Srimanth Gunturi created AMBARI-9757:
----------------------------------------
Summary: When toggling Ranger HBase plugin, UI gives incorrect
recommendations
Key: AMBARI-9757
URL: https://issues.apache.org/jira/browse/AMBARI-9757
Project: Ambari
Issue Type: Bug
Affects Versions: 2.0.0
Reporter: Srimanth Gunturi
Assignee: Srimanth Gunturi
Fix For: 2.0.0
When toggling Ranger HBase plugin, UI gives incorrect recommendations for HBase
coprocessor properties.
*1. Start with HBase properties with for a Kerberized cluster:*
hbase.coprocessor.master.classes:
org.apache.hadoop.hbase.security.access.AccessController
hbase.coprocessor.region.classes:
org.apache.hadoop.hbase.security.token.TokenProvider,org.apache.hadoop.hbase.security.access.SecureBulkLoadEndpoint,org.apache.hadoop.hbase.security.access.AccessController
hbase.security.authorization: true
*Action: Enable Ranger Plugin for HBase*
AR: *UI recommended changes:*
hbase.coprocessor.master.classes:
com.xasecure.authorization.hbase.XaSecureAuthorizationCoprocessor
hbase.coprocessor.region.classes:
org.apache.hadoop.hbase.security.access.AccessController,com.xasecure.authorization.hbase.XaSecureAuthorizationCoprocessor
ER: *UI recommended changes:*
hbase.coprocessor.master.classes:
com.xasecure.authorization.hbase.XaSecureAuthorizationCoprocessor
hbase.coprocessor.region.classes:
org.apache.hadoop.hbase.security.token.TokenProvider,org.apache.hadoop.hbase.security.access.SecureBulkLoadEndpoint,com.xasecure.authorization.hbase.XaSecureAuthorizationCoprocessor
*2. Start with HBase properties with for a Kerberized cluster with HBase Ranger
plugin enabled:*
hbase.coprocessor.master.classes:
com.xasecure.authorization.hbase.XaSecureAuthorizationCoprocessor
hbase.coprocessor.region.classes:
org.apache.hadoop.hbase.security.token.TokenProvider,org.apache.hadoop.hbase.security.access.SecureBulkLoadEndpoint,com.xasecure.authorization.hbase.XaSecureAuthorizationCoprocessor
hbase.security.authorization: true
*Action: Disable Ranger Plugin for HBase*
AR: *UI recommended changes:*
hbase.coprocessor.master.classes: blank
hbase.coprocessor.region.classes:
com.xasecure.authorization.hbase.XaSecureAuthorizationCoprocessor
ER: *UI recommended changes:*
hbase.coprocessor.master.classes:
org.apache.hadoop.hbase.security.access.AccessController
hbase.coprocessor.region.classes:
org.apache.hadoop.hbase.security.token.TokenProvider,org.apache.hadoop.hbase.security.access.SecureBulkLoadEndpoint,org.apache.hadoop.hbase.security.access.AccessController
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)