Additional Steps for Apache Ranger
After installing Cloudera Manager and adding a cluster, there are additional steps required to complete the installation of Apache Ranger.
Enable Plugins
-
To enable the HDFS plugin:
- Login to Cloudera Manager.
- Go to the HDFS Service status page.
- Click the Configuration tab.
- Search for the Enable Ranger Authorization configuration property.
- If the Enable Ranger Authorization property is not selected, select it and save the changes.
- Go to the Ranger Service status page and click .
- Restart the HDFS service.
- To enable the Ranger Solr plugin:
Add Solr WebUI Users
Add the username of any users to the Ranger Solr policy who
should have access to the Solr Web UI in the Ranger Policy for Solr.
The user should have full access privileges.
Update the Time-to-live configuration for Ranger Audits
How to change the default time settings that control how long Ranger keeps audit data collected by solr.
- From Cloudera Manager choose .
- In Search, type ranger.audit.solr.config, then press Return.
- In ranger.audit.solr.config.ttl, set the the number of days to keep audit data.
- In ranger.audit.solr.config.delete.trigger set the number and units (days, minutes, hours, or seconds) to keep data for expired documents
-
Refresh the configuration, using one of the following two options:
- Click Refresh Configuration, as prompted or, if Refresh Configuration does not appear,
- In Actions, click Update Solr config-set for Ranger, then confirm.