Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Install and configure Apache Solr in SolrCloud mode

You can refer here for instructioninstructions.

Solr Service in Ranger Admin

...

  • Repeat the above process for all the Solr instances. You can reuse the same install.properties for all the servers.
  • After these changes and enable-solr-plugin.sh are run on all the servers, restart

Configuring Solr for Ranger

Solr needs to be configured to use Ranger Authorization implementation. For that, run the following command on one of the Solr host

Code Block
languagebash
$SOLR_INSTALL_HOME/server/scripts/cloud-scripts/zkcli.sh -zkhost  $ZK_HOST:2181 -cmd put /solr/security.json '{"authentication":{"class": "org.apache.solr.security.KerberosPlugin"},"authorization":{"class": "org.apache.ranger.authorization.solr.authorizer.RangerSolrAuthorizer"}}'

In addition, please do following on all the Solr hosts

Code Block
languagebash
mkdir -p /var/log/solr/audit/solr/spool
chown solr /var/log/solr/audit/solr/spool
mkdir -p /var/log/solr/audit/hdfs/spool
chown solr /var/log/solr/audit/hdfs/spool
  • Restart all the Solr instances
  • You can check the solr.log for any errors
  • You can verify by logging into the Ranger Admin Web interface ­> Audit > Plugins
  • Make sure to create required policies for users. If users are getting denied, please check the audit logs.

...