Andrew Onischuk created AMBARI-11912:
----------------------------------------
Summary: Ambari removing ranger group from ranger user after
installation
Key: AMBARI-11912
URL: https://issues.apache.org/jira/browse/AMBARI-11912
Project: Ambari
Issue Type: Bug
Reporter: Andrew Onischuk
Assignee: Andrew Onischuk
Fix For: 2.1.0
After installation Ambari is removing the default `ranger` group from `ranger`
user and adding the `hadoop` user. This is breaking Unix Authentication.
Before Installing Ranger through Ambari
[root@pa-0105-postgres-1 yum.repos.d]# cat /etc/passwd | grep ranger
[root@pa-0105-postgres-1 yum.repos.d]# yum install -y ranger-admin
[root@pa-0105-postgres-1 yum.repos.d]# cat /etc/passwd | grep ranger
ranger:x:2546:498:Ranger:/var/lib/ranger:/bin/bash
[root@pa-0105-postgres-1 yum.repos.d]# groups ranger
ranger : ranger
[root@pa-0105-postgres-1 yum.repos.d]# yum install ranger-usersync
[root@pa-0105-postgres-1 yum.repos.d]# ls -l
/usr/hdp/current/ranger-usersync/native/
total 8
-rwsr-x---. 1 root ranger 5640 Jun 1 00:13 credValidator.uexe
After Installing Ranger through Ambari
[root@pa-0105-postgres-1 ranger-usersync]# groups ranger
ranger : hadoop
Logs during installation in Ambari
Group['hadoop'] {'ignore_failures': False}
2015-06-01 06:49:35,553 - Group['users'] {'ignore_failures': False}
2015-06-01 06:49:35,553 - Group['ranger'] {'ignore_failures': False}
2015-06-01 06:49:35,553 - Adding group Group['ranger']
2015-06-01 06:49:35,599 - User['ambari-qa'] {'gid': 'hadoop',
'ignore_failures': False, 'groups': ['users']}
2015-06-01 06:49:35,601 - User['zookeeper'] {'gid': 'hadoop',
'ignore_failures': False, 'groups': ['hadoop']}
2015-06-01 06:49:35,603 - User['hdfs'] {'gid': 'hadoop', 'ignore_failures':
False, 'groups': ['hadoop']}
2015-06-01 06:49:35,604 - User['ranger'] {'gid': 'hadoop',
'ignore_failures': False, 'groups': ['hadoop']}
2015-06-01 06:49:35,605 - Adding user User['ranger']
CC sneethiraj/vperiasamy
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
