Good to see ranger in HAWQ. I have some questions: 1. If we want to use ranger, it must be from initial phase or shall we enable range certification when we already have a running database? Also similar for upgrade from non-ranger HAWQ to range supported HAWQ.In create user second part, if we only have gpadmin, how to mapping existing user ?
2. If we use ranger, "create user in LDAP" will be only entry for user creation? Will we still support "create user" in HAWQ? If yes, it will trigger sync when create user right? 3. How to handling "drop user"? Will drop all related policy in Ranger? What about user in linux ldap? Thanks Jiali On Thu, Jul 28, 2016 at 4:48 PM, Hubert Zhang <[email protected]> wrote: > @ruilong > Q1:yes, you can tune the sync interval parameter in conf file of UserSync, > default is 5mins for Unix > Q2: If Ranger is down, all the queries in HAWQ cannot get privilege and > will be refused. New connections to HAWQ should be refused too. >
