----------------------------------------------------------- This is an automatically generated e-mail. To reply, visit: https://reviews.apache.org/r/47789/ -----------------------------------------------------------
Review request for ranger, Don Bosco Durai, Madhan Neethiraj, Selvamohan Neethiraj, and Velmurugan Periasamy. Repository: ranger Description ------- RANGER-994:Enable Audit to Secure Solr Diffs ----- agents-audit/pom.xml 35ef2b6 agents-audit/src/main/java/org/apache/ranger/audit/destination/SolrAuditDestination.java 43b8244 agents-audit/src/main/java/org/apache/ranger/audit/utils/InMemoryJAASConfiguration.java PRE-CREATION hbase-agent/pom.xml 4a2a25f hdfs-agent/pom.xml f5e42eb hive-agent/pom.xml a7ee08b kms/pom.xml a9f6c6c knox-agent/pom.xml 20d8237 plugin-kafka/pom.xml e148539 plugin-solr/src/main/java/org/apache/ranger/services/solr/client/ServiceSolrClient.java fc82dfd plugin-yarn/pom.xml 92c7dfb pom.xml 327f30c security-admin/src/main/java/org/apache/ranger/common/PropertiesUtil.java b9caa76 security-admin/src/main/java/org/apache/ranger/solr/SolrMgr.java 913b9f0 src/main/assembly/hdfs-agent.xml f0fbe19 src/main/assembly/hive-agent.xml 92a312a src/main/assembly/knox-agent.xml 0657e87 src/main/assembly/plugin-solr.xml c96e63f src/main/assembly/plugin-yarn.xml 19e88d4 storm-agent/pom.xml c816644 Diff: https://reviews.apache.org/r/47789/diff/ Testing ------- Tested in Secure Cluster. For Ranger UI to work JAAS config for sorlclient has to be addded to ranger-admin-site.xml For Ranger Plugins JASS config for sorlclient has to be addded to ranger-<component>-site.xml Config to be added. JAAS.inmemory.Client.loginModuleName=com.sun.security.auth.module.Krb5LoginModule JAAS.inmemory.Client.loginModuleControlFlag=required JAAS.inmemory.Client.option.useKeyTab=true JAAS.inmemory.Client.option.debug=true JAAS.inmemory.Client.option.doNotPrompt=true JAAS.inmemory.Client.option.storeKey=false JAAS.inmemory.Client.option.serviceName=solr JAAS.inmemory.Client.option.keyTab=/etc/security/keytabs/solrclient.keytab [email protected] Thanks, Ramesh Mani
