@Tanping, agree on the examples for how Ranger would work. Can you create a JIRA and also help with some content if you are interested?
I think we should start a separate thread on user/group management. On Wed, Jul 29, 2015 at 12:15 AM, Don Bosco Durai <[email protected]> wrote: > Tanping > > This are really good feedback. We will prioritize on these topics. > > Regarding the user management, it is contentious topic. But I see the > value. Can we start a different thread/JIRA to discuss this? There are few > things in my mind, like integrating with SSSD > (https://fedorahosted.org/sssd), PAM, etc. Let¹s see whether we can > address them in a generic way which can be extended/configured based on > the environment. > > All, please highlight any documents or use cases that will be helpful for > you. We can plan to work on those. > > Thanks > > Bosco > > > On 7/28/15, 4:33 PM, "Tanping Wang" <[email protected]> wrote: > > >Hi, folks, > >It would be nice to see couple examples of how to manage finer-grained ACL > >via Ranger across Hadoop components. For example, this blog is nice: > > > > > http://hortonworks.com/blog/best-practices-for-hive-authorization-using-ap > >ache-ranger-in-hdp-2-2/ > > > >With Solr introduced into Ranger, can we have some article to talk about > >how Solr/HDFS ACL can be managed via Ranger together? The same thing > >applies to Kafka, Knox etc. > > > >The other thing would be helpful to documented is how the user and group > >information managed by Ranger. For example, users and group information > >can be synced up from LDAP or Unix, but can not be pushed back to LDAP or > >Unix today. However, if the end users creates the user on Hadoop and also > >on Ranger, Ranger can in fact manage the user (magic~~). These are not > >very intuitive and should be documented? > > > >Regards, > >Tanping > > > >On Tue, Jul 28, 2015 at 1:20 PM, Don Bosco Durai <[email protected]> > wrote: > > > >> Quite a bit of documentation work is going. We should plan to bring them > >> together. I have started rearranging the wiki pages. > >> > >> I agree we need to get User Guide and document for installation using > >> Ambari sooner. Can we create a doc JIRA to track it and have owner > >> assigned to it? > >> > >> Thanks > >> > >> Bosco > >> > >> > >> > >> On 7/24/15, 10:05 AM, "Abhay Kulkarni" <[email protected]> > >>wrote: > >> > >> >Thanks for pointing this out, Vel! > >> > > >> >I took a quick look, and the basics seem to be there. I think it needs > >>to > >> >be enhanced further, and dynamic policy aspects (ContextEnricher, > >> >PolicyEvaluator, etc.) need to be added if this is going to be the > >>plugin > >> >SDK documentation for the consumption of an uninitiated developer. > >> > > >> >-Abhay > >> > > >> > > >> > > >> >On 7/24/15, 9:55 AM, "Velmurugan Periasamy" < > [email protected] > >> on > >> >behalf of [email protected]> wrote: > >> > > >> >>Abhay, > >> >> > >> >>I believe documentation on plugin model is added. > >> >> > >> > >> > https://cwiki.apache.org/confluence/pages/viewpage.action?pageId=53741207 > >> >> > >> >>Is this what you are looking for? > >> >> > >> >>Thanks, > >> >>Vel > >> >> > >> >> > >> >>On 7/24/15, 12:24 PM, "Abhay Kulkarni" <[email protected]> > >> wrote: > >> >> > >> >>>I am not sure if there is any documentation on how to develop a > >>plug-in > >> >>>for a new component, or in general, the documentation on Ranger > >>Plugin > >> >>>SDK. If not, it needs to be added. > >> >>> > >> >>> > >> >>>On 7/24/15, 12:08 AM, "Balaji Ganesan" <[email protected]> wrote: > >> >>> > >> >>>>Team, > >> >>>> > >> >>>>We are still missing key documentation for our recently release 0.5 > >> >>>>release. We need to discuss internally on what document we need to > >>add > >> >>>>in > >> >>>>and how we can add. > >> >>>> > >> >>>>The documents I think missing are > >> >>>> > >> >>>>- Installing using Apache Ambari > >> >>>>- User guide, including for newer components such as Kafka, Solr > >>etc. > >> >>>>- Document on Ranger KMS > >> >>>> > >> >>>>Can we agree on the list and work towards adding the documents? > >> >>>>Feedback > >> >>>>? > >> >>>>Suggestions? > >> >>> > >> >> > >> >> > >> >> > >> > > >> > > >> > >> > >> > > >
