Additional Steps for Apache Ranger
After installing Cloudera Manager and adding a cluster, there are additional steps required to complete the installation of Apache Ranger.
Enable Plugins
-
To enable the HDFS plugin:
- Login to Cloudera Manager.
- Go to the HDFS Service status page.
- Click the Configuration tab.
- Search for the Enable Ranger Authorization configuration property.
- If the Enable Ranger Authorization property is not selected, select it and save the changes.
- Go to the Ranger Service status page and click .
- Restart the HDFS service.
- To enable the Ranger Solr plugin:
Add Solr WebUI Users
Add the username of any users to the Ranger Solr policy who
should have access to the Solr Web UI in the Ranger Policy for Solr.
The user should have full access privileges.
Update the Time-to-live configuration for Ranger Audits
- Verify Ranger Configurations
- Verify that the username of any users who should have access to the Solr Web UI to the Ranger policy for Solr has been added to the Ranger Policy for Sol. The user should have full access privileges.
- Verify that the Time-to-live value is set appropriately by examining this file on
the SolrServer or Solr gateway host:
- Download the
configuration:
solrctl instancedir --get ranger_audits /tmp/ranger_audits
- Open the
tmp/ranger_audits/conf/solrconfig.xml
file and examine thettl
parameter (identified by:<str name="fieldName">ttl</str>
). - If you need to change the value, edit the file and then reload the
configuration by running the following command:
solrctl collection --reload ranger_audits
- Download the
configuration: