Srimanth Gunturi created AMBARI-9757:
----------------------------------------

             Summary: When toggling Ranger HBase plugin, UI gives incorrect 
recommendations
                 Key: AMBARI-9757
                 URL: https://issues.apache.org/jira/browse/AMBARI-9757
             Project: Ambari
          Issue Type: Bug
    Affects Versions: 2.0.0
            Reporter: Srimanth Gunturi
            Assignee: Srimanth Gunturi
             Fix For: 2.0.0


When toggling Ranger HBase plugin, UI gives incorrect recommendations for HBase 
coprocessor properties.

*1. Start with HBase properties with for a Kerberized cluster:*
hbase.coprocessor.master.classes: 
org.apache.hadoop.hbase.security.access.AccessController
hbase.coprocessor.region.classes: 
org.apache.hadoop.hbase.security.token.TokenProvider,org.apache.hadoop.hbase.security.access.SecureBulkLoadEndpoint,org.apache.hadoop.hbase.security.access.AccessController
hbase.security.authorization: true

*Action: Enable Ranger Plugin for HBase*

AR: *UI recommended changes:*
hbase.coprocessor.master.classes: 
com.xasecure.authorization.hbase.XaSecureAuthorizationCoprocessor
hbase.coprocessor.region.classes: 
org.apache.hadoop.hbase.security.access.AccessController,com.xasecure.authorization.hbase.XaSecureAuthorizationCoprocessor

ER: *UI recommended changes:*
hbase.coprocessor.master.classes: 
com.xasecure.authorization.hbase.XaSecureAuthorizationCoprocessor
hbase.coprocessor.region.classes: 
org.apache.hadoop.hbase.security.token.TokenProvider,org.apache.hadoop.hbase.security.access.SecureBulkLoadEndpoint,com.xasecure.authorization.hbase.XaSecureAuthorizationCoprocessor


*2. Start with HBase properties with for a Kerberized cluster with HBase Ranger 
plugin enabled:*
hbase.coprocessor.master.classes: 
com.xasecure.authorization.hbase.XaSecureAuthorizationCoprocessor
hbase.coprocessor.region.classes: 
org.apache.hadoop.hbase.security.token.TokenProvider,org.apache.hadoop.hbase.security.access.SecureBulkLoadEndpoint,com.xasecure.authorization.hbase.XaSecureAuthorizationCoprocessor
hbase.security.authorization: true

*Action: Disable Ranger Plugin for HBase*

AR: *UI recommended changes:*
hbase.coprocessor.master.classes: blank
hbase.coprocessor.region.classes: 
com.xasecure.authorization.hbase.XaSecureAuthorizationCoprocessor

ER: *UI recommended changes:*
hbase.coprocessor.master.classes: 
org.apache.hadoop.hbase.security.access.AccessController
hbase.coprocessor.region.classes: 
org.apache.hadoop.hbase.security.token.TokenProvider,org.apache.hadoop.hbase.security.access.SecureBulkLoadEndpoint,org.apache.hadoop.hbase.security.access.AccessController




--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to