Configuring Ranger authorization for Solr in a DDE Data Hub cluster

By default, the Solr service deployed with a Data Discovery and Experience (DDE) cluster is not configured for authorization by Ranger. You can configure authorization manually, using Cloudera Management Console.

Minimum Required Role: environmentAdmin

  1. Navigate to the Ranger service of the data lake where DDE is running.


  2. On the Service Manager page, click Add next to Solr.


  3. Enter the following information on the Create Service page:

    Service Details

    Field name Description
    Service Name

    Assign a name to the Solr service you want to create.

    Note down the value you define here. You need to enter it later, when specifying the ranger.plugin.solr.service.name parameter in the Solr Service Advanced Configuration Snippet (Safety Valve) for ranger-solr-security.xml option.

    Active Status Enabled
    Select Tag Service Select cm_tag.

    Configuration Properties

    Field name Description
    Username You can assign any value. For this use case, this property bears no importance.
    Password You can assign any value. For this use case, this property bears no importance.
    Solr URL You can assign any value. For this use case, this property bears no importance.
    Add new configurations

    Add the following new configurations:

    • policy.download.auth.users = solr

    • tag.download.auth.users = solr

  4. Click Save.
  5. Click on the name of the newly added service.
  6. Under Action click Edit.
  7. In Allow Conditions > Select User dropdown select hue.
    This is necessary because the Hue service breaks if it has no permission to access Solr.

    To keep the cluster accessible to non-admin users, you can add other users to the default policy or you can define additional policies.

  8. Navigate to the Cloudera Manager (CM) UI on the DDE cluster.
  9. From Clusters select Solr.
  10. Click the Configuration tab.
  11. In the Search field start typing ‘safety’
  12. Click Add under Solr Service Advanced Configuration Snippet (Safety Valve).
  13. Define the following:
    Key
    ranger.plugin.solr.service.name
    Value

    The Solr Service Name you assigned when creating the Solr service in Ranger.

  14. Click Save Changes.
  15. Click the Status tab to refresh the window.
  16. Click the Stale Configuration: Restart needed indicator on top of the page.
  17. Click Restart Stale Services.
  18. Click Restart Now.