Cloudera Navigator 2 Requirements and Supported Versions

The following sections describe various requirements and supported versions of Cloudera Manager, databases, browsers, and CDH and managed service versions for Cloudera Navigator 2.

For more information on compatibility with other components, see the Cloudera Product Compatibility Matrix.

Cloudera Manager Requirements

Cloudera Navigator 2.3 is available with Cloudera Manager 5.4. For information on the requirements for installing Cloudera Manager, see Cloudera Manager 5 Requirements and Supported Versions.

Supported Databases

Cloudera Navigator, which stores audit reports, and entity metadata, policies, and user authorization and audit report metadata, supports the following databases:
  • MySQL - 5.1, 5.5 and 5.6
  • Oracle 11gR2

    The full version number of the Oracle JDBC driver supported by Cloudera Manager and CDH is: Oracle 11.2.0.3.0 JDBC 4.0 compiled with JDK6. The name of the JAR file for this driver is: ojdbc6.jar.

  • PostgreSQL - 8.1, 8.3, 8.4, 9.1, 9.2 and 9.3

Supported Browsers

The Cloudera Navigator UI, which you use to create and view audit reports, search and update metadata, and configure Cloudera Navigator user groups, supports the following browsers:
  • Mozilla Firefox 24 and higher
  • Google Chrome 36 and higher
  • Internet Explorer 11
  • Safari 5 and higher

Supported CDH and Managed Service Versions

This section describes the CDH and managed service versions supported by the Cloudera Navigator auditing and metadata features.

Cloudera Navigator Auditing

This section describes the audited operations and service versions supported by Cloudera Navigator auditing.
Component Operations (For details, see Audit Events). Minimum Supported Service Version
HDFS
  • Operations that access or modify a file's or directory's data or metadata
  • Operations denied due to lack of privileges
CDH 4.0.0
HBase
  • In CDH versions less than 4.2.0, for grant and revoke operations, the operation in log events is ADMIN
  • In simple authentication mode, if the HBase Secure RPC Engine property is false (the default), the username in log events is UNKNOWN. To see a meaningful user name:
    1. Click the HBase service.
    2. Click the Configuration tab.
    3. Select Service-wide > Security.
    4. Set the HBase Secure RPC Engine property to true.
    5. Save the change and restart the service.
CDH 4.0.0
Hive
  • Operations (except grant, revoke, and metadata access only) sent to HiveServer2
  • Operations denied due to lack of privileges
Limitations:
  • Actions taken against Hive using the Hive CLI are not audited. Therefore if you have enabled auditing you should disable the Hive CLI to prevent actions against Hive that are not audited.
  • In simple authentication mode, the username in log events is the username passed in the HiveServer2 connect command. If you do not pass a username in the connect command, the username is log events is anonymous.
CDH 4.2.0, CDH 4.4.0 for operations denied due to lack of privileges.
Hue
  • Operations (except grant, revoke, and metadata access only) sent through the Beeswax Server
You do not directly configure the Hue service for auditing. Instead, when you configure the Hive service for auditing, operations sent to the Hive service through Beeswax appear in the Hue service audit log.
CDH 4.4.0
Impala
  • Queries denied due to lack of privileges
  • Queries that pass analysis
Impala 1.2.1 with CDH 4.4.0
Navigator Metadata Server
  • Viewing and changing audit reports
  • Viewing and changing authorization configurations
  • Viewing and changing metadata
  • Viewing and changing policies
  • Viewing and changing saved searches
Cloudera Navigator 2.3
Sentry
  • Operations sent to the HiveServer2 and Hive Metastore Server roles and Impala service
  • Adding and deleting roles, assigning roles to groups and removing roles from groups, creating and deleting privileges, granting and revoking privileges
  • Operations denied due to lack of privileges
You do not directly configure the Sentry service for auditing. Instead, when you configure the Hive and Impala services for auditing, grant, revoke, and metadata operations appear in the Hive or Impala service audit logs.
CDH 5.1.0
Solr
  • Index creation and deletion
  • Schema and configuration file modification
  • Index, service, document tag access
CDH 5.4.0

Cloudera Navigator Metadata

This section describes the CDH and managed service versions supported by the Cloudera Navigator metadata feature.
Component Minimum Supported Version
HDFS. However, federated HDFS is not supported. CDH 4.4.0
Hive CDH 4.4.0
Impala CDH 5.4.0
MapReduce CDH 4.4.0
Oozie CDH 4.4.0
Pig CDH 4.6.0
Spark CDH 5.4.0
Sqoop 1. All Cloudera connectors are supported. CDH 4.4.0
YARN CDH 5.0.0