Tanping This are really good feedback. We will prioritize on these topics.
Regarding the user management, it is contentious topic. But I see the value. Can we start a different thread/JIRA to discuss this? There are few things in my mind, like integrating with SSSD (https://fedorahosted.org/sssd), PAM, etc. Let¹s see whether we can address them in a generic way which can be extended/configured based on the environment. All, please highlight any documents or use cases that will be helpful for you. We can plan to work on those. Thanks Bosco On 7/28/15, 4:33 PM, "Tanping Wang" <[email protected]> wrote: >Hi, folks, >It would be nice to see couple examples of how to manage finer-grained ACL >via Ranger across Hadoop components. For example, this blog is nice: > >http://hortonworks.com/blog/best-practices-for-hive-authorization-using-ap >ache-ranger-in-hdp-2-2/ > >With Solr introduced into Ranger, can we have some article to talk about >how Solr/HDFS ACL can be managed via Ranger together? The same thing >applies to Kafka, Knox etc. > >The other thing would be helpful to documented is how the user and group >information managed by Ranger. For example, users and group information >can be synced up from LDAP or Unix, but can not be pushed back to LDAP or >Unix today. However, if the end users creates the user on Hadoop and also >on Ranger, Ranger can in fact manage the user (magic~~). These are not >very intuitive and should be documented? > >Regards, >Tanping > >On Tue, Jul 28, 2015 at 1:20 PM, Don Bosco Durai <[email protected]> wrote: > >> Quite a bit of documentation work is going. We should plan to bring them >> together. I have started rearranging the wiki pages. >> >> I agree we need to get User Guide and document for installation using >> Ambari sooner. Can we create a doc JIRA to track it and have owner >> assigned to it? >> >> Thanks >> >> Bosco >> >> >> >> On 7/24/15, 10:05 AM, "Abhay Kulkarni" <[email protected]> >>wrote: >> >> >Thanks for pointing this out, Vel! >> > >> >I took a quick look, and the basics seem to be there. I think it needs >>to >> >be enhanced further, and dynamic policy aspects (ContextEnricher, >> >PolicyEvaluator, etc.) need to be added if this is going to be the >>plugin >> >SDK documentation for the consumption of an uninitiated developer. >> > >> >-Abhay >> > >> > >> > >> >On 7/24/15, 9:55 AM, "Velmurugan Periasamy" <[email protected] >> on >> >behalf of [email protected]> wrote: >> > >> >>Abhay, >> >> >> >>I believe documentation on plugin model is added. >> >> >> >>https://cwiki.apache.org/confluence/pages/viewpage.action?pageId=53741207 >> >> >> >>Is this what you are looking for? >> >> >> >>Thanks, >> >>Vel >> >> >> >> >> >>On 7/24/15, 12:24 PM, "Abhay Kulkarni" <[email protected]> >> wrote: >> >> >> >>>I am not sure if there is any documentation on how to develop a >>plug-in >> >>>for a new component, or in general, the documentation on Ranger >>Plugin >> >>>SDK. If not, it needs to be added. >> >>> >> >>> >> >>>On 7/24/15, 12:08 AM, "Balaji Ganesan" <[email protected]> wrote: >> >>> >> >>>>Team, >> >>>> >> >>>>We are still missing key documentation for our recently release 0.5 >> >>>>release. We need to discuss internally on what document we need to >>add >> >>>>in >> >>>>and how we can add. >> >>>> >> >>>>The documents I think missing are >> >>>> >> >>>>- Installing using Apache Ambari >> >>>>- User guide, including for newer components such as Kafka, Solr >>etc. >> >>>>- Document on Ranger KMS >> >>>> >> >>>>Can we agree on the list and work towards adding the documents? >> >>>>Feedback >> >>>>? >> >>>>Suggestions? >> >>> >> >> >> >> >> >> >> > >> > >> >> >>
