Rohit, To download policies from Ranger Admin, Ranger plugins require the URL to Ranger Admin and the name of the service containing the policies. These values are read from following configurations from a file named ranger-<pluginType>-security.xml
ranger.plugin.<pluginType>.policy.rest.url ranger.plugin.<pluginType>.service.name For example, these are specified in conf/ranger-sampleapp-security.xml for the sample application. Can you please review the configuration for your plugin for the above? Hope this helps. Madhan On 4/7/16, 5:40 AM, "rohit sinha" <[email protected]> wrote: >Hello Madhan, >Thanks a lot for your reply. > >I am looking into the integration and I working towards developing the >components outside of ranger trunk for initial development purpose. After >taking an overview of the codebase it seems that it's possible to have >plugins outside of the ranger trunk too. > >I was able to add my service to Ranger Amin through the curl request and >connect to Ranger from my Authorizer but I see the following error: > >com.sun.jersey.api.client.ClientHandlerException: >> java.lang.IllegalArgumentException: URI is not absolute >> at >> com.sun.jersey.client.urlconnection.URLConnectionClientHandler.handle(URLConnectionClientHandler.java:151) >> at com.sun.jersey.api.client.Client.handle(Client.java:648) >> at >> com.sun.jersey.api.client.WebResource.handle(WebResource.java:680) >> at >> com.sun.jersey.api.client.WebResource.access$200(WebResource.java:74) >> at >> com.sun.jersey.api.client.WebResource$Builder.get(WebResource.java:507) >> at >> org.apache.ranger.admin.client.RangerAdminRESTClient.getServicePoliciesIfUpdated(RangerAdminRESTClient.java:94) >> at >> org.apache.ranger.plugin.util.PolicyRefresher.loadPolicyfromPolicyAdmin(PolicyRefresher.java:215) >> at >> org.apache.ranger.plugin.util.PolicyRefresher.loadPolicy(PolicyRefresher.java:183) >> at >> org.apache.ranger.plugin.util.PolicyRefresher.run(PolicyRefresher.java:156) >> Caused by: java.lang.IllegalArgumentException: URI is not absolute >> at java.net.URI.toURL(URI.java:1095) >> at >> com.sun.jersey.client.urlconnection.URLConnectionClientHandler._invoke(URLConnectionClientHandler.java:159) >> at >> com.sun.jersey.client.urlconnection.URLConnectionClientHandler.handle(URLConnectionClientHandler.java:149) >> ... 8 more >> 16/04/07 12:31:36 WARN util.PolicyRefresher: cache file does not exist or >> not readble 'null' > > >A quick search on google pointed towards misconfiguration of service name >in security.xml which I have double checked. > >Any pointers to debug this will be appreciated. > >Thanks. > >Thanks, >Rohit Sinha > > >On Wed, Apr 6, 2016 at 10:43 PM, Madhan Neethiraj < >[email protected]> wrote: > >> Rohit, >> >> You are right. REPOSITORY_NAME referenced in the doc is the name of the >> service instance in Ranger Admin, which contains the policies for the >> component (in this case HBase). The plugin reads this value from a >> configuration named ranger.plugin.hbase.service.name (in file >> ranger-hbase-security.xml). >> >> >> After doing this I don't see anything in the Audit -> Plugins >> An entry will be created here for every policy download form plugins. >> Plugins download the policies at the following events: >> - during the component startup (HBase/HiveServer/...) >> - when there is a policy change in service instance >> >> Hope this helps. >> >> Madhan >> >> >> >> On 4/6/16, 7:13 PM, "rohit sinha" <[email protected]> wrote: >> >> >Thanks for sharing the SampleApp. I was able to run it understand the >> >integration point. >> >I also tried to enable HBase ranger plugin. When I added the service from >> >the Ranger Admin UI I was able to talk to HBase and the resource >> completion >> >worked. After that I deleted the HBase plugin from the UI and tried to >> >enable it from the the command line following instructions mentioned here: >> > >> https://cwiki.apache.org/confluence/display/RANGER/Apache+Ranger+0.5.0+Installation#ApacheRanger0.5.0Installation-InstallingApacheHBase(1.1.0.1) >> > >> >After doing this I don't see anything in the Audit -> Plugins. In the >> >instructions I do see warning >> > >> >> Make sure the REPOSITORY_NAME service exists in Ranger Admin. If not, >> the >> >> hbase-plugin will not be able to communicate with Ranger admin. >> > >> >Does this mean I need to add the service from the Ranger Admin Panel or I >> >did something wrong in the enabling the plugin ? >> > >> >Any help will be highly appreciated. >> > >> >Thanks. >> > >> >Thanks, >> >Rohit Sinha >> > >> > >> >On Wed, Apr 6, 2016 at 12:43 PM, rohit sinha <[email protected]> >> >wrote: >> > >> >> Awesome. Thanks a lot. >> >> >> >> Thanks, >> >> Rohit Sinha >> >> >> >> >> >> On Wed, Apr 6, 2016 at 12:27 PM, Don Bosco Durai <[email protected]> >> wrote: >> >> >> >>> It is optional. It is easy to setup and helps a lot while debugging >> >>> during initial setup. >> >>> >> >>> Bosco >> >>> >> >>> >> >>> >> >>> >> >>> >> >>> On 4/6/16, 12:23 PM, "rohit sinha" <[email protected]> wrote: >> >>> >> >>> >Thanks a lot for the prompt replies. Really appreciate it. >> >>> >The "Ranger Stacks - How to add a custom plugin?" was really helpful >> in >> >>> >getting some understanding of the integration. I am going through the >> >>> >SampleApp docs now. >> >>> > >> >>> >Is auditing an optional feature ? From the documentation it looks like >> >>> it's >> >>> >not and Solr installation is a requirement. I was wondering if I can >> have >> >>> >auditing off and skip Solr installation for initial integration >> purpose. >> >>> > >> >>> >Thanks. >> >>> > >> >>> >Thanks, >> >>> >Rohit Sinha >> >>> > >> >>> > >> >>> >On Wed, Apr 6, 2016 at 11:55 AM, Madhan Neethiraj <[email protected]> >> >>> wrote: >> >>> > >> >>> >> Rohit, >> >>> >> >> >>> >> In addition to the details in the wiki, I would recommend reviewing >> the >> >>> >> following sample application to understand the details of adding >> Ranger >> >>> >> authorization to an application. >> >>> >> >> >>> >> - README.txt: >> >>> >> >> >>> >> https://github.com/apache/incubator-ranger/blob/master/ranger-examples/README.txt >> >>> >> - Application sources: >> >>> >> >> >>> >> https://github.com/apache/incubator-ranger/tree/master/ranger-examples/sampleapp >> >>> >> . >> >>> >> >> >>> >> Madhan >> >>> >> >> >>> >> >> >>> >> >> >>> >> On 4/6/16, 11:22 AM, "Velmurugan Periasamy" < >> >>> [email protected] >> >>> >> on behalf of [email protected]> wrote: >> >>> >> >> >>> >> >Rohit - >> >>> >> > >> >>> >> https://cwiki.apache.org/confluence/pages/viewpage.action?pageId=53741207 >> >>> >> >explains how to add a custom plugin for Ranger. >> >>> >> > >> >>> >> >On 4/6/16, 10:47 AM, "rohit sinha" <[email protected]> >> wrote: >> >>> >> > >> >>> >> >>Hello, >> >>> >> >>I am looking into integrating an external service with Apache >> Ranger >> >>> for >> >>> >> >>authorization. >> >>> >> >>I looked up the wiki but there is no information about integrating >> >>> new >> >>> >> >>services. >> >>> >> >>Can someone give me some info which might be helpful in >> identifying >> >>> >> >>different components which needs to be developed and other >> required >> >>> stuff >> >>> >> >> >> >>> >> >>Thanks. >> >>> >> > >> >>> >> > >> >>> >> > >> >>> >> >> >>> >> >> >>> >> >>> >> >> >>
