This is an automated email from the ASF dual-hosted git repository.
weichiu pushed a commit to branch HDDS-9225-website-v2
in repository https://gitbox.apache.org/repos/asf/ozone-site.git
The following commit(s) were added to refs/heads/HDDS-9225-website-v2 by this
push:
new 7e8f6896f HDDS-14266. [Website v2] [Docs] [Administrator Guide]
Configuring Apache Ranger (#191)
7e8f6896f is described below
commit 7e8f6896fca1253299de07c1693da17ccae0f2a8
Author: KUAN-HAO HUANG <[email protected]>
AuthorDate: Fri Jan 2 05:20:01 2026 +0800
HDDS-14266. [Website v2] [Docs] [Administrator Guide] Configuring Apache
Ranger (#191)
---
.../02-configuration/03-security/03-ranger.md | 21 ++++++++++++++++++++-
1 file changed, 20 insertions(+), 1 deletion(-)
diff --git
a/docs/05-administrator-guide/02-configuration/03-security/03-ranger.md
b/docs/05-administrator-guide/02-configuration/03-security/03-ranger.md
index 76d5a8214..bfc7e6e7c 100644
--- a/docs/05-administrator-guide/02-configuration/03-security/03-ranger.md
+++ b/docs/05-administrator-guide/02-configuration/03-security/03-ranger.md
@@ -4,4 +4,23 @@ sidebar_label: Apache Ranger
# Configuring Apache Ranger
-**TODO:** File a subtask under
[HDDS-9859](https://issues.apache.org/jira/browse/HDDS-9859) and complete this
page or section.
+Apache Ranger™ is a framework to enable, monitor and manage comprehensive data
security across the Hadoop platform and beyond. Apache Ranger has supported
authorization for Ozone since version 2.0. However, due to improvements and bug
fixes, using the [latest release](https://ranger.apache.org/download.html) is
recommended.
+
+To use Apache Ranger, you must have Apache Ranger installed in your Hadoop
Cluster. For installation instructions of Apache Ranger, please take a look at
the [Apache Ranger website](https://ranger.apache.org/index.html).
+
+If you have a working Apache Ranger installation that is aware of Ozone, then
configuring Ozone to work with Apache Ranger is trivial. You have to enable the
ACLs support and set the acl authorizer class inside Ozone to be Ranger
authorizer. Please add the following properties to the `ozone-site.xml`.
+
+| Property | Value |
+|----------|-------|
+| `ozone.acl.enabled` | `true` |
+| `ozone.acl.authorizer.class` |
`org.apache.ranger.authorization.ozone.authorizer.RangerOzoneAuthorizer` |
+
+To use the `RangerOzoneAuthorizer`, you also need to add the following
environment variables to `ozone-env.sh`:
+
+```bash
+export OZONE_MANAGER_CLASSPATH="${OZONE_HOME}/share/ozone/lib/libext/*"
+```
+
+- The location of the ranger-ozone-plugin jars depends on where the Ranger
Plugin is installed.
+
+- If the ranger-ozone-plugin jars is installed on another node, copy it to the
Ozone installation directory.
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
