[
https://issues.apache.org/jira/browse/HAWQ-256?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15867342#comment-15867342
]
Lili Ma commented on HAWQ-256:
--
[~kdunn926] I re-looked at your input.
1) Why do they want to use Ranger? What
[
https://issues.apache.org/jira/browse/HAWQ-256?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15859265#comment-15859265
]
Lili Ma commented on HAWQ-256:
--
[~kdunn926] Thanks a lot! The information you provided is very helpful.
About
[
https://issues.apache.org/jira/browse/HAWQ-256?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15856444#comment-15856444
]
Kyle R Dunn commented on HAWQ-256:
--
[~Lili Ma] - here's some input for you
*1) Why do they want to use
[
https://issues.apache.org/jira/browse/HAWQ-256?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15454137#comment-15454137
]
Lili Ma commented on HAWQ-256:
--
[~thebellhead] From technical view, we can restrict HAWQSuperUser privilege in
[
https://issues.apache.org/jira/browse/HAWQ-256?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15452587#comment-15452587
]
Alastair "Bell" Turner commented on HAWQ-256:
-
Thanks [~lilima]
There are three gpadmin users
[
https://issues.apache.org/jira/browse/HAWQ-256?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15451720#comment-15451720
]
Hubert Zhang commented on HAWQ-256:
---
+1 for two stage authorization.
Hawq ranger plugin(REST service)
[
https://issues.apache.org/jira/browse/HAWQ-256?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15451558#comment-15451558
]
Lili Ma commented on HAWQ-256:
--
[~thebellhead], quit good questions!
1. In order for tools, syntax checking,
[
https://issues.apache.org/jira/browse/HAWQ-256?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15450026#comment-15450026
]
Alastair "Bell" Turner commented on HAWQ-256:
-
One more specific question:
3. How would this be
[
https://issues.apache.org/jira/browse/HAWQ-256?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15449919#comment-15449919
]
Alastair "Bell" Turner commented on HAWQ-256:
-
I've just read the solution design document and
[
https://issues.apache.org/jira/browse/HAWQ-256?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15438636#comment-15438636
]
Don Bosco Durai commented on HAWQ-256:
--
Where is the latest API definition? From the JSON in the above
[
https://issues.apache.org/jira/browse/HAWQ-256?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15438560#comment-15438560
]
Don Bosco Durai commented on HAWQ-256:
--
I agree. We can disable grant/revoke on the HAWQ side it Ranger
[
https://issues.apache.org/jira/browse/HAWQ-256?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15438530#comment-15438530
]
Lili Ma commented on HAWQ-256:
--
Agree on the Grant/Revoke should be disabled is ranger is enabled.
In this
[
https://issues.apache.org/jira/browse/HAWQ-256?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15438531#comment-15438531
]
Lili Ma commented on HAWQ-256:
--
[~bosco] Do you have any feedback on the API definition from Hortonworks side?
[
https://issues.apache.org/jira/browse/HAWQ-256?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15436134#comment-15436134
]
Hubert Zhang commented on HAWQ-256:
---
Agree with [~vVineet] If enable_ranger is ON in Hawq, we should
[
https://issues.apache.org/jira/browse/HAWQ-256?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15436135#comment-15436135
]
Hubert Zhang commented on HAWQ-256:
---
Agree with [~vVineet] If enable_ranger is ON in Hawq, we should
[
https://issues.apache.org/jira/browse/HAWQ-256?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15434467#comment-15434467
]
Vineet Goel commented on HAWQ-256:
--
I found this in the Hive documentation:
"The ADMIN permission in
[
https://issues.apache.org/jira/browse/HAWQ-256?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15428488#comment-15428488
]
Don Bosco Durai commented on HAWQ-256:
--
Starting Ranger 0.6 it also supports Kerberos. Before that it
[
https://issues.apache.org/jira/browse/HAWQ-256?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15425935#comment-15425935
]
Lin Wen commented on HAWQ-256:
--
Hi, Don,
Since HAWQ will call Ranger REST API to interact with Ranger, so what
[
https://issues.apache.org/jira/browse/HAWQ-256?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15422443#comment-15422443
]
Lili Ma commented on HAWQ-256:
--
[~bosco][~vineetgoel][~lei_chang][~hubertzhang][~wenlin]
Another thing we need
[
https://issues.apache.org/jira/browse/HAWQ-256?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15422420#comment-15422420
]
Lili Ma commented on HAWQ-256:
--
[~bosco], as [~hubertzhang] mentioned, HAWQ currently has requests for the
[
https://issues.apache.org/jira/browse/HAWQ-256?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15422417#comment-15422417
]
Lili Ma commented on HAWQ-256:
--
[~bosco] Thanks for your suggestion about default behaviors. I think Ranger 0.6
[
https://issues.apache.org/jira/browse/HAWQ-256?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15422415#comment-15422415
]
Lili Ma commented on HAWQ-256:
--
Per offline discussion, we think the integration between LDAP and HAWQ is out
[
https://issues.apache.org/jira/browse/HAWQ-256?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15420978#comment-15420978
]
Don Bosco Durai commented on HAWQ-256:
--
[~hubertzhang], fallback has been a very contentious topic. It
[
https://issues.apache.org/jira/browse/HAWQ-256?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15420958#comment-15420958
]
Don Bosco Durai commented on HAWQ-256:
--
#1. The group "public" is virtual. It is similar to * or all.
[
https://issues.apache.org/jira/browse/HAWQ-256?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15420803#comment-15420803
]
Hubert Zhang commented on HAWQ-256:
---
i review the Ranger doc for ranger policy evaluation flow,
It said
[
https://issues.apache.org/jira/browse/HAWQ-256?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15420594#comment-15420594
]
Lili Ma commented on HAWQ-256:
--
[~bosco] [~vVineet], Could you help confirm whether these APIs definitions are
[
https://issues.apache.org/jira/browse/HAWQ-256?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15419784#comment-15419784
]
Don Bosco Durai commented on HAWQ-256:
--
+ [~madhan.neethiraj]
In the Ranger case, this might not be
[
https://issues.apache.org/jira/browse/HAWQ-256?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15418598#comment-15418598
]
Hubert Zhang commented on HAWQ-256:
---
[~bosco] [~vineetgoel] [~lilima][~wlin]
We revisited the HAWQ
[
https://issues.apache.org/jira/browse/HAWQ-256?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15411542#comment-15411542
]
Hubert Zhang commented on HAWQ-256:
---
Agree. We can use JSON array to represent it.
{
“requestor” :
[
https://issues.apache.org/jira/browse/HAWQ-256?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15411518#comment-15411518
]
Lili Ma commented on HAWQ-256:
--
Another thing is for HAWQ sync with LDAP. By our investigation, HAWQ needs to
[
https://issues.apache.org/jira/browse/HAWQ-256?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15411509#comment-15411509
]
Lili Ma commented on HAWQ-256:
--
[~bosco],
Will you confirm with folks in Ranger team for the API? Thanks
For
[
https://issues.apache.org/jira/browse/HAWQ-256?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15409208#comment-15409208
]
Don Bosco Durai commented on HAWQ-256:
--
[~lilima], this is looking good. Just couple of comments:
1.
[
https://issues.apache.org/jira/browse/HAWQ-256?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15384859#comment-15384859
]
Don Bosco Durai commented on HAWQ-256:
--
[~hubertzhang], you are correct. When Ranger is used for
[
https://issues.apache.org/jira/browse/HAWQ-256?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15384853#comment-15384853
]
Don Bosco Durai commented on HAWQ-256:
--
I don't know the internals of HAWQ to comment much, but I feel,
[
https://issues.apache.org/jira/browse/HAWQ-256?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15382037#comment-15382037
]
Hubert Zhang commented on HAWQ-256:
---
[~bosco] [~Lili Ma] I skim the Authorizer code in Hive and Ranger. I
[
https://issues.apache.org/jira/browse/HAWQ-256?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15381878#comment-15381878
]
Michael Andre Pearce (IG) commented on HAWQ-256:
Hi Guys,
As original person to raise this
[
https://issues.apache.org/jira/browse/HAWQ-256?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15381729#comment-15381729
]
Don Bosco Durai commented on HAWQ-256:
--
[~hubertzhang], thanks. The JDBC call should suffice for
[
https://issues.apache.org/jira/browse/HAWQ-256?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15381250#comment-15381250
]
Don Bosco Durai commented on HAWQ-256:
--
You got these two correct. We need to add one more to the list.
[
https://issues.apache.org/jira/browse/HAWQ-256?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15378792#comment-15378792
]
Lili Ma commented on HAWQ-256:
--
[~bosco] Thanks. Things are getting more clear now.
So for the interaction
[
https://issues.apache.org/jira/browse/HAWQ-256?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15378322#comment-15378322
]
Don Bosco Durai commented on HAWQ-256:
--
1. The "Add New User" in Ranger is just to add user in the
[
https://issues.apache.org/jira/browse/HAWQ-256?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15376472#comment-15376472
]
Lili Ma commented on HAWQ-256:
--
[~bosco] Thanks for your answer :)
1. Yes, it's good for Ranger to import user
[
https://issues.apache.org/jira/browse/HAWQ-256?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15376324#comment-15376324
]
Don Bosco Durai commented on HAWQ-256:
--
[~lilima], thanks for listing down the questions.
1. Ranger
[
https://issues.apache.org/jira/browse/HAWQ-256?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15376246#comment-15376246
]
Hubert Zhang commented on HAWQ-256:
---
Agreed with [~Lili Ma] . We need to look into what's the detailed
[
https://issues.apache.org/jira/browse/HAWQ-256?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15059737#comment-15059737
]
Lei Chang commented on HAWQ-256:
Nice. A proposal helps a lot on starting the technical discussion. And it
[
https://issues.apache.org/jira/browse/HAWQ-256?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15058761#comment-15058761
]
Goden Yao commented on HAWQ-256:
Added linked Ranger JIRA
> Integrate Security with Apache Ranger
>
[
https://issues.apache.org/jira/browse/HAWQ-256?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15058849#comment-15058849
]
Don Bosco Durai commented on HAWQ-256:
--
[~lei_chang], if you are going to be working on this. I can
46 matches
Mail list logo
