Re: Review Request 64634: RANGER-1929:The ranger should support preview policy.

2017-12-18 Thread pengjianhua 

---
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/64634/
---

(Updated 十二月 19, 2017, 6:17 a.m.)


Review request for ranger, Alok Lal, Ankita Sinha, Don Bosco Durai, Colm O 
hEigeartaigh, Gautam Borad, Madhan Neethiraj, Ramesh Mani, Selvamohan 
Neethiraj, Velmurugan Periasamy, and Qiang Zhang.


Bugs: RANGER-1929
https://issues.apache.org/jira/browse/RANGER-1929


Repository: ranger


Description
---

Currently we can only edit the policy without previewing the policy. We must 
use editing funtion of policy when only need to query the detail for policy. So 
we should supply the function of the query detail for policy.


Diffs (updated)
-

  security-admin/src/main/webapp/scripts/modules/globalize/message/en.js 
b8de5c3b 
  
security-admin/src/main/webapp/scripts/views/policies/RangerPolicyConditions.js 
PRE-CREATION 
  security-admin/src/main/webapp/scripts/views/policies/RangerPolicyDetail.js 
PRE-CREATION 
  
security-admin/src/main/webapp/scripts/views/policies/RangerPolicyTableLayout.js
 09e2e166 
  security-admin/src/main/webapp/styles/xa.css 22eedf64 
  
security-admin/src/main/webapp/templates/policies/RangerPolicyConditions_tmpl.html
 PRE-CREATION 
  
security-admin/src/main/webapp/templates/policies/RangerPolicyDetail_tmpl.html 
PRE-CREATION 


Diff: https://reviews.apache.org/r/64634/diff/3/

Changes: https://reviews.apache.org/r/64634/diff/2-3/


Testing
---


Thanks,

pengjianhua

[jira] [Resolved] (RANGER-1203) Ranger YARN Plugin supports Fair Scheduler

2017-12-18 Thread peng.jianhua (JIRA) 

 [ 
https://issues.apache.org/jira/browse/RANGER-1203?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

peng.jianhua resolved RANGER-1203.
--
Resolution: Won't Fix

> Ranger YARN Plugin supports Fair Scheduler
> --
>
> Key: RANGER-1203
> URL: https://issues.apache.org/jira/browse/RANGER-1203
> Project: Ranger
>  Issue Type: New Feature
>  Components: plugins
>Affects Versions: 0.6.1
>Reporter: Qiang Zhang
>Assignee: Qiang Zhang
>  Labels: patch
> Fix For: 1.0.0
>
>
> Currently,hadoop yarn Capacity Scheduler provides a YarnAuthorizationProvider 
> interface.Ranger yarn-plug-in can implement this interface.
> Also Ranger supports the json packet parsing of Capacity Scheduler.
> However,ranger does not support Fair Scheduler.
> Increased functionality:
> Ranger supports the json packet parsing of fair scheduler.
> Hadoop yarn Fair Scheduler will also provide a YarnAuthorizationProvider 
> interface.
> Ranger Yarn plugin adds authority control by fair scheduler, it relies on the 
> fair scheduler pluggable licensing feature patch that hadoop yarn supports.
> Improvement issue of hadoop 
> yarn：https://issues.apache.org/jira/browse/YARN-4997



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)

[jira] [Reopened] (RANGER-1203) Ranger YARN Plugin supports Fair Scheduler

2017-12-18 Thread peng.jianhua (JIRA) 

 [ 
https://issues.apache.org/jira/browse/RANGER-1203?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

peng.jianhua reopened RANGER-1203:
--

> Ranger YARN Plugin supports Fair Scheduler
> --
>
> Key: RANGER-1203
> URL: https://issues.apache.org/jira/browse/RANGER-1203
> Project: Ranger
>  Issue Type: New Feature
>  Components: plugins
>Affects Versions: 0.6.1
>Reporter: Qiang Zhang
>Assignee: Qiang Zhang
>  Labels: patch
> Fix For: 1.0.0
>
>
> Currently,hadoop yarn Capacity Scheduler provides a YarnAuthorizationProvider 
> interface.Ranger yarn-plug-in can implement this interface.
> Also Ranger supports the json packet parsing of Capacity Scheduler.
> However,ranger does not support Fair Scheduler.
> Increased functionality:
> Ranger supports the json packet parsing of fair scheduler.
> Hadoop yarn Fair Scheduler will also provide a YarnAuthorizationProvider 
> interface.
> Ranger Yarn plugin adds authority control by fair scheduler, it relies on the 
> fair scheduler pluggable licensing feature patch that hadoop yarn supports.
> Improvement issue of hadoop 
> yarn：https://issues.apache.org/jira/browse/YARN-4997



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)

Re: Review Request 64677: RANGER-1934:Optimize the init method in BaseAuditHandler class to avoid ArrayIndexOutOfBoundsException

2017-12-18 Thread pengjianhua 


> On 十二月 19, 2017, 12:55 a.m., Qiang Zhang wrote:
> > agents-audit/src/main/java/org/apache/ranger/audit/provider/BaseAuditHandler.java
> > Lines 93 (patched)
> > 
> >
> > Please modify tokens.size() > 1 to tokens.size() > 0

Ok, I had updated the patch ,please review again.


- pengjianhua


---
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/64677/#review194105
---


On 十二月 18, 2017, 7:47 a.m., pengjianhua wrote:
> 
> ---
> This is an automatically generated e-mail. To reply, visit:
> https://reviews.apache.org/r/64677/
> ---
> 
> (Updated 十二月 18, 2017, 7:47 a.m.)
> 
> 
> Review request for ranger, Alok Lal, Ankita Sinha, Don Bosco Durai, Colm O 
> hEigeartaigh, Gautam Borad, Madhan Neethiraj, Ramesh Mani, Selvamohan 
> Neethiraj, Velmurugan Periasamy, and Qiang Zhang.
> 
> 
> Bugs: RANGER-1934
> https://issues.apache.org/jira/browse/RANGER-1934
> 
> 
> Repository: ranger
> 
> 
> Description
> ---
> 
> Optimize the init method in BaseAuditHandler class to avoid 
> ArrayIndexOutOfBoundsException
> The follow in the init method "   List tokens = 
> MiscUtil.toArray(propPrefix, ".");
> String finalToken = tokens.get(tokens.size() - 1);".
> in the init method we should add " if (tokens.size() > 1)" to avoid 
> ArrayIndexOutOfBoundsException.
> 
> 
> Diffs
> -
> 
>   
> agents-audit/src/main/java/org/apache/ranger/audit/provider/BaseAuditHandler.java
>  b095000 
> 
> 
> Diff: https://reviews.apache.org/r/64677/diff/1/
> 
> 
> Testing
> ---
> 
> Tested it.
> 
> 
> Thanks,
> 
> pengjianhua
> 
>

Re: Review Request 64677: RANGER-1934:Optimize the init method in BaseAuditHandler class to avoid ArrayIndexOutOfBoundsException

2017-12-18 Thread pengjianhua 


> On 十二月 18, 2017, 10:05 a.m., Qiang Zhang wrote:
> > agents-audit/src/main/java/org/apache/ranger/audit/provider/BaseAuditHandler.java
> > Lines 95-99 (original), 96-100 (patched)
> > 
> >
> > They should not be included the following code segment.
> > if (tokens.size() > 1)

Hi,if (providerName == null),the following code not needed to execute if 
(providerName == null) {
List tokens = MiscUtil.toArray(propPrefix, ".");
if (tokens.size() > 0) {
String finalToken = tokens.get(tokens.size() - 1);
setName(finalToken);
LOG.info("Using providerName from property 
prefix. providerName="
+ getName());
}
}
 Because the follow code had executed before above code segment:
"String name = MiscUtil.getStringProperty(props, 
basePropertyName + "."
+ PROP_NAME);
if (name != null && !name.isEmpty()) {
setName(name);
}"
  " public void setName(String name) {
providerName = name;
}"
 So. add the following code segment."if (tokens.size() > 1)" is better


- pengjianhua


---
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/64677/#review194054
---


On 十二月 18, 2017, 7:47 a.m., pengjianhua wrote:
> 
> ---
> This is an automatically generated e-mail. To reply, visit:
> https://reviews.apache.org/r/64677/
> ---
> 
> (Updated 十二月 18, 2017, 7:47 a.m.)
> 
> 
> Review request for ranger, Alok Lal, Ankita Sinha, Don Bosco Durai, Colm O 
> hEigeartaigh, Gautam Borad, Madhan Neethiraj, Ramesh Mani, Selvamohan 
> Neethiraj, Velmurugan Periasamy, and Qiang Zhang.
> 
> 
> Bugs: RANGER-1934
> https://issues.apache.org/jira/browse/RANGER-1934
> 
> 
> Repository: ranger
> 
> 
> Description
> ---
> 
> Optimize the init method in BaseAuditHandler class to avoid 
> ArrayIndexOutOfBoundsException
> The follow in the init method "   List tokens = 
> MiscUtil.toArray(propPrefix, ".");
> String finalToken = tokens.get(tokens.size() - 1);".
> in the init method we should add " if (tokens.size() > 1)" to avoid 
> ArrayIndexOutOfBoundsException.
> 
> 
> Diffs
> -
> 
>   
> agents-audit/src/main/java/org/apache/ranger/audit/provider/BaseAuditHandler.java
>  b095000 
> 
> 
> Diff: https://reviews.apache.org/r/64677/diff/1/
> 
> 
> Testing
> ---
> 
> Tested it.
> 
> 
> Thanks,
> 
> pengjianhua
> 
>

[jira] [Resolved] (RANGER-1203) Ranger YARN Plugin supports Fair Scheduler

2017-12-18 Thread Qiang Zhang (JIRA) 

 [ 
https://issues.apache.org/jira/browse/RANGER-1203?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Qiang Zhang resolved RANGER-1203.
-
   Resolution: Fixed
Fix Version/s: 1.0.0

> Ranger YARN Plugin supports Fair Scheduler
> --
>
> Key: RANGER-1203
> URL: https://issues.apache.org/jira/browse/RANGER-1203
> Project: Ranger
>  Issue Type: New Feature
>  Components: plugins
>Affects Versions: 0.6.1
>Reporter: Qiang Zhang
>Assignee: Qiang Zhang
>  Labels: patch
> Fix For: 1.0.0
>
>
> Currently,hadoop yarn Capacity Scheduler provides a YarnAuthorizationProvider 
> interface.Ranger yarn-plug-in can implement this interface.
> Also Ranger supports the json packet parsing of Capacity Scheduler.
> However,ranger does not support Fair Scheduler.
> Increased functionality:
> Ranger supports the json packet parsing of fair scheduler.
> Hadoop yarn Fair Scheduler will also provide a YarnAuthorizationProvider 
> interface.
> Ranger Yarn plugin adds authority control by fair scheduler, it relies on the 
> fair scheduler pluggable licensing feature patch that hadoop yarn supports.
> Improvement issue of hadoop 
> yarn：https://issues.apache.org/jira/browse/YARN-4997



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)

Re: Re: Moving master to Java 1.8?

2017-12-18 Thread peng.jianhua 
+1
























Jianhua Peng








原始邮件



发件人： ;
收件人： ;
抄送人： ;
日 期 ：2017年12月19日 05:00
主 题 ：Re: Moving master to Java 1.8?


+1

Thanks,
Selva-

> On Dec 18, 2017, at 2:52 PM, Velmurugan Periasamy  wrote:
> 
> Colm ­ this is a good idea. +1
> 
> From:  Ramesh Mani 
> Reply-To:  "dev@ranger.apache.org" 
> Date:  Monday, December 18, 2017 at 1:08 PM
> To:  "dev@ranger.apache.org" , "cohei...@apache.org"
> 
> Subject:  Re: Moving master to Java 1.8?
> 
> Colm,
> 
> I having being thinking on this, when we move to Hbase 2.0 version we need
> Java 1.8 for the  Ranger hbase plugin to compile.
> 
> +1 for this.
> 
> Thanks,
> Ramesh
> 
> On 12/16/17, 10:18 AM, "Colm O hEigeartaigh"  wrote:
> 
>> Hi all,
>> 
>> Before I fix the currently failing Hive tests with JDK 7, I'm wondering if
>> it's time to move Ranger master to require Java 1.8. Apache Hadoop 3.0.0
>> requires Java 1.8 - so we will have to make the switch if we want to pick
>> up Hadoop 3.0.0 for Ranger 1.0.0. Apache Knox 0.14.0 is also Java 8 only,
>> so we can't upgrade to that as things stand.
>> 
>> Thoughts?
>> 
>> Colm.
>> 
>> 
>> --
>> Colm O hEigeartaigh
>> 
>> Talend Community Coder
>> http://coders.talend.com
> 
> 
> 
>

Re: Review Request 64677: RANGER-1934:Optimize the init method in BaseAuditHandler class to avoid ArrayIndexOutOfBoundsException

2017-12-18 Thread Qiang Zhang 

---
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/64677/#review194105
---




agents-audit/src/main/java/org/apache/ranger/audit/provider/BaseAuditHandler.java
Lines 93 (patched)


Please modify tokens.size() > 1 to tokens.size() > 0


- Qiang Zhang


On Dec. 18, 2017, 7:47 a.m., pengjianhua wrote:
> 
> ---
> This is an automatically generated e-mail. To reply, visit:
> https://reviews.apache.org/r/64677/
> ---
> 
> (Updated Dec. 18, 2017, 7:47 a.m.)
> 
> 
> Review request for ranger, Alok Lal, Ankita Sinha, Don Bosco Durai, Colm O 
> hEigeartaigh, Gautam Borad, Madhan Neethiraj, Ramesh Mani, Selvamohan 
> Neethiraj, Velmurugan Periasamy, and Qiang Zhang.
> 
> 
> Bugs: RANGER-1934
> https://issues.apache.org/jira/browse/RANGER-1934
> 
> 
> Repository: ranger
> 
> 
> Description
> ---
> 
> Optimize the init method in BaseAuditHandler class to avoid 
> ArrayIndexOutOfBoundsException
> The follow in the init method "   List tokens = 
> MiscUtil.toArray(propPrefix, ".");
> String finalToken = tokens.get(tokens.size() - 1);".
> in the init method we should add " if (tokens.size() > 1)" to avoid 
> ArrayIndexOutOfBoundsException.
> 
> 
> Diffs
> -
> 
>   
> agents-audit/src/main/java/org/apache/ranger/audit/provider/BaseAuditHandler.java
>  b095000 
> 
> 
> Diff: https://reviews.apache.org/r/64677/diff/1/
> 
> 
> Testing
> ---
> 
> Tested it.
> 
> 
> Thanks,
> 
> pengjianhua
> 
>

[jira] [Updated] (RANGER-1905) NoClassDefFoundError from the built zip/tar.gz, created by the maven-assembly-plugin

2017-12-18 Thread Velmurugan Periasamy (JIRA) 

 [ 
https://issues.apache.org/jira/browse/RANGER-1905?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Velmurugan Periasamy updated RANGER-1905:
-
Fix Version/s: 1.0.0

> NoClassDefFoundError from the built zip/tar.gz, created by the 
> maven-assembly-plugin
> 
>
> Key: RANGER-1905
> URL: https://issues.apache.org/jira/browse/RANGER-1905
> Project: Ranger
>  Issue Type: Bug
>  Components: admin
>Reporter: Zsombor Gegesy
>Assignee: Zsombor Gegesy
>Priority: Blocker
> Fix For: 1.0.0
>
> Attachments: RANGER-1905-2.patch, RANGER-1905-3.patch, 
> RANGER-1905-4.patch, RANGER-1905.patch
>
>
> It seems, because of the recent guava exclusions, the maven-assembly plugin 
> fails to include guava-17.0.jar in ews/lib. It only puts into 
> ews/webapp/WEB-INF/lib and cred/lib/guava-17.0.jar. Unfortunately this blocks 
> starting up the server, because of the following exception:
> {code}
> Exception in thread "main" java.lang.NoClassDefFoundError: 
> com/google/common/base/Preconditions
> at 
> org.apache.hadoop.conf.Configuration$DeprecationDelta.(Configuration.java:336)
> at 
> org.apache.hadoop.conf.Configuration$DeprecationDelta.(Configuration.java:349)
> at 
> org.apache.hadoop.conf.Configuration.(Configuration.java:431)
> at 
> org.apache.ranger.server.tomcat.EmbeddedServer.getDecryptedString(EmbeddedServer.java:480)
> at 
> org.apache.ranger.server.tomcat.EmbeddedServer.start(EmbeddedServer.java:142)
> at 
> org.apache.ranger.server.tomcat.EmbeddedServer.main(EmbeddedServer.java:76)
> Caused by: java.lang.ClassNotFoundException: 
> com.google.common.base.Preconditions
> at java.net.URLClassLoader.findClass(URLClassLoader.java:381)
> at java.lang.ClassLoader.loadClass(ClassLoader.java:424)
> at sun.misc.Launcher$AppClassLoader.loadClass(Launcher.java:331)
> at java.lang.ClassLoader.loadClass(ClassLoader.java:357)
> {code}



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)

[jira] [Resolved] (RANGER-1905) NoClassDefFoundError from the built zip/tar.gz, created by the maven-assembly-plugin

2017-12-18 Thread Velmurugan Periasamy (JIRA) 

 [ 
https://issues.apache.org/jira/browse/RANGER-1905?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Velmurugan Periasamy resolved RANGER-1905.
--
Resolution: Fixed

Committed to master - 
https://git-wip-us.apache.org/repos/asf?p=ranger.git;a=commit;h=bba925d48e6381b40c34f3364aa34020a984e284

> NoClassDefFoundError from the built zip/tar.gz, created by the 
> maven-assembly-plugin
> 
>
> Key: RANGER-1905
> URL: https://issues.apache.org/jira/browse/RANGER-1905
> Project: Ranger
>  Issue Type: Bug
>  Components: admin
>Reporter: Zsombor Gegesy
>Assignee: Zsombor Gegesy
>Priority: Blocker
> Attachments: RANGER-1905-2.patch, RANGER-1905-3.patch, 
> RANGER-1905-4.patch, RANGER-1905.patch
>
>
> It seems, because of the recent guava exclusions, the maven-assembly plugin 
> fails to include guava-17.0.jar in ews/lib. It only puts into 
> ews/webapp/WEB-INF/lib and cred/lib/guava-17.0.jar. Unfortunately this blocks 
> starting up the server, because of the following exception:
> {code}
> Exception in thread "main" java.lang.NoClassDefFoundError: 
> com/google/common/base/Preconditions
> at 
> org.apache.hadoop.conf.Configuration$DeprecationDelta.(Configuration.java:336)
> at 
> org.apache.hadoop.conf.Configuration$DeprecationDelta.(Configuration.java:349)
> at 
> org.apache.hadoop.conf.Configuration.(Configuration.java:431)
> at 
> org.apache.ranger.server.tomcat.EmbeddedServer.getDecryptedString(EmbeddedServer.java:480)
> at 
> org.apache.ranger.server.tomcat.EmbeddedServer.start(EmbeddedServer.java:142)
> at 
> org.apache.ranger.server.tomcat.EmbeddedServer.main(EmbeddedServer.java:76)
> Caused by: java.lang.ClassNotFoundException: 
> com.google.common.base.Preconditions
> at java.net.URLClassLoader.findClass(URLClassLoader.java:381)
> at java.lang.ClassLoader.loadClass(ClassLoader.java:424)
> at sun.misc.Launcher$AppClassLoader.loadClass(Launcher.java:331)
> at java.lang.ClassLoader.loadClass(ClassLoader.java:357)
> {code}



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)

[jira] [Resolved] (RANGER-1827) micro benchmark for policy evaluation

2017-12-18 Thread Velmurugan Periasamy (JIRA) 

 [ 
https://issues.apache.org/jira/browse/RANGER-1827?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Velmurugan Periasamy resolved RANGER-1827.
--
Resolution: Fixed

Committed to master - 
https://git-wip-us.apache.org/repos/asf?p=ranger.git;a=commit;h=46164b7514891c67e617ec64bbd770668ef79c89

> micro benchmark for policy evaluation
> -
>
> Key: RANGER-1827
> URL: https://issues.apache.org/jira/browse/RANGER-1827
> Project: Ranger
>  Issue Type: Test
>  Components: Ranger
>Affects Versions: master
>Reporter: Endre Kovacs
>Assignee: Endre Kovacs
>Priority: Minor
>  Labels: performance, test
> Fix For: 1.0.0
>
> Attachments: 
> 0001-RANGER-1827-microbenchmark-for-RangerPolicyEngine.patch, 
> performance-chart-trie-enabled.html, performance-chart.html, 
> policy-evaluation-performance.png
>
>
> implement micro benchmark testing the performance of RangerPolicyEngine at 
> different load of # of policies and # of concurrent users



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)

Re: Review Request 63987: RANGER-1905 : fix maven assembly creation

2017-12-18 Thread Velmurugan Periasamy 

---
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/63987/#review194104
---


Ship it!




Ship It!

- Velmurugan Periasamy


On Dec. 7, 2017, 8:54 p.m., Zsombor Gegesy wrote:
> 
> ---
> This is an automatically generated e-mail. To reply, visit:
> https://reviews.apache.org/r/63987/
> ---
> 
> (Updated Dec. 7, 2017, 8:54 p.m.)
> 
> 
> Review request for ranger.
> 
> 
> Bugs: RANGER-1905
> https://issues.apache.org/jira/browse/RANGER-1905
> 
> 
> Repository: ranger
> 
> 
> Description
> ---
> 
> As ranger-plugins-audit doesn't exclude guava from hadoop common, an older 
> guava
>  is leaked into embeddedwebserver classpath, which somehow filtered out by the
>  assembly plugin.
> If we explicitly exclude the old guava, and include the new (17.0) guava in 
> ranger-plugins-audit module, the generated tar.gz/zip distributions will 
> contain the necessary guava-17.0.jar in ews/lib path.
> 
> 
> Diffs
> -
> 
>   agents-audit/pom.xml c8bd1d8f3 
>   embeddedwebserver/scripts/ranger-admin-services.sh 278aab6c9 
>   src/main/assembly/plugin-atlas.xml 2c581f8e8 
> 
> 
> Diff: https://reviews.apache.org/r/63987/diff/4/
> 
> 
> Testing
> ---
> 
> Tested with executing:
> 
> mvn -DskipTests package assembly:assembly;
> unzip -Z1 target/ranger-1.0.0-SNAPSHOT-admin.zip | sort > FILES.txt
> 
> And comparing the results with different versions. With the patch, the guava 
> jar appears correctly.
> 
> 
> Thanks,
> 
> Zsombor Gegesy
> 
>

[jira] [Commented] (RANGER-1929) The ranger should support preview policy.

2017-12-18 Thread Velmurugan Periasamy (JIRA) 

[ 
https://issues.apache.org/jira/browse/RANGER-1929?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16295931#comment-16295931
 ] 

Velmurugan Periasamy commented on RANGER-1929:
--

Looks good. It would be more appropriate to call "View policy" instead of 
"Preview policy". May be add a view icon near edit icon? 

> The ranger should support preview policy.
> -
>
> Key: RANGER-1929
> URL: https://issues.apache.org/jira/browse/RANGER-1929
> Project: Ranger
>  Issue Type: New Feature
>  Components: admin
>Reporter: peng.jianhua
>Assignee: peng.jianhua
>  Labels: newbie, patch
> Attachments: 
> 0001-RANGER-1929-The-ranger-should-support-preview-policy.patch, 
> ragner_pic1.png, ragner_pic2.png, ragner_pic3.png, ragner_pic4.png
>
>
> Currently we can only edit the policy without previewing the policy. We must 
> use editing funtion of policy when only need to query the detail for policy. 
> So we should supply the function of the query detail for policy.



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)

Re: Review Request 62850: RANGER-1827: microbenchmark for policy evaluation

2017-12-18 Thread Velmurugan Periasamy 

---
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/62850/#review194102
---


Ship it!




Ship It!

- Velmurugan Periasamy


On Dec. 15, 2017, 1:42 p.m., Endre Zoltan Kovacs wrote:
> 
> ---
> This is an automatically generated e-mail. To reply, visit:
> https://reviews.apache.org/r/62850/
> ---
> 
> (Updated Dec. 15, 2017, 1:42 p.m.)
> 
> 
> Review request for ranger.
> 
> 
> Bugs: RANGER-1827
> https://issues.apache.org/jira/browse/RANGER-1827
> 
> 
> Repository: ranger
> 
> 
> Description
> ---
> 
> created a microbenchmark for the policy evaluation engine
> 
> 
> Diffs
> -
> 
>   
> agents-common/src/main/java/org/apache/ranger/plugin/util/PerfDataRecorder.java
>  25f533476 
>   ranger-tools/pom.xml ff37fb3eb 
>   
> ranger-tools/src/main/java/org/apache/ranger/policyengine/PerfTestClient.java 
> e6095cba2 
>   
> ranger-tools/src/main/java/org/apache/ranger/policyengine/RangerAccessRequestDeserializer.java
>  PRE-CREATION 
>   
> ranger-tools/src/main/java/org/apache/ranger/policyengine/RangerResourceDeserializer.java
>  PRE-CREATION 
>   
> ranger-tools/src/main/java/org/apache/ranger/policyengine/perftest/v2/RangerPolicyFactory.java
>  PRE-CREATION 
>   
> ranger-tools/src/test/java/org/apache/ranger/policyengine/RangerPolicyEnginePerformanceTest.java
>  PRE-CREATION 
>   ranger-tools/src/test/resources/log4j.properties 4ea9d854e 
>   ranger-tools/src/test/resources/testdata/performance-chart.template 
> PRE-CREATION 
>   ranger-tools/src/test/resources/testdata/single-policy-template.json 
> PRE-CREATION 
>   ranger-tools/src/test/resources/testdata/single-request-template.json 
> PRE-CREATION 
> 
> 
> Diff: https://reviews.apache.org/r/62850/diff/8/
> 
> 
> Testing
> ---
> 
> A parameterized JUnit test that tests the performance of RangerPolicyEngine 
> under increasing load of number of policies and concurrent calls.
> a cross product of the input parameters are generated and fed into the test 
> method.
> 
> This microbenchmark includes a warm-up phase so that any of the JIT 
> performance optimizations happen before the measurement of the policy 
> engine's performance.
> 
> 
> File Attachments
> 
> 
> 0001-RANGER-1827-microbenchmark-for-RangerPolicyEngine.patch
>   
> https://reviews.apache.org/media/uploaded/files/2017/10/10/3fc881bb-c8ea-427b-a6b4-8d1236159c82__0001-RANGER-1827-microbenchmark-for-RangerPolicyEngine.patch
> 
> 
> Thanks,
> 
> Endre Zoltan Kovacs
> 
>

Re: Review Request 64641: Improvement on Ranger-usersync log configuration

2017-12-18 Thread Velmurugan Periasamy 

---
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/64641/#review194095
---


Ship it!




Ship It!

- Velmurugan Periasamy


On Dec. 18, 2017, 2:04 p.m., Nikhil P wrote:
> 
> ---
> This is an automatically generated e-mail. To reply, visit:
> https://reviews.apache.org/r/64641/
> ---
> 
> (Updated Dec. 18, 2017, 2:04 p.m.)
> 
> 
> Review request for ranger, Ankita Sinha, Don Bosco Durai, Gautam Borad, Abhay 
> Kulkarni, Madhan Neethiraj, Pradeep Agrawal, Ramesh Mani, Selvamohan 
> Neethiraj, Sailaja Polavarapu, and Velmurugan Periasamy.
> 
> 
> Bugs: RANGER-1933
> https://issues.apache.org/jira/browse/RANGER-1933
> 
> 
> Repository: ranger
> 
> 
> Description
> ---
> 
> Improvement on Ranger-usersync log configuration
> 
> 
> Diffs
> -
> 
>   unixauthservice/scripts/ranger-usersync-services.sh 18dbc9a 
>   unixauthservice/scripts/setup.py 5f659d7 
> 
> 
> Diff: https://reviews.apache.org/r/64641/diff/1/
> 
> 
> Testing
> ---
> 
> 1)Tested on manual ranger-usersync install.
> 2)verified if logs are generating properly.
> 
> 
> Thanks,
> 
> Nikhil P
> 
>

Re: Moving master to Java 1.8?

2017-12-18 Thread Selvamohan Neethiraj 
+1

Thanks,
Selva-

> On Dec 18, 2017, at 2:52 PM, Velmurugan Periasamy  wrote:
> 
> Colm ­ this is a good idea. +1
> 
> From:  Ramesh Mani 
> Reply-To:  "dev@ranger.apache.org" 
> Date:  Monday, December 18, 2017 at 1:08 PM
> To:  "dev@ranger.apache.org" , "cohei...@apache.org"
> 
> Subject:  Re: Moving master to Java 1.8?
> 
> Colm,
> 
> I having being thinking on this, when we move to Hbase 2.0 version we need
> Java 1.8 for the  Ranger hbase plugin to compile.
> 
> +1 for this.
> 
> Thanks,
> Ramesh
> 
> On 12/16/17, 10:18 AM, "Colm O hEigeartaigh"  wrote:
> 
>> Hi all,
>> 
>> Before I fix the currently failing Hive tests with JDK 7, I'm wondering if
>> it's time to move Ranger master to require Java 1.8. Apache Hadoop 3.0.0
>> requires Java 1.8 - so we will have to make the switch if we want to pick
>> up Hadoop 3.0.0 for Ranger 1.0.0. Apache Knox 0.14.0 is also Java 8 only,
>> so we can't upgrade to that as things stand.
>> 
>> Thoughts?
>> 
>> Colm.
>> 
>> 
>> --
>> Colm O hEigeartaigh
>> 
>> Talend Community Coder
>> http://coders.talend.com
> 
> 
> 
> 



signature.asc
Description: Message signed with OpenPGP

Re: Moving master to Java 1.8?

2017-12-18 Thread Velmurugan Periasamy 
Colm ­ this is a good idea. +1

From:  Ramesh Mani 
Reply-To:  "dev@ranger.apache.org" 
Date:  Monday, December 18, 2017 at 1:08 PM
To:  "dev@ranger.apache.org" , "cohei...@apache.org"

Subject:  Re: Moving master to Java 1.8?

Colm,

I having being thinking on this, when we move to Hbase 2.0 version we need
Java 1.8 for the  Ranger hbase plugin to compile.

+1 for this.

Thanks,
Ramesh

On 12/16/17, 10:18 AM, "Colm O hEigeartaigh"  wrote:

> Hi all,
> 
> Before I fix the currently failing Hive tests with JDK 7, I'm wondering if
> it's time to move Ranger master to require Java 1.8. Apache Hadoop 3.0.0
> requires Java 1.8 - so we will have to make the switch if we want to pick
> up Hadoop 3.0.0 for Ranger 1.0.0. Apache Knox 0.14.0 is also Java 8 only,
> so we can't upgrade to that as things stand.
> 
> Thoughts?
> 
> Colm.
> 
> 
> -- 
> Colm O hEigeartaigh
> 
> Talend Community Coder
> http://coders.talend.com

Re: Moving master to Java 1.8?

2017-12-18 Thread Ramesh Mani 
Colm,

I having being thinking on this, when we move to Hbase 2.0 version we need
Java 1.8 for the  Ranger hbase plugin to compile.

+1 for this.

Thanks,
Ramesh

On 12/16/17, 10:18 AM, "Colm O hEigeartaigh"  wrote:

>Hi all,
>
>Before I fix the currently failing Hive tests with JDK 7, I'm wondering if
>it's time to move Ranger master to require Java 1.8. Apache Hadoop 3.0.0
>requires Java 1.8 - so we will have to make the switch if we want to pick
>up Hadoop 3.0.0 for Ranger 1.0.0. Apache Knox 0.14.0 is also Java 8 only,
>so we can't upgrade to that as things stand.
>
>Thoughts?
>
>Colm.
>
>
>-- 
>Colm O hEigeartaigh
>
>Talend Community Coder
>http://coders.talend.com

[jira] [Updated] (RANGER-1935) Upgrade Ranger to support Apache Hadoop 3.0.0

2017-12-18 Thread Colm O hEigeartaigh (JIRA) 

 [ 
https://issues.apache.org/jira/browse/RANGER-1935?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Colm O hEigeartaigh updated RANGER-1935:

Attachment: 0001-RANGER-1935-Upgrade-Ranger-to-support-Apache-Hadoop-.patch

> Upgrade Ranger to support Apache Hadoop 3.0.0
> -
>
> Key: RANGER-1935
> URL: https://issues.apache.org/jira/browse/RANGER-1935
> Project: Ranger
>  Issue Type: Improvement
>  Components: plugins
>Reporter: Colm O hEigeartaigh
>Assignee: Colm O hEigeartaigh
> Fix For: 1.0.0
>
> Attachments: 
> 0001-RANGER-1935-Upgrade-Ranger-to-support-Apache-Hadoop-.patch
>
>
> This task is to upgrade Ranger to support Apache Hadoop 3.0.0. Here are some 
> notes about the upgrade:
> a) The Hive plugin needs the Hadoop 3.0.0 jars to run the tests properly, as 
> Hive only supports the older Hadoop version, so an exclusion and some 
> additional 3.0.0 dependencies need to be added.
> b) The Storm plugin bundles the hadoop-auth jars in storm-core (although they 
> really should be renamed here). Therefore, we have no option but to package 
> Storm with the Hadoop 2.7.x jars, until such time that Storm upgrades the 
> Hadoop dependency.
> This is an initial patch to get some feedback. If there is broad agreement on 
> the upgrade I will test the distributions properly.



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)

[jira] [Created] (RANGER-1935) Upgrade Ranger to support Apache Hadoop 3.0.0

2017-12-18 Thread Colm O hEigeartaigh (JIRA) 
Colm O hEigeartaigh created RANGER-1935:
---

 Summary: Upgrade Ranger to support Apache Hadoop 3.0.0
 Key: RANGER-1935
 URL: https://issues.apache.org/jira/browse/RANGER-1935
 Project: Ranger
  Issue Type: Improvement
  Components: plugins
Reporter: Colm O hEigeartaigh
Assignee: Colm O hEigeartaigh
 Fix For: 1.0.0


This task is to upgrade Ranger to support Apache Hadoop 3.0.0. Here are some 
notes about the upgrade:

a) The Hive plugin needs the Hadoop 3.0.0 jars to run the tests properly, as 
Hive only supports the older Hadoop version, so an exclusion and some 
additional 3.0.0 dependencies need to be added.
b) The Storm plugin bundles the hadoop-auth jars in storm-core (although they 
really should be renamed here). Therefore, we have no option but to package 
Storm with the Hadoop 2.7.x jars, until such time that Storm upgrades the 
Hadoop dependency.

This is an initial patch to get some feedback. If there is broad agreement on 
the upgrade I will test the distributions properly.



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)

Review Request 64641: Improvement on Ranger-usersync log configuration

2017-12-18 Thread Nikhil P 

---
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/64641/
---

Review request for ranger, Ankita Sinha, Don Bosco Durai, Gautam Borad, Abhay 
Kulkarni, Madhan Neethiraj, Pradeep Agrawal, Ramesh Mani, Selvamohan Neethiraj, 
Sailaja Polavarapu, and Velmurugan Periasamy.


Bugs: RANGER-1933
https://issues.apache.org/jira/browse/RANGER-1933


Repository: ranger


Description
---

Improvement on Ranger-usersync log configuration


Diffs
-

  unixauthservice/scripts/ranger-usersync-services.sh 18dbc9a 
  unixauthservice/scripts/setup.py 5f659d7 


Diff: https://reviews.apache.org/r/64641/diff/1/


Testing
---

1)Tested on manual ranger-usersync install.
2)verified if logs are generating properly.


Thanks,

Nikhil P

Re: Review Request 64677: RANGER-1934:Optimize the init method in BaseAuditHandler class to avoid ArrayIndexOutOfBoundsException

2017-12-18 Thread Qiang Zhang 

---
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/64677/#review194054
---




agents-audit/src/main/java/org/apache/ranger/audit/provider/BaseAuditHandler.java
Lines 95-99 (original), 96-100 (patched)


They should not be included the following code segment.
if (tokens.size() > 1)


- Qiang Zhang


On Dec. 18, 2017, 7:47 a.m., pengjianhua wrote:
> 
> ---
> This is an automatically generated e-mail. To reply, visit:
> https://reviews.apache.org/r/64677/
> ---
> 
> (Updated Dec. 18, 2017, 7:47 a.m.)
> 
> 
> Review request for ranger, Alok Lal, Ankita Sinha, Don Bosco Durai, Colm O 
> hEigeartaigh, Gautam Borad, Madhan Neethiraj, Ramesh Mani, Selvamohan 
> Neethiraj, Velmurugan Periasamy, and Qiang Zhang.
> 
> 
> Bugs: RANGER-1934
> https://issues.apache.org/jira/browse/RANGER-1934
> 
> 
> Repository: ranger
> 
> 
> Description
> ---
> 
> Optimize the init method in BaseAuditHandler class to avoid 
> ArrayIndexOutOfBoundsException
> The follow in the init method "   List tokens = 
> MiscUtil.toArray(propPrefix, ".");
> String finalToken = tokens.get(tokens.size() - 1);".
> in the init method we should add " if (tokens.size() > 1)" to avoid 
> ArrayIndexOutOfBoundsException.
> 
> 
> Diffs
> -
> 
>   
> agents-audit/src/main/java/org/apache/ranger/audit/provider/BaseAuditHandler.java
>  b095000 
> 
> 
> Diff: https://reviews.apache.org/r/64677/diff/1/
> 
> 
> Testing
> ---
> 
> Tested it.
> 
> 
> Thanks,
> 
> pengjianhua
> 
>

Re: Review Request 64634: RANGER-1929:The ranger should support preview policy.

2017-12-18 Thread Qiang Zhang 

---
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/64634/#review194050
---


Ship it!




This is a valuable feature.

- Qiang Zhang


On Dec. 15, 2017, 1:23 a.m., pengjianhua wrote:
> 
> ---
> This is an automatically generated e-mail. To reply, visit:
> https://reviews.apache.org/r/64634/
> ---
> 
> (Updated Dec. 15, 2017, 1:23 a.m.)
> 
> 
> Review request for ranger, Alok Lal, Ankita Sinha, Don Bosco Durai, Colm O 
> hEigeartaigh, Gautam Borad, Madhan Neethiraj, Ramesh Mani, Selvamohan 
> Neethiraj, Velmurugan Periasamy, and Qiang Zhang.
> 
> 
> Bugs: RANGER-1929
> https://issues.apache.org/jira/browse/RANGER-1929
> 
> 
> Repository: ranger
> 
> 
> Description
> ---
> 
> Currently we can only edit the policy without previewing the policy. We must 
> use editing funtion of policy when only need to query the detail for policy. 
> So we should supply the function of the query detail for policy.
> 
> 
> Diffs
> -
> 
>   security-admin/src/main/webapp/scripts/modules/globalize/message/en.js 
> b8de5c3b 
>   
> security-admin/src/main/webapp/scripts/views/policies/RangerPolicyConditions.js
>  PRE-CREATION 
>   security-admin/src/main/webapp/scripts/views/policies/RangerPolicyDetail.js 
> PRE-CREATION 
>   
> security-admin/src/main/webapp/scripts/views/policies/RangerPolicyTableLayout.js
>  09e2e166 
>   security-admin/src/main/webapp/styles/xa.css 22eedf64 
>   
> security-admin/src/main/webapp/templates/policies/RangerPolicyConditions_tmpl.html
>  PRE-CREATION 
>   
> security-admin/src/main/webapp/templates/policies/RangerPolicyDetail_tmpl.html
>  PRE-CREATION 
> 
> 
> Diff: https://reviews.apache.org/r/64634/diff/2/
> 
> 
> Testing
> ---
> 
> 
> Thanks,
> 
> pengjianhua
> 
>

Re: Review Request 63756: RANGER-1738 - RangerYarnAuthorizer not compatible with Hadoop-3.0.0

2017-12-18 Thread pengjianhua 

---
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/63756/#review194049
---



This is a good idea.
+1

- pengjianhua


On 十一月 13, 2017, 2:55 p.m., Colm O hEigeartaigh wrote:
> 
> ---
> This is an automatically generated e-mail. To reply, visit:
> https://reviews.apache.org/r/63756/
> ---
> 
> (Updated 十一月 13, 2017, 2:55 p.m.)
> 
> 
> Review request for ranger.
> 
> 
> Bugs: RANGER-1738
> https://issues.apache.org/jira/browse/RANGER-1738
> 
> 
> Repository: ranger
> 
> 
> Description
> ---
> 
> A patch for this issue. I introduced a new plugin for Yarn with Hadoop 3.0.0, 
> which simply extends the 2.x plugin with the new methods. A new plugin shim 
> is also included.
> 
> 
> Diffs
> -
> 
>   plugin-yarn3/conf/ranger-policymgr-ssl-changes.cfg PRE-CREATION 
>   plugin-yarn3/conf/ranger-policymgr-ssl.xml PRE-CREATION 
>   plugin-yarn3/conf/ranger-yarn-audit-changes.cfg PRE-CREATION 
>   plugin-yarn3/conf/ranger-yarn-audit.xml PRE-CREATION 
>   plugin-yarn3/conf/ranger-yarn-security-changes.cfg PRE-CREATION 
>   plugin-yarn3/conf/ranger-yarn-security.xml PRE-CREATION 
>   plugin-yarn3/conf/yarn-site-changes.cfg PRE-CREATION 
>   plugin-yarn3/disable-conf/yarn-site-changes.cfg PRE-CREATION 
>   plugin-yarn3/pom.xml PRE-CREATION 
>   plugin-yarn3/scripts/install.properties PRE-CREATION 
>   
> plugin-yarn3/src/main/java/org/apache/ranger/authorization/yarn3/authorizer/RangerYarnAuthorizer.java
>  PRE-CREATION 
>   pom.xml 589cd6ac 
>   ranger-yarn3-plugin-shim/pom.xml PRE-CREATION 
>   
> ranger-yarn3-plugin-shim/src/main/java/org/apache/ranger/authorization/yarn3/authorizer/RangerYarnAuthorizer.java
>  PRE-CREATION 
>   src/main/assembly/plugin-yarn3.xml PRE-CREATION 
> 
> 
> Diff: https://reviews.apache.org/r/63756/diff/1/
> 
> 
> Testing
> ---
> 
> Tested installing the new plugin and checking that authorization works 
> correctly.
> 
> 
> Thanks,
> 
> Colm O hEigeartaigh
> 
>

Re: Review Request 64640: RANGER-1932:After create the service of yarndev, the policy named 'all-queue' created for the default user should have all the permissions.However, this policy does't take e

2017-12-18 Thread pengjianhua 

---
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/64640/#review194048
---


Ship it!




Ship It!

- pengjianhua


On 十二月 15, 2017, 5:27 a.m., Qiang Zhang wrote:
> 
> ---
> This is an automatically generated e-mail. To reply, visit:
> https://reviews.apache.org/r/64640/
> ---
> 
> (Updated 十二月 15, 2017, 5:27 a.m.)
> 
> 
> Review request for ranger, Ankita Sinha, Don Bosco Durai, Colm O 
> hEigeartaigh, Gautam Borad, Madhan Neethiraj, pengjianhua, Ramesh Mani, 
> Selvamohan Neethiraj, sam  rome, and Velmurugan Periasamy.
> 
> 
> Bugs: RANGER-1932
> https://issues.apache.org/jira/browse/RANGER-1932
> 
> 
> Repository: ranger
> 
> 
> Description
> ---
> 
> Steps:
> 1.Create service named yarndev and userName is xiehh
> 2.The Queue of the default policy for user xiehh is '.*'
> 3.Using xiehh to execute the command line 'hadoop jar 
> /home/xiehh/hadoop-2.7.1/share/hadoop/mapreduce/hadoop-mapreduce-examples-2.7.1.jar
>  wordcount -Dmapreduce.job.queuename=default /input /output/mr'
> Exceptions are as follows:
>   [xiehh@zdh41 hadoop-2.7.1]$ hadoop jar 
> /home/xiehh/hadoop-2.7.1/share/hadoop/mapreduce/hadoop-mapreduce-examples-2.7.1.jar
>  wordcount -Dmapreduce.job.queuename=default /input /output/mr
> 17/12/15 10:53:27 WARN util.NativeCodeLoader: Unable to load native-hadoop 
> library for your platform... using builtin-java classes where applicable
> 17/12/15 10:53:28 INFO client.RMProxy: Connecting to ResourceManager at 
> /0.0.0.0:8032
> 17/12/15 10:53:28 INFO input.FileInputFormat: Total input paths to process : 1
> 17/12/15 10:53:28 INFO mapreduce.JobSubmitter: number of splits:1
> 17/12/15 10:53:29 INFO mapreduce.JobSubmitter: Submitting tokens for job: 
> job_1513238905285_0005
> 17/12/15 10:53:44 INFO mapreduce.JobSubmitter: Cleaning up the staging area 
> /tmp/hadoop-yarn/staging/xiehh/.staging/job_1513238905285_0005
> java.io.IOException: org.apache.hadoop.yarn.exceptions.YarnException: Failed 
> to submit application_1513238905285_0005 to YARN : 
> org.apache.hadoop.security.AccessControlException: User xiehh cannot submit 
> applications to queue root.default
>   at org.apache.hadoop.mapred.YARNRunner.submitJob(YARNRunner.java:306)
>   at 
> org.apache.hadoop.mapreduce.JobSubmitter.submitJobInternal(JobSubmitter.java:240)
>   at org.apache.hadoop.mapreduce.Job$10.run(Job.java:1290)
>   at org.apache.hadoop.mapreduce.Job$10.run(Job.java:1287)
>   at java.security.AccessController.doPrivileged(Native Method)
>   at javax.security.auth.Subject.doAs(Subject.java:415)
>   at 
> org.apache.hadoop.security.UserGroupInformation.doAs(UserGroupInformation.java:1657)
>   at org.apache.hadoop.mapreduce.Job.submit(Job.java:1287)
>   at org.apache.hadoop.mapreduce.Job.waitForCompletion(Job.java:1308)
>   at org.apache.hadoop.examples.WordCount.main(WordCount.java:87)
>   at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
>   at 
> sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
>   at 
> sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
>   at java.lang.reflect.Method.invoke(Method.java:606)
>   at 
> org.apache.hadoop.util.ProgramDriver$ProgramDescription.invoke(ProgramDriver.java:71)
>   at org.apache.hadoop.util.ProgramDriver.run(ProgramDriver.java:144)
>   at org.apache.hadoop.examples.ExampleDriver.main(ExampleDriver.java:74)
>   at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
>   at 
> sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
>   at 
> sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
>   at java.lang.reflect.Method.invoke(Method.java:606)
>   at org.apache.hadoop.util.RunJar.run(RunJar.java:221)
>   at org.apache.hadoop.util.RunJar.main(RunJar.java:136)
> Caused by: org.apache.hadoop.yarn.exceptions.YarnException: Failed to submit 
> application_1513238905285_0005 to YARN : 
> org.apache.hadoop.security.AccessControlException: User xiehh cannot submit 
> applications to queue root.default
>   at 
> org.apache.hadoop.yarn.client.api.impl.YarnClientImpl.submitApplication(YarnClientImpl.java:270)
>   at 
> org.apache.hadoop.mapred.ResourceMgrDelegate.submitApplication(ResourceMgrDelegate.java:290)
>   at org.apache.hadoop.mapred.YARNRunner.submitJob(YARNRunner.java:290)
>   ... 22 more
> The user xiehh does't have the permission, and the default policy for 
> 'all-queue' does't take effect.
> 4.Through analysis,I find that the Queue '.*' is wrong, and we should change 
> to '*.*'
> 5.After changed:
> [xiehh@zdh41 hadoop-2.7.1]$ hadoop jar 
>