Cloudera Docs

Additional Steps for Apache Ranger

After installing Cloudera Manager and adding a cluster, there are additional steps required to complete the installation of Apache Ranger.

Enable Plugins

The Ranger plugins for HDFS and Solr may not be enabled by default. Ranger plugins enable Cloudera Manager stack components – such as HDFS and Solr – to connect to Ranger and access its authorization and audit services. Verify that the HDFS and Solr plugins are enabled after you install and start the Ranger service.
  1. To enable the HDFS plugin:
    1. Login to Cloudera Manager.
    2. Go to the HDFS Service status page.
    3. Click the Configuration tab.
    4. Search for the Enable Ranger Authorization configuration property.
    5. If the Enable Ranger Authorization property is not selected, select it and save the changes.
    6. Go to the Ranger Service status page and click Actions > Setup Ranger Plugin Service.
    7. Restart the HDFS service.
  2. To enable the Ranger Solr plugin:
    1. Login to Cloudera Manager.
    2. Go to the Solr Service status page.
    3. Click the Configuration tab.
    4. Search for the Enable Ranger Authorization configuration property.
    5. If the Enable Ranger Authorization property is not selected, select it and save the changes.
    6. Restart the Solr service.

Add Solr WebUI Users

Add the username of any users to the Ranger Solr policy who should have access to the Solr Web UI in the Ranger Policy for Solr. The user should have full access privileges.

Update the Time-to-live configuration for Ranger Audits

How to change the default time settings that control how long Ranger keeps audit data collected by solr.

  1. From Cloudera Manager choose Ranger > Configuration.
  2. In Search, type ranger.audit.solr.config, then press Return.
  3. In ranger.audit.solr.config.ttl, set the the number of days to keep audit data.
  4. In ranger.audit.solr.config.delete.trigger set the number and units (days, minutes, hours, or seconds) to keep data for expired documents
  5. Refresh the configuration, using one of the following two options:
    1. Click Refresh Configuration, as prompted or, if Refresh Configuration does not appear,
    2. In Actions, click Update Solr config-set for Ranger, then confirm.