Configuring Ranger Admin
Stop Ranger by selecting Service Actions > Stop.
Use the following steps to disable the HTTP port and enable the HTTPS port with the required keystore information.
Select Configs > Advanced. Under Ranger Settings, clear the HTTP enabled check box (this blocks all agent calls to the HTTP port even if the port is up and working).
Under Ranger Settings, provide the value in the External URL box in the format
https://<hostname of policy manager>:<https port>.
Under Advanced ranger-admin-site, set the following properties:
ranger.https.attrib.keystore.file-- Provide the location of the Public CA issued keystore file.ranger.service.https.attrib.keystore.pass-- Enter the password for the keystore.ranger.service.https.attrib.keystore.keyalias-- Enter the alias name for the keystore private key.ranger.service.https.attrib.clientAuth-- Enterwantas the value. This validates the client cert from all agents, but not the requests from web applications. Setting this value towantrequires the client to have a certificate to use to sign traffic. If you do not want to put certificates on the client machines to do two-way SSL, this parameter can be set tofalseto enable one-way SSL.ranger.service.https.attrib.ssl.enabled-- set this property totrue.ranger.service.https.port-- Make sure that this port is available, or change the value to an available port number.
Under Custom ranger-admin-site, add the following properties:
ranger.service.https.attrib.keystore.file-- Specify the same value provided for theranger.https.attrib.keystore.fileproperty.ranger.service.https.attrib.client.auth-- Specify the same value provided for theranger.service.https.attrib.clientAuthproperty.
To add a Custom ranger-admin-site property:
Select Custom ranger-admin-site, then click Add Property.
On the Add Property pop-up, type the property name in the Key box, type the property value in the Value box, then click Add.
Save your changes and start Ranger Admin.
When you attempt to access the Ranger Admin UI with the HTTPS protocol on the port specified by the
ranger.service.https.portproperty, the browser should report that it does not trust the site. Click Proceed anyway and you should be able to access the Ranger Admin UI over HTTPS.