Hortonworks Docs » Data Platform 3.0.0 » Providing Authorization with Apache Ranger

Providing Authorization with Apache Ranger

Also available as:

PDF

loading table of contents...

Using Ranger to Provide Authorization in Hadoop
Ranger Policies Overview
Using the Ranger Console
- Opening and Closing the Ranger Console
- Ranger Console Navigation
Resource-Based Services and Policies
Tag-Based Services and Policies
Create a Time-bound Policy
Administering Ranger Users/Groups and Permissions
Administering Ranger Reports
Adding a New Component to Apache Ranger
Configuring Advanced Authorization Settings

Configuring Advanced Authorization Settings

How to customize the Ranger Advanced Settings when configuring authentication.

Under Ambari > Ranger > Configs > Advanced

Developing a Custom Authorization Module
In the Hadoop ecosystem, each component (i.e., Hive, HBase) has its own authorization implementation and ability to plug in a custom authorization module. To implement the centralized authorization and audit feature for a component, the component should support a customizable (or pluggable) authorization module.
Special Requirements for High Availability Environments
In a High Availability (HA) environment, the primary and secondary NameNodes must be configured as described in the HDP System Administration Guide.
Configure Advanced Usersync Settings
To access Usersync settings, select the Advanced tab on the Customize Service page. Usersync pulls in users from UNIX, LDAP, or AD and populates Ranger's local user tables with these users.
Configure User Sync LDAP SSL
How to configure LDAP SSL using self-signed certs in the default Ranger User Sync TrustStore.
Set Up Database Users Without Sharing DBA Credentials
If you do not wish to provide system Database Administrator (DBA) account details to the Ambari Ranger installer, you can use the dba_script.py Python script to create Ranger DB database users without exposing DBA account information to the Ambari Ranger installer. You can then run the normal Ambari Ranger installation without specify a DBA user name and password.
Updating Ranger Admin Passwords
For certain users, if you update the passwords on the Ranger Configs page, you must also update the passwords on the Configs page of each Ambari component that has the Ranger plugin enabled.
Ranger Password Requirements
This topic lists password requirements for Ranger and Ranger KMS.

© 2012–2019, Hortonworks, Inc.

Document licensed under the Creative Commons Attribution ShareAlike 4.0 License.

Hortonworks.com | Documentation | Support | Community