak on Microsoft Azure with storage as Azure Data Lake Storage (ADLS). Users will be synced from clients Active Directory to Azure Active Directory. Apache Ranger will be used to…
0
votes
1 answer

How to get user accessible queues in YARN?

I use typical stack YARN/Ranger with atomic policies for accessing YARN queues. Having Hadoop user access, how to get list of queues that user has access to? I can see how it's usually done from admin side, but what about user? I went through yarn…
dimon222
  • 162
  • 2
  • 20
0
votes
1 answer

Is it connect to ssl without LDAP

My LDAP Server is SSL , If I need to connect to the LDAPS server . Do I need to enable SSL in my server to fetch the results from the server. Example : I'm trying to connect to Apache Ranger in HDP2.x . DO I need to enable SSL in Ranger machine to…
Varshini
  • 69
  • 10
0
votes
1 answer

NIFI nipyapi.nifi.rest.ApiException: (401) Reason: Unauthorized. KNOX Gateway

During handling of the above exception, another exception occurred: Traceback (most recent call last): File "/home/sam/Documents/freenet/nifi-automation/src/compose.py", line 122, in compose_services(env_config, types, NIFI_VERSION,…
Sam
  • 497
  • 1
  • 10
  • 34
0
votes
0 answers

Cannot start HBase master after migrating to Ranger authorisation

I've been trying to secure my Horton cluster such that authorisation goes via Ranger for file access. I have followed the best practise guide available on the Hortonworks site…
lgg
  • 83
  • 7
0
votes
1 answer

Apache Ranger 2.0.0-SNAPSHOT: unable to install and configure HDFS plugin

I've installed ranger-admin and ranger-usersync for apache hadoop-2.7.7. When I try to install, ranger-hdfs-plugin for the same, the service for the same isn't listed on ranger-admin UI (under service manager). The install.properties file for…
0
votes
1 answer

Ranger syncing with unix users

I have created two empty groups on two differentt nodes of my cluster, just one on each node. My ranger service uses unix user synchronization, when I restart the Ranger service I cant see my added groups to cluster nodes in Ranger UI, I use HDP…
Mat
  • 27
  • 1
  • 8
0
votes
1 answer

User:admin credentials on Ambari UI are not in sync with Ranger

Ambari shows me an alert message: "Ranger Admin password check User:admin credentials on Ambari UI are not in sync with Ranger" How I can resolve this ? What should I need to do. I have tried to set the same password for (amb_ranger_admin, admin,…
zh_
  • 95
  • 8
0
votes
1 answer

apache ranger with hive plugin - what objects need to be persisted

I have installed ranger and the ranger hive plugin, created some policies to enable authorisation of hive objects to certain users. Its working well. However if my machine where ranger is installed (an EC2) goes down then I assume I will need to…
0
votes
1 answer

Hadoop-Apache Ranger: StackOverflowError on namenode restart

I am getting this error after enabling hdfs plugin in apache ranger. When I run enable-hdfs-plugin.sh ranger adds following configuration in hdfs-site.xml. dfs.permissions.enabled true