(Optional) The Ranger components should already have installed in the at the beginning of the HDP upgrade process, but you can use the following commands to confirm that the Ranger packages have been installed:

hdp-select status ranger-admin
hdp-select status ranger-usersync

If the packages have not been installed, you can use the install commands specific to your OS. For example, for RHEL/CentOS you would use the following commands to install the packages.

yum install ranger_2_3_*-admin
yum install ranger_2_3_*-usersync

Select the Ranger Admin and Ranger UserSync versions you want to use.

hdp-select set ranger-admin <HDP_server_version>
hdp-select set ranger-usersync <HDP_server_version>

Change ownership of /etc/ranger/admin/conf/ and /etc/ranger/usersync/conf/ to ranger:ranger:

chown -R ranger:ranger /etc/ranger/admin/conf/

Update the install.properties file to migrate the database credentials properties and POLICYMGR_EXTERNAL-URL property from HDP 2.2. to HDP 2.4.0.

Install the Ranger Admin component. Be sure to set the JAVA_HOME environment variable if it is not already set.

cd /usr/hdp/current/ranger-admin/

cp ews/webapp/WEB-INF/classes/conf.dist/ranger-admin-site.xml ews/webapp/WEB-INF/classes/conf/

cp ews/webapp/WEB-INF/classes/conf.dist/ranger-admin-default-site.xml ews/webapp/WEB-INF/classes/conf/

cp ews/webapp/WEB-INF/classes/conf.dist/security-applicationContext.xml ews/webapp/WEB-INF/classes/conf/

./setup.sh

This should successfully install the Ranger Admin component.

Start the Ranger Admin component.

service ranger-admin start

You must now configure and setup the Ranger UserSync component by migrating the properties from the HDP 2.2 install.properties file (POLICY_MGR_URL, SYNC_SOURCE and LDAP/AD properties.

Install the Ranger UserSync component. Be sure to set the JAVA_HOME component if it is not already set.

cd /usr/hdp/current/ranger-usersync/

./setup.sh

Start the Ranger UserSync component.

service ranger-usersync start