...
Installation Steps for Ranger-Admin
Untar the ranger-<verison>-admin.tar.gz
-> tar zxf ranger-<version>-admin.tar.gz
Change directory to ranger-<version>-admin
-> cd ranger-<version>-admin
- Edit install.properties (Enter appropriate values for the below given properties)
- Run setup
-> ./setup.sh Start Ranger admin server
-> ./ranger-admin-services.sh start
db_root_user= db_root_password= db_host= db_name= db_user= db_password= policymgr_external_url=http://<FQDN_OF_Ranger_Admin_Cluster>:6080 authentication_method=UNIX or LDAP or AD spnego_principal=HTTP/<FQDN_OF_Ranger_Admin_Cluster>@<REALM> spnego_keytab=<HTTP keytab path> token_valid=30 cookie_domain=<FQDN_OF_Ranger_Admin_Cluster> cookie_path=/ admin_principal=rangeradmin/<FQDN_OF_Ranger_Admin_Cluster>@<REALM> admin_keytab=<rangeradmin keytab path> lookup_principal=rangerlookup/<FQDN_OF_Ranger_Admin_Cluster>@<REALM> lookup_keytab=<rangerlookup keytab path> hadoop_conf=/etc/hadoop/conf |
Note: If kerberos server and admin are on different host then copy the keytab on admin host and assign permission to “ranger” user
- scp the rangeradmin keytab file to the respective path of another host
- chown ranger <rangeradmin keytab path>
- chmod 400 <rangeradmin keytab path>
Run setup
-> ./setup.sh
Start Ranger admin server
Installation Steps for Ranger-Usersync
Untar the ranger-<verison>-usersync.tar.gz
-> tar zxf ranger-<version>-usersync.tar.gz
Change directory to ranger-<version>-usersync
-> cd ranger-<version>-usersync
Edit install.properties (Enter appropriate values for the below given properties)
...
Run setup
-> ./setup.shStart Ranger usersync server
-> ./ranger-usersync-services.sh start
POLICY_MGR_URL =http://<FQDN_OF_Ranger_Admin_Cluster>:6080 usersync_principal=rangerusersync/<FQDN>@<REALM> usersync_keytab=<rangerusersync keytab path> hadoop_conf=/etc/hadoop/conf |
Note: If kerberos server and usersync are on different host then copy the keytab on usersync host and assign permission to “ranger” user
- scp the rangerusersync keytab file to the respective path of another host
- chown ranger <rangeusersync keytab path>
- chmod 400 <rangerusersync keytab path>
Run setup
./setup.sh
...
Start Ranger usersync server
...