THIS IS A TEST INSTANCE. ALL YOUR CHANGES WILL BE LOST!!!!
...
Install and configure Apache Solr in SolrCloud mode
You can refer here for instructioninstructions.
Solr Service in Ranger Admin
...
- Repeat the above process for all the Solr instances. You can reuse the same install.properties for all the servers.
- After these changes and enable-solr-plugin.sh are run on all the servers, restart
Configuring Solr for Ranger
Solr needs to be configured to use Ranger Authorization implementation. For that, run the following command on one of the Solr host
Code Block | ||
---|---|---|
| ||
$SOLR_INSTALL_HOME/server/scripts/cloud-scripts/zkcli.sh -zkhost $ZK_HOST:2181 -cmd put /solr/security.json '{"authentication":{"class": "org.apache.solr.security.KerberosPlugin"},"authorization":{"class": "org.apache.ranger.authorization.solr.authorizer.RangerSolrAuthorizer"}}'
|
In addition, please do following on all the Solr hosts
Code Block | ||
---|---|---|
| ||
mkdir -p /var/log/solr/audit/solr/spool
chown solr /var/log/solr/audit/solr/spool
mkdir -p /var/log/solr/audit/hdfs/spool
chown solr /var/log/solr/audit/hdfs/spool |
- Restart all the Solr instances
- You can check the solr.log for any errors
- You can verify by logging into the Ranger Admin Web interface > Audit > Plugins
- Make sure to create required policies for users. If users are getting denied, please check the audit logs.
...