Hadoop Security Guide
Also available as:
loading table of contents...

Configuring Ranger Plugins

The following section shows how to configure the Ranger HDFS plugin for SSL with a self-signed certificate. You can use the same procedure for other Ranger components. Additional steps required to configure the Ranger KMS plugin and server are provided in subsequent sections.

  • To ensure a successful connection after SSL is enabled, self-signed certificates should be imported to the Ranger Admin's trust store (typically JDK cacerts).

  • The ranger.plugin.<service>.policy.rest.ssl.config.file property should be verified, for example:

    ranger.plugin.hive.policy.rest.ssl.config.file ==> /etc/hive/conf/conf.server/ranger-policymgr-ssl.xml