Repository: incubator-ranger Updated Branches: refs/heads/master 62a3bd07a -> 839884094
http://git-wip-us.apache.org/repos/asf/incubator-ranger/blob/83988409/migration-util/bin/ranger_hive_plugin_install.properties ---------------------------------------------------------------------- diff --git a/migration-util/bin/ranger_hive_plugin_install.properties b/migration-util/bin/ranger_hive_plugin_install.properties deleted file mode 100755 index f4fbfd2..0000000 --- a/migration-util/bin/ranger_hive_plugin_install.properties +++ /dev/null @@ -1,132 +0,0 @@ -# Licensed to the Apache Software Foundation (ASF) under one or more -# contributor license agreements. See the NOTICE file distributed with -# this work for additional information regarding copyright ownership. -# The ASF licenses this file to You under the Apache License, Version 2.0 -# (the "License"); you may not use this file except in compliance with -# the License. You may obtain a copy of the License at -# -# http://www.apache.org/licenses/LICENSE-2.0 -# -# Unless required by applicable law or agreed to in writing, software -# distributed under the License is distributed on an "AS IS" BASIS, -# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. -# See the License for the specific language governing permissions and -# limitations under the License. - - -# Below are the mandatory parameters, required to be filled in by the user. - -# -# This is the repository name created within policy manager -# -# Example: -# REPOSITORY_NAME=hivedev -# -# Mandatory properties for migration to be filled by user prior to migration. -# REPOSITORY_NAME = needs to be updated by user before running the migration script. -REPOSITORY_NAME= - - -# -# Should Hive GRANT/REVOKE update XA policies? -# -# Example: -# UPDATE_XAPOLICIES_ON_GRANT_REVOKE=true -# UPDATE_XAPOLICIES_ON_GRANT_REVOKE=false -# -# Mandatory property for migration to be filled by user prior to migration. -# UPDATE_XAPOLICIES_ON_GRANT_REVOKE = needs to be updated by user before running the migration script. -UPDATE_XAPOLICIES_ON_GRANT_REVOKE=true - - - - -# Below are the non-mandatory parameters, not required to be filled in by the user. - - -# -# Location of Policy Manager URL -# -# Example: -# POLICY_MGR_URL=http://policymanager.xasecure.net:6080 -# -POLICY_MGR_URL= - -# -# Location of db client library (please check the location of the jar file) -# -# Example: -# SQL_CONNECTOR_JAR=/usr/share/java/mysql-connector-java.jar -# SQL_CONNECTOR_JAR=/usr/share/java/ojdbc6.jar -# -SQL_CONNECTOR_JAR=/usr/share/java/mysql-connector-java.jar - - - -# -# AUDIT DB Configuration -# -# This information should match with the one you specified during the PolicyManager Installation -# -# Example: -# XAAUDIT.DB.IS_ENABLED=true -# XAAUDIT.DB.FLAVOUR=MYSQL -# XAAUDIT.DB.FLAVOUR=ORACLE -# XAAUDIT.DB.HOSTNAME=localhost -# XAAUDIT.DB.DATABASE_NAME=ranger_audit -# XAAUDIT.DB.USER_NAME=rangerlogger -# XAAUDIT.DB.PASSWORD=rangerlogger -# -XAAUDIT.DB.IS_ENABLED=false -XAAUDIT.DB.FLAVOUR=MYSQL -XAAUDIT.DB.HOSTNAME= -XAAUDIT.DB.DATABASE_NAME= -XAAUDIT.DB.USER_NAME= -XAAUDIT.DB.PASSWORD= - -# -# Audit to HDFS Configuration -# -# If XAAUDIT.HDFS.IS_ENABLED is set to true, please replace tokens -# that start with __REPLACE__ with appropriate values -# XAAUDIT.HDFS.IS_ENABLED=true -# XAAUDIT.HDFS.DESTINATION_DIRECTORY=hdfs://__REPLACE__NAME_NODE_HOST:8020/ranger/audit/%app-type%/%time:yyyyMMdd% -# XAAUDIT.HDFS.LOCAL_BUFFER_DIRECTORY=__REPLACE__LOG_DIR/hive/audit/%app-type% -# XAAUDIT.HDFS.LOCAL_ARCHIVE_DIRECTORY=__REPLACE__LOG_DIR/hive/audit/archive/%app-type% -# -# Example: -# XAAUDIT.HDFS.IS_ENABLED=true -# XAAUDIT.HDFS.DESTINATION_DIRECTORY=hdfs://namenode.example.com:8020/ranger/audit/%app-type%/%time:yyyyMMdd% -# XAAUDIT.HDFS.LOCAL_BUFFER_DIRECTORY=/var/log/hive/audit/%app-type% -# XAAUDIT.HDFS.LOCAL_ARCHIVE_DIRECTORY=/var/log/hive/audit/archive/%app-type% -# -XAAUDIT.HDFS.IS_ENABLED=false -XAAUDIT.HDFS.DESTINATION_DIRECTORY=hdfs://__REPLACE__NAME_NODE_HOST:8020/ranger/audit/%app-type%/%time:yyyyMMdd% -XAAUDIT.HDFS.LOCAL_BUFFER_DIRECTORY=__REPLACE__LOG_DIR/hive/audit/%app-type% -XAAUDIT.HDFS.LOCAL_ARCHIVE_DIRECTORY=__REPLACE__LOG_DIR/hive/audit/archive/%app-type% - -XAAUDIT.HDFS.DESTINTATION_FILE=%hostname%-audit.log -XAAUDIT.HDFS.DESTINTATION_FLUSH_INTERVAL_SECONDS=900 -XAAUDIT.HDFS.DESTINTATION_ROLLOVER_INTERVAL_SECONDS=86400 -XAAUDIT.HDFS.DESTINTATION_OPEN_RETRY_INTERVAL_SECONDS=60 -XAAUDIT.HDFS.LOCAL_BUFFER_FILE=%time:yyyyMMdd-HHmm.ss%.log -XAAUDIT.HDFS.LOCAL_BUFFER_FLUSH_INTERVAL_SECONDS=60 -XAAUDIT.HDFS.LOCAL_BUFFER_ROLLOVER_INTERVAL_SECONDS=600 -XAAUDIT.HDFS.LOCAL_ARCHIVE_MAX_FILE_COUNT=10 - -# -# SSL Client Certificate Information -# -# Example: -# SSL_KEYSTORE_FILE_PATH=/etc/hive/conf/ranger-plugin-keystore.jks -# SSL_KEYSTORE_PASSWORD=none -# SSL_TRUSTSTORE_FILE_PATH=/etc/hive/conf/ranger-plugin-truststore.jks -# SSL_TRUSTSTORE_PASSWORD=none -# -# You do not need use SSL between agent and security admin tool, please leave these sample value as it is. -# -SSL_KEYSTORE_FILE_PATH=/etc/hive/conf/ranger-plugin-keystore.jks -SSL_KEYSTORE_PASSWORD=myKeyFilePassword -SSL_TRUSTSTORE_FILE_PATH=/etc/hive/conf/ranger-plugin-truststore.jks -SSL_TRUSTSTORE_PASSWORD=changeit - http://git-wip-us.apache.org/repos/asf/incubator-ranger/blob/83988409/migration-util/bin/ranger_knox_plugin_install.properties ---------------------------------------------------------------------- diff --git a/migration-util/bin/ranger_knox_plugin_install.properties b/migration-util/bin/ranger_knox_plugin_install.properties deleted file mode 100755 index b314560..0000000 --- a/migration-util/bin/ranger_knox_plugin_install.properties +++ /dev/null @@ -1,122 +0,0 @@ -# Licensed to the Apache Software Foundation (ASF) under one or more -# contributor license agreements. See the NOTICE file distributed with -# this work for additional information regarding copyright ownership. -# The ASF licenses this file to You under the Apache License, Version 2.0 -# (the "License"); you may not use this file except in compliance with -# the License. You may obtain a copy of the License at -# -# http://www.apache.org/licenses/LICENSE-2.0 -# -# Unless required by applicable law or agreed to in writing, software -# distributed under the License is distributed on an "AS IS" BASIS, -# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. -# See the License for the specific language governing permissions and -# limitations under the License. - - -# Below are the mandatory parameters, required to be filled in by the user. - - - -# -# This is the repository name created within policy manager -# -# Example: -# REPOSITORY_NAME=knoxdev -# -# Mandatory properties for migration to be filled by user prior to migration. -# REPOSITORY_NAME = needs to be updated by user before running the migration script. -REPOSITORY_NAME= - - -# Below are the non-mandatory parameters, not required to be filled in by the user. - - -# -# Location of Policy Manager URL -# -# Example: -# POLICY_MGR_URL=http://policymanager.xasecure.net:6080 -# -POLICY_MGR_URL= - -# -# Location of db client library (please check the location of the jar file) -# -# Example: -# SQL_CONNECTOR_JAR=/usr/share/java/mysql-connector-java.jar -# SQL_CONNECTOR_JAR=/usr/share/java/ojdbc6.jar -# -SQL_CONNECTOR_JAR=/usr/share/java/mysql-connector-java.jar - - - -# KNOX_HOME directory, would contain conf/, ext/ subdirectories -KNOX_HOME= - - -# AUDIT DB Configuration -# -# This information should match with the one you specified during the PolicyManager Installation -# -# Example: -# XAAUDIT.DB.IS_ENABLED=true -# XAAUDIT.DB.FLAVOUR=MYSQL -# XAAUDIT.DB.FLAVOUR=ORACLE -# XAAUDIT.DB.HOSTNAME=localhost -# XAAUDIT.DB.DATABASE_NAME=ranger_audit -# XAAUDIT.DB.USER_NAME=rangerlogger -# XAAUDIT.DB.PASSWORD=rangerlogger -# -XAAUDIT.DB.IS_ENABLED=false -XAAUDIT.DB.FLAVOUR=MYSQL -XAAUDIT.DB.HOSTNAME= -XAAUDIT.DB.DATABASE_NAME= -XAAUDIT.DB.USER_NAME= -XAAUDIT.DB.PASSWORD= - -# -# Audit to HDFS Configuration -# -# If XAAUDIT.HDFS.IS_ENABLED is set to true, please replace tokens -# that start with __REPLACE__ with appropriate values -# XAAUDIT.HDFS.IS_ENABLED=true -# XAAUDIT.HDFS.DESTINATION_DIRECTORY=hdfs://__REPLACE__NAME_NODE_HOST:8020/ranger/audit/%app-type%/%time:yyyyMMdd% -# XAAUDIT.HDFS.LOCAL_BUFFER_DIRECTORY=__REPLACE__LOG_DIR/knox/audit -# XAAUDIT.HDFS.LOCAL_ARCHIVE_DIRECTORY=__REPLACE__LOG_DIR/knox/audit/archive -# -# Example: -# XAAUDIT.HDFS.IS_ENABLED=true -# XAAUDIT.HDFS.DESTINATION_DIRECTORY=hdfs://namenode.example.com:8020/ranger/audit/%app-type%/%time:yyyyMMdd% -# XAAUDIT.HDFS.LOCAL_BUFFER_DIRECTORY=/var/log/knox/audit -# XAAUDIT.HDFS.LOCAL_ARCHIVE_DIRECTORY=/var/log/knox/audit/archive -# -XAAUDIT.HDFS.IS_ENABLED=false -XAAUDIT.HDFS.DESTINATION_DIRECTORY=hdfs://__REPLACE__NAME_NODE_HOST:8020/ranger/audit/%app-type%/%time:yyyyMMdd% -XAAUDIT.HDFS.LOCAL_BUFFER_DIRECTORY=__REPLACE__LOG_DIR/knox/audit -XAAUDIT.HDFS.LOCAL_ARCHIVE_DIRECTORY=__REPLACE__LOG_DIR/knox/audit/archive - -XAAUDIT.HDFS.DESTINTATION_FILE=%hostname%-audit.log -XAAUDIT.HDFS.DESTINTATION_FLUSH_INTERVAL_SECONDS=900 -XAAUDIT.HDFS.DESTINTATION_ROLLOVER_INTERVAL_SECONDS=86400 -XAAUDIT.HDFS.DESTINTATION_OPEN_RETRY_INTERVAL_SECONDS=60 -XAAUDIT.HDFS.LOCAL_BUFFER_FILE=%time:yyyyMMdd-HHmm.ss%.log -XAAUDIT.HDFS.LOCAL_BUFFER_FLUSH_INTERVAL_SECONDS=60 -XAAUDIT.HDFS.LOCAL_BUFFER_ROLLOVER_INTERVAL_SECONDS=600 -XAAUDIT.HDFS.LOCAL_ARCHIVE_MAX_FILE_COUNT=10 - -# -# SSL Client Certificate Information -# -# Example: -# SSL_KEYSTORE_FILE_PATH=/etc/knox/conf/ranger-plugin-keystore.jks -# SSL_KEYSTORE_PASSWORD=none -# SSL_TRUSTSTORE_FILE_PATH=/etc/knox/conf/ranger-plugin-truststore.jks -# SSL_TRUSTSTORE_PASSWORD=none -# -# You do not need use SSL between agent and security admin tool, please leave these sample value as it is. -# -SSL_KEYSTORE_FILE_PATH=/etc/knox/conf/ranger-plugin-keystore.jks -SSL_KEYSTORE_PASSWORD=myKeyFilePassword -SSL_TRUSTSTORE_FILE_PATH=/etc/knox/conf/ranger-plugin-truststore.jks -SSL_TRUSTSTORE_PASSWORD=changeit http://git-wip-us.apache.org/repos/asf/incubator-ranger/blob/83988409/migration-util/bin/ranger_storm_plugin_install.properties ---------------------------------------------------------------------- diff --git a/migration-util/bin/ranger_storm_plugin_install.properties b/migration-util/bin/ranger_storm_plugin_install.properties deleted file mode 100755 index 9a289e8..0000000 --- a/migration-util/bin/ranger_storm_plugin_install.properties +++ /dev/null @@ -1,117 +0,0 @@ -# Licensed to the Apache Software Foundation (ASF) under one or more -# contributor license agreements. See the NOTICE file distributed with -# this work for additional information regarding copyright ownership. -# The ASF licenses this file to You under the Apache License, Version 2.0 -# (the "License"); you may not use this file except in compliance with -# the License. You may obtain a copy of the License at -# -# http://www.apache.org/licenses/LICENSE-2.0 -# -# Unless required by applicable law or agreed to in writing, software -# distributed under the License is distributed on an "AS IS" BASIS, -# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. -# See the License for the specific language governing permissions and -# limitations under the License. - - -# Below are the mandatory parameters, required to be filled in by the user. - -# -# This is the repository name created within policy manager -# -# Example: -# REPOSITORY_NAME=stormdev -# -# Mandatory properties for migration to be filled by user prior to migration. -# REPOSITORY_NAME = needs to be updated by user before running the migration script. -REPOSITORY_NAME= - - -# Below are the non-mandatory parameters, not required to be filled in by the user. - - -# -# Location of Policy Manager URL -# -# Example: -# POLICY_MGR_URL=http://policymanager.xasecure.net:6080 -# -POLICY_MGR_URL= - -# -# Location of db client library (please check the location of the jar file) -# -# Example: -# SQL_CONNECTOR_JAR=/usr/share/java/mysql-connector-java.jar -# SQL_CONNECTOR_JAR=/usr/share/java/ojdbc6.jar -# -SQL_CONNECTOR_JAR=/usr/share/java/mysql-connector-java.jar - - - -# -# AUDIT DB Configuration -# -# This information should match with the one you specified during the PolicyManager Installation -# -# Example: -# XAAUDIT.DB.IS_ENABLED=true -# XAAUDIT.DB.FLAVOUR=MYSQL -# XAAUDIT.DB.FLAVOUR=ORACLE -# XAAUDIT.DB.HOSTNAME=localhost -# XAAUDIT.DB.DATABASE_NAME=ranger_audit -# XAAUDIT.DB.USER_NAME=rangerlogger -# XAAUDIT.DB.PASSWORD=rangerlogger -# -XAAUDIT.DB.IS_ENABLED=false -XAAUDIT.DB.FLAVOUR=MYSQL -XAAUDIT.DB.HOSTNAME= -XAAUDIT.DB.DATABASE_NAME= -XAAUDIT.DB.USER_NAME= -XAAUDIT.DB.PASSWORD= - -# -# Audit to HDFS Configuration -# -# If XAAUDIT.HDFS.IS_ENABLED is set to true, please replace tokens -# that start with __REPLACE__ with appropriate values -# XAAUDIT.HDFS.IS_ENABLED=true -# XAAUDIT.HDFS.DESTINATION_DIRECTORY=hdfs://__REPLACE__NAME_NODE_HOST:8020/ranger/audit/%app-type%/%time:yyyyMMdd% -# XAAUDIT.HDFS.LOCAL_BUFFER_DIRECTORY=__REPLACE__LOG_DIR/storm/audit -# XAAUDIT.HDFS.LOCAL_ARCHIVE_DIRECTORY=__REPLACE__LOG_DIR/storm/audit/archive -# -# Example: -# XAAUDIT.HDFS.IS_ENABLED=true -# XAAUDIT.HDFS.DESTINATION_DIRECTORY=hdfs://namenode.example.com:8020/ranger/audit/%app-type%/%time:yyyyMMdd% -# XAAUDIT.HDFS.LOCAL_BUFFER_DIRECTORY=/var/log/storm/audit -# XAAUDIT.HDFS.LOCAL_ARCHIVE_DIRECTORY=/var/log/storm/audit/archive -# -XAAUDIT.HDFS.IS_ENABLED=false -XAAUDIT.HDFS.DESTINATION_DIRECTORY=hdfs://__REPLACE__NAME_NODE_HOST:8020/ranger/audit/%app-type%/%time:yyyyMMdd% -XAAUDIT.HDFS.LOCAL_BUFFER_DIRECTORY=__REPLACE__LOG_DIR/storm/audit -XAAUDIT.HDFS.LOCAL_ARCHIVE_DIRECTORY=__REPLACE__LOG_DIR/storm/audit/archive - -XAAUDIT.HDFS.DESTINTATION_FILE=%hostname%-audit.log -XAAUDIT.HDFS.DESTINTATION_FLUSH_INTERVAL_SECONDS=900 -XAAUDIT.HDFS.DESTINTATION_ROLLOVER_INTERVAL_SECONDS=86400 -XAAUDIT.HDFS.DESTINTATION_OPEN_RETRY_INTERVAL_SECONDS=60 -XAAUDIT.HDFS.LOCAL_BUFFER_FILE=%time:yyyyMMdd-HHmm.ss%.log -XAAUDIT.HDFS.LOCAL_BUFFER_FLUSH_INTERVAL_SECONDS=60 -XAAUDIT.HDFS.LOCAL_BUFFER_ROLLOVER_INTERVAL_SECONDS=600 -XAAUDIT.HDFS.LOCAL_ARCHIVE_MAX_FILE_COUNT=10 - -# -# SSL Client Certificate Information -# -# Example: -# SSL_KEYSTORE_FILE_PATH=/etc/storm/conf/ranger-plugin-keystore.jks -# SSL_KEYSTORE_PASSWORD=none -# SSL_TRUSTSTORE_FILE_PATH=/etc/storm/conf/ranger-plugin-truststore.jks -# SSL_TRUSTSTORE_PASSWORD=none -# -# You do not need use SSL between agent and security admin tool, please leave these sample value as it is. -# -SSL_KEYSTORE_FILE_PATH=/etc/storm/conf/ranger-plugin-keystore.jks -SSL_KEYSTORE_PASSWORD=myKeyFilePassword -SSL_TRUSTSTORE_FILE_PATH=/etc/storm/conf/ranger-plugin-truststore.jks -SSL_TRUSTSTORE_PASSWORD=changeit http://git-wip-us.apache.org/repos/asf/incubator-ranger/blob/83988409/migration-util/bin/ranger_usersync_install.properties ---------------------------------------------------------------------- diff --git a/migration-util/bin/ranger_usersync_install.properties b/migration-util/bin/ranger_usersync_install.properties deleted file mode 100755 index 63e4ffe..0000000 --- a/migration-util/bin/ranger_usersync_install.properties +++ /dev/null @@ -1,104 +0,0 @@ -# Licensed to the Apache Software Foundation (ASF) under one or more -# contributor license agreements. See the NOTICE file distributed with -# this work for additional information regarding copyright ownership. -# The ASF licenses this file to You under the Apache License, Version 2.0 -# (the "License"); you may not use this file except in compliance with -# the License. You may obtain a copy of the License at -# -# http://www.apache.org/licenses/LICENSE-2.0 -# -# Unless required by applicable law or agreed to in writing, software -# distributed under the License is distributed on an "AS IS" BASIS, -# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. -# See the License for the specific language governing permissions and -# limitations under the License. - -# -# The following URL should be the base URL for connecting to the policy manager web application -# For example: -# -# POLICY_MGR_URL = http://policymanager.xasecure.net:6080 -# -POLICY_MGR_URL = - -# sync source, only unix and ldap are supported at present -# defaults to unix -SYNC_SOURCE = - - -# -# Minumum Unix User-id to start SYNC. -# This should avoid creating UNIX system-level users in the Policy Manager -# -MIN_UNIX_USER_ID_TO_SYNC = 1000 - -# sync interval in minutes -# user, groups would be synced again at the end of each sync interval -# defaults to 5 if SYNC_SOURCE is unix -# defaults to 360 if SYNC_SOURCE is ldap -SYNC_INTERVAL = - -#User and group for the usersync process -unix_user=ranger -unix_group=ranger - - -# --------------------------------------------------------------- -# The following properties are relevant only if SYNC_SOURCE = ldap -# --------------------------------------------------------------- - -# URL of source ldap -# a sample value would be: ldap://ldap.example.com:389 -# Must specify a value if SYNC_SOURCE is ldap -SYNC_LDAP_URL = - -# ldap bind dn used to connect to ldap and query for users and groups -# a sample value would be cn=admin,ou=users,dc=hadoop,dc=apache,dc-org -# Must specify a value if SYNC_SOURCE is ldap -SYNC_LDAP_BIND_DN = - -# ldap bind password for the bind dn specified above -# please ensure read access to this file is limited to root, to protect the password -# Must specify a value if SYNC_SOURCE is ldap -# unless anonymous search is allowed by the directory on users and group -SYNC_LDAP_BIND_PASSWORD = -CRED_KEYSTORE_FILENAME=/usr/lib/xausersync/.jceks/xausersync.jceks -# search base for users -# sample value would be ou=users,dc=hadoop,dc=apache,dc=org -SYNC_LDAP_USER_SEARCH_BASE = - -# search scope for the users, only base, one and sub are supported values -# please customize the value to suit your deployment -# default value: sub -SYNC_LDAP_USER_SEARCH_SCOPE = sub - -# objectclass to identify user entries -# please customize the value to suit your deployment -# default value: person -SYNC_LDAP_USER_OBJECT_CLASS = person - -# optional additional filter constraining the users selected for syncing -# a sample value would be (dept=eng) -# please customize the value to suit your deployment -# default value is empty -SYNC_LDAP_USER_SEARCH_FILTER = - -# attribute from user entry that would be treated as user name -# please customize the value to suit your deployment -# default value: cn -SYNC_LDAP_USER_NAME_ATTRIBUTE = cn - -# attribute from user entry whose values would be treated as -# group values to be pushed into Policy Manager database -# You could provide multiple attribute names separated by comma -# default value: memberof, ismemberof -SYNC_LDAP_USER_GROUP_NAME_ATTRIBUTE = memberof,ismemberof -# -# UserSync - Case Conversion Flags -# possible values: none, lower, upper -SYNC_LDAP_USERNAME_CASE_CONVERSION=lower -SYNC_LDAP_GROUPNAME_CASE_CONVERSION=lower - -#user sync log path -logdir=logs -#/var/log/ranger/usersync http://git-wip-us.apache.org/repos/asf/incubator-ranger/blob/83988409/migration-util/doc/README.TXT ---------------------------------------------------------------------- diff --git a/migration-util/doc/README.TXT b/migration-util/doc/README.TXT index 50ecc10..f466e9d 100644 --- a/migration-util/doc/README.TXT +++ b/migration-util/doc/README.TXT @@ -7,7 +7,8 @@ Pre-requisites: * Ranger service is manually installed outside Ambari. * If user had Ambari 1.7.0 installed, Ambari needs to be upgraded to 2.0.0, before this script is run. * Ranger service is expected to be up and running. - * Whichever component plugin needs to be imported, that plugin needs to be installed as well as enabled independently by the user. + * Whichever component plugin needs to imported, that component should be up and running in Ambari server. + * Whichever component plugin needs to be imported, that plugin needs to be installed as well as enabled independently by the user. * The installation folder paths for each component is as follows : * For Ranger Admin service: /usr/hdp/<hdp_vers>/ranger-admin * For Ranger Usersync service: /usr/hdp/<hdp_vers>/ranger-usersync @@ -35,20 +36,11 @@ Steps to Add Ranger in a Ambari HDP cluster: * Migration script locates the existing config in post-install properties files used by the service. * This script will collect required configs from the independently installed Ranger service configurations and after verification from the user, post it to the specified Ambari Server. - * Set appropriate values in the respective install.properties template file, only if required. + * Set appropriate values in the <component>_install.properties template file, only if required. For Ranger Admin service, ranger_admin_install.properties - For Ranger Usersync service, ranger_usersync_install.properties - For Ranger Hbase plugin, ranger_hbase_plugin_install.properties - For Ranger Hdfs plugin, ranger_hdfs_plugin_install.properties - For Ranger Hive plugin, ranger_hive_plugin_install.properties - For Ranger Knox plugin, ranger_knox_plugin_install.properties - For Ranger Storm plugin, ranger_storm_plugin_install.properties - * For script to use proper values, mandatory properties to be filled by user are as follows : - 1) During Ranger_Admin installation migration, the authentication_method , db_root_username and db_root_password are mandatory, + * For script to use proper values, mandatory properties to be filled by user are as follows : + 1) During Ranger_Admin installation migration db_root_username and db_root_password are mandatory, which can be set in the ranger_admin_install.properties - 2) During Hdfs , Knox and Storm Plugin Migration parameter repository_name is mandatory and should be filled in ranger_hdfs_plugin_install.properties , ranger_knox_plugin_install.properties or ranger_storm_plugin_install.properties before running script for installing the particular component. - 3) During HBase and Hive Plugin migration,parameters repository name and UPDATE_XAPOLICIES_ON_GRANT_REVOKE is used to save policies during grant-revoke operations. - Hence this flag should be set by user in ranger_hbase_plugin_install.properties or ranger_hive_plugin_install.properties respectively. To import Ranger (Admin and User-Sync) service and plugins we need to run the python script using command line as shown below, with valid input parameters, from the host where specific Ranger component has been installed / enabled :
