To enable the Ranger HDFS plugin on a Kerberos-enabled cluster, perform the steps described below.
Create the system (OS) user hdfsuser. Make sure this user is synced to Ranger Admin (under users/groups tab in the Ranger Admin User Interface.
Create a Kerberos principal for hdfsuser by entering the following command:
kadmin.local -q 'addprinc -pw hdfsuser hdfsuser@example.com
Navigate to the HDFS service.
Click on the Config tab.
Navigate to advanced ranger-hdfs-plugin-properties and update the properties listed in the table shown below.
Table 5.1. HDFS Plugin Properties
Configuration Property Name Value Ranger repository config user hdfsuser@example.com Ranger repository config password hdfsuser common.name.for.certificate blank After updating these properties, click Save and restart the HDFS service.
