Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

  • The Repository Manager (visible upon user login) : add and manage service repositories
  • The Policy Manager tab : create and manage repository policies
  • The Users/Groups tab : assign policy permissions to users and groups
  • The Analytics tab : perform analytics on one or more HDFS, Hive, HBase, Knox or Storm policies
  • The Audit tab : monitor user activity at the resource level, and conditional auditing based on users, group or time

 

Repository Manager

 The Repository Manager is opened by defaul after you log into the Ranger Console. Therefore to access to it from any tab in the Ranger Console, simply click on Ranger at the top left corner.

...

  • To delete a repositoy from the Policy Manager : click the Delete icon to the right of the entry for that repository.

 

Repository configuration

  • HDFS Repository configuration
    • Repository Name : name of the repository; required when configuring agents
    • Description : a description of the repository
    • Active status : Enabled or Disabled
    • Repository Type : HDFS (cannot be modified)
    • User Name : end system username  that can be used for connection
    • fs.default.name : location of the Hadoop HDFS service, as noted in the Hadoop configuration file core-site.xml OR (if this is a HA environment) the path for the primary NameNode
    • hadoop.security.authorization : type of authorization in use, as noted in the Hadoop configuration file  core - site.xml . Can be either  simple or Kerberos (required only if authorization is enabled)
    • hadoop.security.auth_to_local : maps the login  credential to a username with Hadoop. Use  the value noted in the Hadoop configuration file, core -site.xml
    • dfs.datanode.kerberos.principal : principal associated with the DataNode where the repository resides, as noted in the Hadoop configuration file hdfs-site.xml (required only if Kerberos authentication is enabled)
    •  dfs.namenode.kerberos.principal : principal associated with the NameNode where the repository resides, as noted in the Hadoop configuration file hdfs-site.xml (required only if Kerberos authentication is enabled)
    • dfs.secondary.namenode.kerberos.principal : principal associated with the secondary NameNode where the repository resides, as noted in the Hadoop configuration file hdfs-site.xml  (required only if Kerberos authentication is enabled)
    • Common Name For Certificate : name of the certificate