[jira] [Updated] (RANGER-3581) setup.sh can not "CREATE FUNCTION" on MySQL with Master/Slave profile.

2022-01-11 Thread kirby zhou (Jira)
[ https://issues.apache.org/jira/browse/RANGER-3581?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] kirby zhou updated RANGER-3581: --- Component/s: admin (was: kms) > setup.sh can not "CREATE FUNCTION" on MySQL

[jira] [Commented] (RANGER-3524) Bug in KeyAuthorizationKeyProvider.checkAccess

2022-01-12 Thread kirby zhou (Jira)
[ https://issues.apache.org/jira/browse/RANGER-3524?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17475162#comment-17475162 ] kirby zhou commented on RANGER-3524: It donot seems a bug. isACLPresent returns true when a ACL

[jira] [Created] (RANGER-3580) Add more KeyVault Provider to KMS

2022-01-10 Thread kirby zhou (Jira)
kirby zhou created RANGER-3580: -- Summary: Add more KeyVault Provider to KMS Key: RANGER-3580 URL: https://issues.apache.org/jira/browse/RANGER-3580 Project: Ranger Issue Type: New Feature

[jira] [Comment Edited] (RANGER-3580) Add more KeyVault Provider to KMS

2022-01-11 Thread kirby zhou (Jira)
[ https://issues.apache.org/jira/browse/RANGER-3580?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17472660#comment-17472660 ] kirby zhou edited comment on RANGER-3580 at 1/11/22, 11:16 AM: ---

[jira] [Updated] (RANGER-3580) Add more KeyVault Provider to KMS

2022-01-11 Thread kirby zhou (Jira)
[ https://issues.apache.org/jira/browse/RANGER-3580?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] kirby zhou updated RANGER-3580: --- Attachment: 0001-add-kmsdev-profile-for-KMS-development.patch

[jira] [Updated] (RANGER-3581) setup.sh can not "CREATE FUNCTION" on MySQL with Master/Slave profile.

2022-01-11 Thread kirby zhou (Jira)
[ https://issues.apache.org/jira/browse/RANGER-3581?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] kirby zhou updated RANGER-3581: --- Attachment: 0001-add-FUNCTION-description-for-mysql-master-slave.patch > setup.sh can not "CREATE

[jira] [Created] (RANGER-3581) setup.sh can not "CREATE FUNCTION" on MySQL with Master/Slave profile.

2022-01-11 Thread kirby zhou (Jira)
kirby zhou created RANGER-3581: -- Summary: setup.sh can not "CREATE FUNCTION" on MySQL with Master/Slave profile. Key: RANGER-3581 URL: https://issues.apache.org/jira/browse/RANGER-3581 Project: Ranger

[jira] [Updated] (RANGER-3580) Add more KeyVault Provider to KMS

2022-01-11 Thread kirby zhou (Jira)
[ https://issues.apache.org/jira/browse/RANGER-3580?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] kirby zhou updated RANGER-3580: --- Attachment: 0002-add-kmsdev-profile-for-KMS-development.patch

[jira] [Updated] (RANGER-3580) Add more KeyVault Provider to KMS

2022-01-11 Thread kirby zhou (Jira)
[ https://issues.apache.org/jira/browse/RANGER-3580?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] kirby zhou updated RANGER-3580: --- Attachment: 0001-add-FUNCTION-description-for-mysql-master-slave.patch > Add more KeyVault Provider

[jira] [Updated] (RANGER-3580) Add more KeyVault Provider to KMS

2022-01-11 Thread kirby zhou (Jira)
[ https://issues.apache.org/jira/browse/RANGER-3580?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] kirby zhou updated RANGER-3580: --- Attachment: (was: 0001-add-FUNCTION-description-for-mysql-master-slave.patch) > Add more

[jira] [Updated] (RANGER-3580) Add more KeyVault Provider to KMS

2022-01-11 Thread kirby zhou (Jira)
[ https://issues.apache.org/jira/browse/RANGER-3580?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] kirby zhou updated RANGER-3580: --- Attachment: (was: 0004-Extract-client-creation-into-KeyGenerator.java.patch) > Add more

[jira] [Updated] (RANGER-3580) Add more KeyVault Provider to KMS

2022-01-11 Thread kirby zhou (Jira)
[ https://issues.apache.org/jira/browse/RANGER-3580?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] kirby zhou updated RANGER-3580: --- Attachment: (was: 0003-RangerKMSZKI-as-ZoneKey-interface-add-TencentKMS.patch) > Add more

[jira] [Updated] (RANGER-3580) Add more KeyVault Provider to KMS

2022-01-11 Thread kirby zhou (Jira)
[ https://issues.apache.org/jira/browse/RANGER-3580?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] kirby zhou updated RANGER-3580: --- Attachment: (was: 0002-add-kmsdev-profile-for-KMS-development.patch) > Add more KeyVault

[jira] [Comment Edited] (RANGER-3580) Add more KeyVault Provider to KMS

2022-01-11 Thread kirby zhou (Jira)
[ https://issues.apache.org/jira/browse/RANGER-3580?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17472660#comment-17472660 ] kirby zhou edited comment on RANGER-3580 at 1/11/22, 11:11 AM: --- #

[jira] [Commented] (RANGER-3580) Add more KeyVault Provider to KMS

2022-01-11 Thread kirby zhou (Jira)
[ https://issues.apache.org/jira/browse/RANGER-3580?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17472660#comment-17472660 ] kirby zhou commented on RANGER-3580: # TencentKMS deployment configuration  # The following

[jira] [Commented] (RANGER-3580) Add more KeyVault Provider to KMS

2022-01-11 Thread kirby zhou (Jira)
[ https://issues.apache.org/jira/browse/RANGER-3580?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17472665#comment-17472665 ] kirby zhou commented on RANGER-3580: Major changes of code: *

[jira] [Updated] (RANGER-3580) Support Ranger KMS integration with TencentKMS

2022-01-16 Thread kirby zhou (Jira)
[ https://issues.apache.org/jira/browse/RANGER-3580?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] kirby zhou updated RANGER-3580: --- Summary: Support Ranger KMS integration with TencentKMS (was: Add more KeyVault Provider to KMS)

[jira] [Commented] (RANGER-3569) Support Ranger KMS integration with Google cloud HSM

2022-01-16 Thread kirby zhou (Jira)
[ https://issues.apache.org/jira/browse/RANGER-3569?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17477001#comment-17477001 ] kirby zhou commented on RANGER-3569: Maybe the module should be KMS of Ranger instead of Ranger of

[jira] [Comment Edited] (RANGER-3569) Support Ranger KMS integration with Google cloud HSM

2022-01-17 Thread kirby zhou (Jira)
[ https://issues.apache.org/jira/browse/RANGER-3569?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17477192#comment-17477192 ] kirby zhou edited comment on RANGER-3569 at 1/17/22, 12:59 PM: --- here is a

[jira] [Comment Edited] (RANGER-3569) Support Ranger KMS integration with Google cloud HSM

2022-01-17 Thread kirby zhou (Jira)
[ https://issues.apache.org/jira/browse/RANGER-3569?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17477192#comment-17477192 ] kirby zhou edited comment on RANGER-3569 at 1/17/22, 12:59 PM: --- here is a

[jira] [Commented] (RANGER-3569) Support Ranger KMS integration with Google cloud HSM

2022-01-17 Thread kirby zhou (Jira)
[ https://issues.apache.org/jira/browse/RANGER-3569?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17477192#comment-17477192 ] kirby zhou commented on RANGER-3569: here is a bug at public RangerKeyStoreProvider(Configuration

[jira] [Updated] (RANGER-3580) Support Ranger KMS integration with TencentKMS

2022-01-17 Thread kirby zhou (Jira)
[ https://issues.apache.org/jira/browse/RANGER-3580?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] kirby zhou updated RANGER-3580: --- Attachment: 0009-add-TencentKMS-as-MasterKeyProvider.patch > Support Ranger KMS integration with

[jira] [Updated] (RANGER-3580) Support Ranger KMS integration with TencentKMS

2022-01-17 Thread kirby zhou (Jira)
[ https://issues.apache.org/jira/browse/RANGER-3580?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] kirby zhou updated RANGER-3580: --- Attachment: (was: 0001-add-kmsdev-profile-for-KMS-development.patch) > Support Ranger KMS

[jira] [Updated] (RANGER-3580) Support Ranger KMS integration with TencentKMS

2022-01-17 Thread kirby zhou (Jira)
[ https://issues.apache.org/jira/browse/RANGER-3580?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] kirby zhou updated RANGER-3580: --- Attachment: (was: 0002-RangerKMSZKI-as-ZoneKey-interface-add-TencentKMS.patch) > Support

[jira] (RANGER-3580) Support Ranger KMS integration with TencentKMS

2022-01-17 Thread kirby zhou (Jira)
[ https://issues.apache.org/jira/browse/RANGER-3580 ] kirby zhou deleted comment on RANGER-3580: was (Author: kirbyzhou): Patch with Master branch [^0001-add-kmsdev-profile-for-KMS-development.patch]

[jira] [Commented] (RANGER-3569) Support Ranger KMS integration with Google cloud HSM

2022-01-17 Thread kirby zhou (Jira)
[ https://issues.apache.org/jira/browse/RANGER-3569?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17477202#comment-17477202 ] kirby zhou commented on RANGER-3569: And I have a patch for Tencent KMS integration, anyone can

[jira] [Comment Edited] (RANGER-3569) Support Ranger KMS integration with Google cloud HSM

2022-01-17 Thread kirby zhou (Jira)
[ https://issues.apache.org/jira/browse/RANGER-3569?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17477202#comment-17477202 ] kirby zhou edited comment on RANGER-3569 at 1/17/22, 1:16 PM: -- And I have a

[jira] [Created] (RANGER-3619) REST API should return 403 when authenticated client is not allowed to access API.

2022-02-13 Thread kirby zhou (Jira)
kirby zhou created RANGER-3619: -- Summary: REST API should return 403 when authenticated client is not allowed to access API. Key: RANGER-3619 URL: https://issues.apache.org/jira/browse/RANGER-3619

[jira] [Updated] (RANGER-3623) Add ability to enable anonymous download of policy/role/tag

2022-02-14 Thread kirby zhou (Jira)
[ https://issues.apache.org/jira/browse/RANGER-3623?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] kirby zhou updated RANGER-3623: --- Attachment: add-downloadonly-option.patch > Add ability to enable anonymous download of

[jira] [Created] (RANGER-3623) Add ability to enable anonymous download of policy/role/tag

2022-02-14 Thread kirby zhou (Jira)
kirby zhou created RANGER-3623: -- Summary: Add ability to enable anonymous download of policy/role/tag Key: RANGER-3623 URL: https://issues.apache.org/jira/browse/RANGER-3623 Project: Ranger

[jira] [Updated] (RANGER-3623) Add ability to enable anonymous download of policy/role/tag

2022-02-14 Thread kirby zhou (Jira)
[ https://issues.apache.org/jira/browse/RANGER-3623?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] kirby zhou updated RANGER-3623: --- Attachment: (was: add-downloadonly-option.patch) > Add ability to enable anonymous download of

[jira] [Updated] (RANGER-3623) Add ability to enable anonymous download of policy/role/tag

2022-02-14 Thread kirby zhou (Jira)
[ https://issues.apache.org/jira/browse/RANGER-3623?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] kirby zhou updated RANGER-3623: --- Attachment: add-downloadonly-option.patch > Add ability to enable anonymous download of

[jira] [Created] (RANGER-3654) Remove "org.elasticsearch" dependencies from "plugin-elasticsearch/pom.xml"

2022-03-06 Thread kirby zhou (Jira)
kirby zhou created RANGER-3654: -- Summary: Remove "org.elasticsearch" dependencies from "plugin-elasticsearch/pom.xml" Key: RANGER-3654 URL: https://issues.apache.org/jira/browse/RANGER-3654 Project:

[jira] [Commented] (RANGER-3595) Tar of KMS contains rubbish files

2022-03-05 Thread kirby zhou (Jira)
[ https://issues.apache.org/jira/browse/RANGER-3595?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17501853#comment-17501853 ] kirby zhou commented on RANGER-3595: For ranger-2.3 [https://reviews.apache.org/r/73891/] as your

[jira] [Commented] (RANGER-2362) [security] Admin webui - Lack of account lockout

2022-03-11 Thread kirby zhou (Jira)
[ https://issues.apache.org/jira/browse/RANGER-2362?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17504881#comment-17504881 ] kirby zhou commented on RANGER-2362: https://reviews.apache.org/r/73898/ A simple demo code for

[jira] [Commented] (RANGER-2362) [security] Admin webui - Lack of account lockout

2022-03-08 Thread kirby zhou (Jira)
[ https://issues.apache.org/jira/browse/RANGER-2362?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17502872#comment-17502872 ] kirby zhou commented on RANGER-2362: I think way 1 is unacceptable. Small clusters DO NOT want to

[jira] [Commented] (RANGER-2362) [security] Admin webui - Lack of account lockout

2022-03-08 Thread kirby zhou (Jira)
[ https://issues.apache.org/jira/browse/RANGER-2362?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17502875#comment-17502875 ] kirby zhou commented on RANGER-2362:

[jira] [Commented] (RANGER-3663) RangerBizUtil.checkAdminAccess() should return false if user-session is not available

2022-03-11 Thread kirby zhou (Jira)
[ https://issues.apache.org/jira/browse/RANGER-3663?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17505163#comment-17505163 ] kirby zhou commented on RANGER-3663: Some API returns 400 instead of 401 if user-session is not

[jira] [Commented] (RANGER-3601) Add a switch on the access_log fils that are generated by EmbeddedServer

2022-03-10 Thread kirby zhou (Jira)
[ https://issues.apache.org/jira/browse/RANGER-3601?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17504080#comment-17504080 ] kirby zhou commented on RANGER-3601: At current master / ranger-2.3 branch We hava log rotate,

[jira] [Commented] (RANGER-3632) Improve ranger logs, RENAME_ON_ROTATE and others

2022-03-10 Thread kirby zhou (Jira)
[ https://issues.apache.org/jira/browse/RANGER-3632?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17504078#comment-17504078 ] kirby zhou commented on RANGER-3632: Notes of patch 1. add options of access_log # set it to false

[jira] [Commented] (RANGER-2362) [security] Admin webui - Lack of account lockout

2022-03-08 Thread kirby zhou (Jira)
[ https://issues.apache.org/jira/browse/RANGER-2362?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17502823#comment-17502823 ] kirby zhou commented on RANGER-2362: Authentication backend such as ldapam has its own lockout

[jira] [Commented] (RANGER-3595) Tar of KMS contains rubbish files

2022-02-16 Thread kirby zhou (Jira)
[ https://issues.apache.org/jira/browse/RANGER-3595?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17493152#comment-17493152 ] kirby zhou commented on RANGER-3595: An alternative, [https://reviews.apache.org/r/73852/] Put

[jira] [Created] (RANGER-3639) Ranger KMS should refactor top stop invading java package of hadoop

2022-02-24 Thread kirby zhou (Jira)
kirby zhou created RANGER-3639: -- Summary: Ranger KMS should refactor top stop invading java package of hadoop Key: RANGER-3639 URL: https://issues.apache.org/jira/browse/RANGER-3639 Project: Ranger

[jira] [Commented] (RANGER-3612) KMS should either Die or Auto-Recover when its ranger-agent auth to KDC failed

2022-02-24 Thread kirby zhou (Jira)
[ https://issues.apache.org/jira/browse/RANGER-3612?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17497282#comment-17497282 ] kirby zhou commented on RANGER-3612: Anybody? > KMS should either Die or Auto-Recover when its

[jira] [Created] (RANGER-3640) The naming of log files is a mess.

2022-02-24 Thread kirby zhou (Jira)
kirby zhou created RANGER-3640: -- Summary: The naming of log files is a mess. Key: RANGER-3640 URL: https://issues.apache.org/jira/browse/RANGER-3640 Project: Ranger Issue Type: Improvement

[jira] [Created] (RANGER-3641) Add API to enhance KMS capabilities

2022-02-24 Thread kirby zhou (Jira)
kirby zhou created RANGER-3641: -- Summary: Add API to enhance KMS capabilities Key: RANGER-3641 URL: https://issues.apache.org/jira/browse/RANGER-3641 Project: Ranger Issue Type: Improvement

[jira] [Updated] (RANGER-3639) Ranger KMS should stop invading java package of hadoop

2022-02-24 Thread kirby zhou (Jira)
[ https://issues.apache.org/jira/browse/RANGER-3639?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] kirby zhou updated RANGER-3639: --- Summary: Ranger KMS should stop invading java package of hadoop (was: Ranger KMS should refactor

[jira] [Commented] (RANGER-3636) Plugin classloader should use classloader of shim class as parent

2022-02-22 Thread kirby zhou (Jira)
[ https://issues.apache.org/jira/browse/RANGER-3636?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17496410#comment-17496410 ] kirby zhou commented on RANGER-3636: It seems reasonable. > Plugin classloader should use

[jira] [Created] (RANGER-3643) Directly expose plugin authentication related attributes in the service page.

2022-02-24 Thread kirby zhou (Jira)
kirby zhou created RANGER-3643: -- Summary: Directly expose plugin authentication related attributes in the service page. Key: RANGER-3643 URL: https://issues.apache.org/jira/browse/RANGER-3643 Project:

[jira] [Updated] (RANGER-3643) Directly expose plugin authentication related attributes in the service page.

2022-02-24 Thread kirby zhou (Jira)
[ https://issues.apache.org/jira/browse/RANGER-3643?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] kirby zhou updated RANGER-3643: --- Attachment: WhatIWant.jpg > Directly expose plugin authentication related attributes in the service

[jira] [Updated] (RANGER-3643) Directly expose plugin authentication related attributes in the service page.

2022-02-24 Thread kirby zhou (Jira)
[ https://issues.apache.org/jira/browse/RANGER-3643?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] kirby zhou updated RANGER-3643: --- Description: Should directly expose plugin authentication related attributes in the service page.

[jira] [Commented] (RANGER-3632) Add a option to fix the filename of current access-log

2022-02-18 Thread kirby zhou (Jira)
[ https://issues.apache.org/jira/browse/RANGER-3632?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17494880#comment-17494880 ] kirby zhou commented on RANGER-3632: Additionally 1 the default value of ACCESS_LOG_PREFIX and

[jira] [Commented] (RANGER-3623) Add ability to enable anonymous download of policy/role/tag

2022-02-16 Thread kirby zhou (Jira)
[ https://issues.apache.org/jira/browse/RANGER-3623?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17493614#comment-17493614 ] kirby zhou commented on RANGER-3623: review request https://reviews.apache.org/r/73846/ > Add

[jira] [Updated] (RANGER-3632) Improve ranger logs, RENAME_ON_ROTATE and others

2022-02-18 Thread kirby zhou (Jira)
[ https://issues.apache.org/jira/browse/RANGER-3632?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] kirby zhou updated RANGER-3632: --- Summary: Improve ranger logs, RENAME_ON_ROTATE and others (was: Add a option to fix the filename

[jira] [Created] (RANGER-3632) Add a option to fix the filename of current access-log

2022-02-18 Thread kirby zhou (Jira)
kirby zhou created RANGER-3632: -- Summary: Add a option to fix the filename of current access-log Key: RANGER-3632 URL: https://issues.apache.org/jira/browse/RANGER-3632 Project: Ranger Issue

[jira] [Commented] (RANGER-3632) Add a option to fix the filename of current access-log

2022-02-18 Thread kirby zhou (Jira)
[ https://issues.apache.org/jira/browse/RANGER-3632?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17494886#comment-17494886 ] kirby zhou commented on RANGER-3632: Additionally 3 Logback.xml is placed in ews/webapp/WEB-INF,

[jira] [Commented] (RANGER-3632) Improve ranger logs, RENAME_ON_ROTATE and others

2022-02-25 Thread kirby zhou (Jira)
[ https://issues.apache.org/jira/browse/RANGER-3632?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17498372#comment-17498372 ] kirby zhou commented on RANGER-3632: Done > Improve ranger logs, RENAME_ON_ROTATE and others >

[jira] [Created] (RANGER-3645) Should not create ServiceDef with invalid implClass

2022-02-25 Thread kirby zhou (Jira)
kirby zhou created RANGER-3645: -- Summary: Should not create ServiceDef with invalid implClass Key: RANGER-3645 URL: https://issues.apache.org/jira/browse/RANGER-3645 Project: Ranger Issue Type:

[jira] [Commented] (RANGER-3627) Implement Spark extension

2022-02-15 Thread kirby zhou (Jira)
[ https://issues.apache.org/jira/browse/RANGER-3627?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17492924#comment-17492924 ] kirby zhou commented on RANGER-3627: Compared with reusing Hive plugin [Hadoop SQL], what is your

[jira] [Commented] (RANGER-3623) Add ability to enable anonymous download of policy/role/tag

2022-02-15 Thread kirby zhou (Jira)
[ https://issues.apache.org/jira/browse/RANGER-3623?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17492928#comment-17492928 ] kirby zhou commented on RANGER-3623: No,  I want to pull policies from ranger in third-party

[jira] [Created] (RANGER-3631) logback.xml of rangeradmin leads to log confusion.

2022-02-18 Thread kirby zhou (Jira)
kirby zhou created RANGER-3631: -- Summary: logback.xml of rangeradmin leads to log confusion. Key: RANGER-3631 URL: https://issues.apache.org/jira/browse/RANGER-3631 Project: Ranger Issue Type:

[jira] [Updated] (RANGER-3631) logback.xml of rangeradmin leads to log confusion.

2022-02-18 Thread kirby zhou (Jira)
[ https://issues.apache.org/jira/browse/RANGER-3631?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] kirby zhou updated RANGER-3631: --- Attachment: 0001-RANGER-3631-fix-confusing-log-in-logback.xml.patch > logback.xml of rangeradmin

[jira] [Commented] (RANGER-3635) REST-API security risk, cookie hadoop.auth is often ignored, web session works instead, timeout is broken.

2022-02-21 Thread kirby zhou (Jira)
[ https://issues.apache.org/jira/browse/RANGER-3635?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17495879#comment-17495879 ] kirby zhou commented on RANGER-3635:   The code for checking the cookie in

[jira] [Created] (RANGER-3635) REST-API security risk, cookie hadoop.auth is often ignored, web session works instead, timeout is broken.

2022-02-21 Thread kirby zhou (Jira)
kirby zhou created RANGER-3635: -- Summary: REST-API security risk, cookie hadoop.auth is often ignored, web session works instead, timeout is broken. Key: RANGER-3635 URL:

[jira] [Commented] (RANGER-3632) Improve ranger logs, RENAME_ON_ROTATE and others

2022-02-21 Thread kirby zhou (Jira)
[ https://issues.apache.org/jira/browse/RANGER-3632?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17495821#comment-17495821 ] kirby zhou commented on RANGER-3632: Patch here [https://reviews.apache.org/r/73857/]   > Improve

[jira] [Commented] (RANGER-3635) REST-API security risk, cookie hadoop.auth is often ignored, web session works instead, timeout is broken.

2022-02-21 Thread kirby zhou (Jira)
[ https://issues.apache.org/jira/browse/RANGER-3635?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17495900#comment-17495900 ] kirby zhou commented on RANGER-3635: In RangerKrbFilter.java, it only call createAuthCookie when a

[jira] [Commented] (RANGER-3635) REST-API security risk, cookie hadoop.auth is often ignored, web session works instead, timeout is broken.

2022-02-21 Thread kirby zhou (Jira)
[ https://issues.apache.org/jira/browse/RANGER-3635?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17495926#comment-17495926 ] kirby zhou commented on RANGER-3635: RangerKRBAuthenticationFilter.java and  RangerKrbFilter.java is

[jira] [Updated] (RANGER-3635) REST-API security risk, cookie hadoop.auth is often ignored, web session works instead, timeout is broken.

2022-02-22 Thread kirby zhou (Jira)
[ https://issues.apache.org/jira/browse/RANGER-3635?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] kirby zhou updated RANGER-3635: --- Description: Now, a successful REST-API call will set 2 cookies: A. "hadoop.auth" by

[jira] [Comment Edited] (RANGER-3635) REST-API security risk, cookie hadoop.auth is often ignored, web session works instead, timeout is broken.

2022-02-22 Thread kirby zhou (Jira)
[ https://issues.apache.org/jira/browse/RANGER-3635?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17495900#comment-17495900 ] kirby zhou edited comment on RANGER-3635 at 2/22/22, 8:54 AM: -- In

[jira] [Commented] (RANGER-3637) setpolicies failed because of NullPointerException

2022-02-23 Thread kirby zhou (Jira)
[ https://issues.apache.org/jira/browse/RANGER-3637?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17496814#comment-17496814 ] kirby zhou commented on RANGER-3637: You should create a review request here:

[jira] [Commented] (RANGER-3637) setpolicies failed because of NullPointerException

2022-02-23 Thread kirby zhou (Jira)
[ https://issues.apache.org/jira/browse/RANGER-3637?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17496822#comment-17496822 ] kirby zhou commented on RANGER-3637: And your patch is buggy, it even cannot be compiled. Please

[jira] [Commented] (RANGER-3635) REST-API security risk, cookie hadoop.auth is often ignored, web session works instead, timeout is broken.

2022-03-01 Thread kirby zhou (Jira)
[ https://issues.apache.org/jira/browse/RANGER-3635?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17499914#comment-17499914 ] kirby zhou commented on RANGER-3635: [~ankita]  [~gautamborad] Have any idea of the first problem?

[jira] [Updated] (RANGER-3635) REST-API security risk, kerberos cookie hadoop.auth is broken, timeout mech of alternative session is broken.

2022-03-01 Thread kirby zhou (Jira)
[ https://issues.apache.org/jira/browse/RANGER-3635?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] kirby zhou updated RANGER-3635: --- Description: A rough conclusion: If a Ranger client passes the authentication,  drops hadoop.auth

[jira] [Comment Edited] (RANGER-3635) REST-API security risk, cookie hadoop.auth is often ignored, web session works instead, timeout is broken.

2022-03-01 Thread kirby zhou (Jira)
[ https://issues.apache.org/jira/browse/RANGER-3635?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17499914#comment-17499914 ] kirby zhou edited comment on RANGER-3635 at 3/2/22, 6:49 AM: - [~ankita] 

[jira] [Reopened] (RANGER-2095) Add unit tests for new read only admin-auditor/kms-auditor roles functionality

2022-03-02 Thread kirby zhou (Jira)
[ https://issues.apache.org/jira/browse/RANGER-2095?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] kirby zhou reopened RANGER-2095: The patch is buggy:   * testBlockAuditorRoleUserThrowsErrorForAuditKeyAdmin *

[jira] [Commented] (RANGER-2095) Add unit tests for new read only admin-auditor/kms-auditor roles functionality

2022-03-02 Thread kirby zhou (Jira)
[ https://issues.apache.org/jira/browse/RANGER-2095?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17500034#comment-17500034 ] kirby zhou commented on RANGER-2095: [https://reviews.apache.org/r/73879/] Please review it. > Add

[jira] [Commented] (RANGER-2095) Add unit tests for new read only admin-auditor/kms-auditor roles functionality

2022-03-02 Thread kirby zhou (Jira)
[ https://issues.apache.org/jira/browse/RANGER-2095?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=1741#comment-1741 ] kirby zhou commented on RANGER-2095: Even the 2 class member is invalid usage of @Mock.

[jira] [Created] (RANGER-3650) unit test of blockAuditorRoleUser in RANGER-2095 commit is meaningless.

2022-03-02 Thread kirby zhou (Jira)
kirby zhou created RANGER-3650: -- Summary: unit test of blockAuditorRoleUser in RANGER-2095 commit is meaningless. Key: RANGER-3650 URL: https://issues.apache.org/jira/browse/RANGER-3650 Project: Ranger

[jira] [Commented] (RANGER-3619) REST API should return 403 when authenticated client is not allowed to access API.

2022-03-02 Thread kirby zhou (Jira)
[ https://issues.apache.org/jira/browse/RANGER-3619?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17500115#comment-17500115 ] kirby zhou commented on RANGER-3619: [https://reviews.apache.org/r/73881/]   > REST API should

[jira] [Commented] (RANGER-3632) Improve ranger logs, RENAME_ON_ROTATE and others

2022-03-02 Thread kirby zhou (Jira)
[ https://issues.apache.org/jira/browse/RANGER-3632?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17500245#comment-17500245 ] kirby zhou commented on RANGER-3632: [https://reviews.apache.org/r/73884/] for 2.3 branch > Improve

[jira] [Commented] (RANGER-3595) Tar of KMS contains rubbish files

2022-03-03 Thread kirby zhou (Jira)
[ https://issues.apache.org/jira/browse/RANGER-3595?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17500679#comment-17500679 ] kirby zhou commented on RANGER-3595: Just do cherry-pick, or plz check your ranger-2.3 branch HEAD

[jira] [Commented] (RANGER-3595) Tar of KMS contains rubbish files

2022-03-03 Thread kirby zhou (Jira)
[ https://issues.apache.org/jira/browse/RANGER-3595?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17500665#comment-17500665 ] kirby zhou commented on RANGER-3595: Did you have any problems in cherry-pick? I have tried

[jira] [Updated] (RANGER-3611) Uncatched NullPointerException when missing lastKnownVersion in ServiceREST::getServicePoliciesIfUpdated

2022-03-02 Thread kirby zhou (Jira)
[ https://issues.apache.org/jira/browse/RANGER-3611?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] kirby zhou updated RANGER-3611: --- Attachment: (was: 0001-fix-NullPtrException-in-API-policies-download.patch) > Uncatched

[jira] [Commented] (RANGER-3595) Tar of KMS contains rubbish files

2022-03-04 Thread kirby zhou (Jira)
[ https://issues.apache.org/jira/browse/RANGER-3595?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17501260#comment-17501260 ] kirby zhou commented on RANGER-3595: Does cherry-pick works ? [~bpatel]  > Tar of KMS contains

[jira] [Commented] (RANGER-3612) KMS should either Die or Auto-Recover when its ranger-agent auth to KDC failed

2022-02-14 Thread kirby zhou (Jira)
[ https://issues.apache.org/jira/browse/RANGER-3612?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17491902#comment-17491902 ] kirby zhou commented on RANGER-3612: I hava a patch here: [https://reviews.apache.org/r/73841/]

[jira] [Updated] (RANGER-3580) Support Ranger KMS integration with TencentKMS

2022-02-18 Thread kirby zhou (Jira)
[ https://issues.apache.org/jira/browse/RANGER-3580?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] kirby zhou updated RANGER-3580: --- Attachment: 0001-add-TencentKMS-as-MasterKeyProvider.patch > Support Ranger KMS integration with

[jira] [Updated] (RANGER-3580) Support Ranger KMS integration with TencentKMS

2022-02-18 Thread kirby zhou (Jira)
[ https://issues.apache.org/jira/browse/RANGER-3580?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] kirby zhou updated RANGER-3580: --- Attachment: (was: 0001-add-TencentKMS-as-MasterKeyProvider-1.patch) > Support Ranger KMS

[jira] [Updated] (RANGER-3580) Support Ranger KMS integration with TencentKMS

2022-02-18 Thread kirby zhou (Jira)
[ https://issues.apache.org/jira/browse/RANGER-3580?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] kirby zhou updated RANGER-3580: --- Attachment: (was: 0001-add-TencentKMS-as-MasterKeyProvider.patch) > Support Ranger KMS

[jira] [Closed] (RANGER-3631) logback.xml of rangeradmin leads to log confusion.

2022-02-20 Thread kirby zhou (Jira)
[ https://issues.apache.org/jira/browse/RANGER-3631?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] kirby zhou closed RANGER-3631. -- > logback.xml of rangeradmin leads to log confusion. > --

[jira] [Created] (RANGER-3633) Remove eclipse .project file from git

2022-02-20 Thread kirby zhou (Jira)
kirby zhou created RANGER-3633: -- Summary: Remove eclipse .project file from git Key: RANGER-3633 URL: https://issues.apache.org/jira/browse/RANGER-3633 Project: Ranger Issue Type: Improvement

[jira] [Commented] (RANGER-3672) Show better error messages during failed logins

2022-03-22 Thread kirby zhou (Jira)
[ https://issues.apache.org/jira/browse/RANGER-3672?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17510992#comment-17510992 ] kirby zhou commented on RANGER-3672: You mean that? {code:java} if (msg != null && !msg.isEmpty()) {

[jira] [Commented] (RANGER-3672) Show better error messages during failed logins

2022-03-22 Thread kirby zhou (Jira)
[ https://issues.apache.org/jira/browse/RANGER-3672?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17510982#comment-17510982 ] kirby zhou commented on RANGER-3672: Anybody can helps? I'm not familiar with webui > Show better

[jira] [Commented] (RANGER-3672) Show better error messages during failed logins

2022-03-22 Thread kirby zhou (Jira)
[ https://issues.apache.org/jira/browse/RANGER-3672?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17511007#comment-17511007 ] kirby zhou commented on RANGER-3672: Thanks. There may be some browser or OS incompatibility

[jira] [Commented] (RANGER-3672) Show better error messages during failed logins

2022-03-23 Thread kirby zhou (Jira)
[ https://issues.apache.org/jira/browse/RANGER-3672?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17511069#comment-17511069 ] kirby zhou commented on RANGER-3672: I applied your patch at master branch. SpringEventListener

[jira] [Commented] (RANGER-3672) Show better error messages during failed logins

2022-03-23 Thread kirby zhou (Jira)
[ https://issues.apache.org/jira/browse/RANGER-3672?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17511080#comment-17511080 ] kirby zhou commented on RANGER-3672: CLIUtil.java problem. It is intend to be used by CLI not by

[jira] [Commented] (RANGER-3672) Show better error messages during failed logins

2022-03-23 Thread kirby zhou (Jira)
[ https://issues.apache.org/jira/browse/RANGER-3672?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17511046#comment-17511046 ] kirby zhou commented on RANGER-3672: I just do test with github/master and github/ranger-2.2 branch.

[jira] [Comment Edited] (RANGER-3672) Show better error messages during failed logins

2022-03-23 Thread kirby zhou (Jira)
[ https://issues.apache.org/jira/browse/RANGER-3672?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17511069#comment-17511069 ] kirby zhou edited comment on RANGER-3672 at 3/23/22, 7:40 AM: -- I applied

[jira] [Commented] (RANGER-3678) Update password validation criteria

2022-03-23 Thread kirby zhou (Jira)
[ https://issues.apache.org/jira/browse/RANGER-3678?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17511336#comment-17511336 ] kirby zhou commented on RANGER-3678: It works. But in my opinion, it is meaningless to check

[jira] [Commented] (RANGER-3678) Update password validation criteria

2022-03-23 Thread kirby zhou (Jira)
[ https://issues.apache.org/jira/browse/RANGER-3678?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17511270#comment-17511270 ] kirby zhou commented on RANGER-3678: it is buggy. "abc123ABC" will not pass your test > Update

[jira] [Comment Edited] (RANGER-3678) Update password validation criteria

2022-03-23 Thread kirby zhou (Jira)
[ https://issues.apache.org/jira/browse/RANGER-3678?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17511336#comment-17511336 ] kirby zhou edited comment on RANGER-3678 at 3/23/22, 4:08 PM: -- It works.

  1   2   3   4   >