HDP-2.3.2 Release Notes
Also available as:
PDF

Ranger

HDP 2.3.2 provides Ranger 0.5.0 and the following Apache patches:

  • RANGER-551 Policy Validation: If resource levels are not valid for any hierarchy then checks about missing mandatory levels should be skipped

BUG FIXES

  • RANGER-560 Policy validation: Provide user friendly error messages about validation failures

  • RANGER-580 HBase plugin: Plugin may not work after upgrade

  • RANGER-584 Service validation: Provide user friendly error messages about validation failures

  • RANGER-587 ranger-admin-site.xml not getting updated when ranger.authentication.method is changed

  • RANGER-588 Take care of Ranger KMS installation even if 'java' is not in PATH

  • RANGER-593 Service def validation: Provide user friendly error messages about validation failures

  • RANGER-594 Policy Validation: Change the logic to generate friendly error messages to be like used for Service and Service def

  • RANGER-598 Update Ranger config migration script to work with Ranger 0.5

  • RANGER-615 Audit to db: Truncate all string values of audit record so that writing of audit does not fail

  • RANGER-618 KMS gets slower in key creation once Database grows

  • RANGER-621 Solr service-def JSON has incorrect impliedGrants for solr_admin permission

  • RANGER-622 Hive plugin: Add jar via beeline throws NPE

  • RANGER-623 Enable plugin scripts should handle file permissions for certain umask value

  • RANGER-624 Windows installation broken after SQLAnywhere support

  • RANGER-625 Change db flavor input parameter value from SQLAnywhere to SQLA

  • RANGER-627 Processing done by Audit Shutdown hooks can confuse someone looking at logs to think that shutdown of a service is held up due to Ranger plugin

  • RANGER-628 Make filters for ranger-admin search binds configurable

  • RANGER-630 Data consistency across API and UI

  • RANGER-632 Policy validation error messages produced by the server are not seen by the user

  • RANGER-637 Make REFERRAL property in Ranger User sync configurable

  • RANGER-638 Ranger admin should redirect back to login page when session cookies expires

  • RANGER-639 Storm plugin - commons-lang is a required dependency and hence should be packaged as part of storm plugin

  • RANGER-641 Ranger kms start fails if java is not set and started using service keyword

  • RANGER-642 Update USERSEARCHFILTER for Ranger Authentication on Windows

  • RANGER-653 Move delegated admin check to mgr layer from service layer for XPermMap and XAuditMap

HDP 2.3.0 provided Ranger 0.5.0 and the following Apache patches:

  • RANGER-422 Add additional database columns to support aggregation

  • RANGER-423 Support audit log aggregation in Ranger Admin UI

  • RANGER-513 Policy validation: resource hierarchies check does not work with single-node hierarchies as in HDFS

  • RANGER-551 Policy Validation: If resource levels are not valid for any hierarchy then checks about missing mandatory levels should be skipped.

  • RANGER-564 Add incubating to the release name

BUG FIXES

  • RANGER-219 Autocomplete behavior of hive tables/columns

  • RANGER-524 HBase plugin: list command should prune the tables returned on user permissions

  • RANGER-529 Policy Validation: resources of a policy must match one of the resource hierarchies of the service def.

  • RANGER-533 HBase plugin: if user does not have family-level access to any family in a table then user may be incorrectly denied access done at table/family level during get or scan

  • RANGER-539 Rolling downgrade changes

  • RANGER-545 Fix js error for lower versions of FF (less than 30)

  • RANGER-548 Key rollover command fails

  • RANGER-550 Hive plugin: Add audit logging support for metadata queries that have filtering support from hive

  • RANGER-553 Default policy creation during service creation should handle service defs with multiple hierarchies, e.g. hive, properly

  • RANGER-554 Ranger KMS keys listing page does not support pagination

  • RANGER-555 Policy view page (from access audit page) gives 404 with Oracle DB

  • RANGER-558 HBase plugin: unless user has READ access at some level under the table/family being accessed (via scan/get) authorizer should throw an exception and audit

  • RANGER-565 Ranger Admin install fails (sometimes) with IO Error when DB used in Oracle

  • RANGER-566 Installation of Ranger on Oracle 12c with shared database needs to use private synonym instead of public synonym

  • RANGER-569 Enabling Ranger plugin for HBase should not modify hbase.rpc.protection value

  • RANGER-570 Knox plugin: after upgrading ranger from 0.4 to 0.5 the Knox plugin won't work because classes with old names are missing

  • RANGER-571 Storm plugin: after upgrading ranger from 0.4 to 0.5 the plugin won't work because classes with old names are missing

  • RANGER-575 Allow KMS policies to be assigned to all users

  • RANGER-576 Storm audit not showing access type in the Ranger Admin Audit UI

HDP CHANGES

  • RANGER-450 Failed to install Ranger component due to Ranger policyManager script failures