----------------------------------------------------------- This is an automatically generated e-mail. To reply, visit: https://reviews.apache.org/r/47789/ -----------------------------------------------------------
(Updated June 3, 2016, 12:50 a.m.) Review request for ranger, Don Bosco Durai, Madhan Neethiraj, Selvamohan Neethiraj, and Velmurugan Periasamy. Repository: ranger Description ------- RANGER-994: Ranger support Audit to Secure Solr Diffs ----- agents-audit/pom.xml 35ef2b6 agents-audit/src/main/java/org/apache/ranger/audit/destination/SolrAuditDestination.java 43b8244 agents-audit/src/main/java/org/apache/ranger/audit/utils/InMemoryJAASConfiguration.java PRE-CREATION hbase-agent/pom.xml 4a2a25f hdfs-agent/pom.xml f5e42eb hive-agent/pom.xml a7ee08b kms/pom.xml a9f6c6c knox-agent/pom.xml 20d8237 plugin-kafka/pom.xml e148539 plugin-solr/src/main/java/org/apache/ranger/services/solr/client/ServiceSolrClient.java fc82dfd plugin-yarn/pom.xml 92c7dfb pom.xml 29292a7 security-admin/contrib/solr_for_audit_setup/setup.sh 1c05762 security-admin/src/main/java/org/apache/ranger/common/PropertiesUtil.java b9caa76 security-admin/src/main/java/org/apache/ranger/patch/cliutil/DbToSolrMigrationUtil.java 433f5c9 security-admin/src/main/java/org/apache/ranger/solr/SolrMgr.java 913b9f0 src/main/assembly/hdfs-agent.xml f0fbe19 src/main/assembly/hive-agent.xml 92a312a src/main/assembly/knox-agent.xml 0657e87 src/main/assembly/plugin-solr.xml c96e63f src/main/assembly/plugin-yarn.xml 19e88d4 storm-agent/pom.xml c816644 Diff: https://reviews.apache.org/r/47789/diff/ Testing (updated) ------- Tested in Secure Cluster. For Ranger UI to work JAAS config for sorlclient has to be addded to ranger-admin-site.xml For Ranger Plugins JASS config for sorlclient has to be addded to ranger-<component>-site.xml Config to be added. xasecure.audit.jaas.Client.loginModuleName=com.sun.security.auth.module.Krb5LoginModule xasecure.audit.jaas.Client.loginModuleControlFlag=required xasecure.audit.jaas.Client.option.useKeyTab=true xasecure.audit.jaas.Client.option.debug=true xasecure.audit.jaas.Client.option.doNotPrompt=true xasecure.audit.jaas.Client.option.storeKey=false xasecure.audit.jaas.Client.option.serviceName=solr xasecure.audit.jaas.Client.option.keyTab=/etc/security/keytabs/solrclient.keytab xasecure.audit.jaas.Client.option.principal=solrcli...@example.com Thanks, Ramesh Mani
