Re: Review Request 62712: AMBARI-22102 Ranger KMS should add proxy user for Spark2 user
--- This is an automatically generated e-mail. To reply, visit: https://reviews.apache.org/r/62712/#review186853 --- Ship it! Ship It! - Velmurugan Periasamy On Sept. 30, 2017, 9:58 a.m., Mugdha Varadkar wrote: > > --- > This is an automatically generated e-mail. To reply, visit: > https://reviews.apache.org/r/62712/ > --- > > (Updated Sept. 30, 2017, 9:58 a.m.) > > > Review request for Ambari, Bikas Saha, Gautam Borad, Jayush Luniya, and > Velmurugan Periasamy. > > > Bugs: AMBARI-22102 > https://issues.apache.org/jira/browse/AMBARI-22102 > > > Repository: ambari > > > Description > --- > > Spark2 user needs to be added to Ranger KMS proxy users in cluster. > > Updating required_services list with SPARK2 config livy2_user/livy2-env to > recommendKMSProxyUsers() > > > Diffs > - > > ambari-server/src/main/resources/stacks/HDP/2.5/services/stack_advisor.py > be615db > > > Diff: https://reviews.apache.org/r/62712/diff/1/ > > > Testing > --- > > Unit Test passed. > > > Thanks, > > Mugdha Varadkar > >
Re: Review Request 52825: AMBARI-18585 Set _HOST for Hbase Master principal in Kerberos enabled Ranger Hbase Plugin
--- This is an automatically generated e-mail. To reply, visit: https://reviews.apache.org/r/52825/#review152500 --- Ship it! Ship It! - Velmurugan Periasamy On Oct. 13, 2016, 12:39 p.m., Mugdha Varadkar wrote: > > --- > This is an automatically generated e-mail. To reply, visit: > https://reviews.apache.org/r/52825/ > --- > > (Updated Oct. 13, 2016, 12:39 p.m.) > > > Review request for Ambari, Alejandro Fernandez, Gautam Borad, Jayush Luniya, > and Velmurugan Periasamy. > > > Bugs: AMBARI-18585 > https://issues.apache.org/jira/browse/AMBARI-18585 > > > Repository: ambari > > > Description > --- > > Need to update hbase plugin repo config for master principal to have a _HOST > instead of a specific node. > > > Diffs > - > > > ambari-server/src/main/resources/common-services/HBASE/0.96.0.2.0/package/scripts/params_linux.py > 49e4575 > > Diff: https://reviews.apache.org/r/52825/diff/ > > > Testing > --- > > Tested on centos 6 with Ranger Hbase plugin enabled. > > > Thanks, > > Mugdha Varadkar > >
Re: Review Request 51890: AMBARI-18386 Handle Ranger hive repo config jdbc url change for stack 2.5
--- This is an automatically generated e-mail. To reply, visit: https://reviews.apache.org/r/51890/#review148924 --- Ship it! Ship It! - Velmurugan Periasamy On Sept. 14, 2016, 4:32 p.m., Mugdha Varadkar wrote: > > --- > This is an automatically generated e-mail. To reply, visit: > https://reviews.apache.org/r/51890/ > --- > > (Updated Sept. 14, 2016, 4:32 p.m.) > > > Review request for Ambari, Gautam Borad, Jayush Luniya, Sumit Mohanty, and > Velmurugan Periasamy. > > > Bugs: AMBARI-18386 > https://issues.apache.org/jira/browse/AMBARI-18386 > > > Repository: ambari > > > Description > --- > > From ambari stacks for Ranger: enable ranger hive plugin takes care of using > right jdbc url for repo configs that are set for creating a repository in > Ranger for Secure and simple install of hive. > However in HiverServer2 HA env, jdbc url needs to change in repo config with > zk url. > > > Diffs > - > > > ambari-server/src/main/resources/common-services/HIVE/0.12.0.2.0/package/scripts/params_linux.py > 5e3e233 > > Diff: https://reviews.apache.org/r/51890/diff/ > > > Testing > --- > > Tested Ranger hive plugin with Ranger install on centos6 > > > Thanks, > > Mugdha Varadkar > >
Re: Review Request 51890: AMBARI-18386 Handle Ranger hive repo config jdbc url, when hiveserver2 HA is enabled
--- This is an automatically generated e-mail. To reply, visit: https://reviews.apache.org/r/51890/#review148907 --- ambari-server/src/main/resources/common-services/HIVE/0.12.0.2.0/package/scripts/params_linux.py (line 696) <https://reviews.apache.org/r/51890/#comment216414> Should we use zookeeper based URL even if HA is not enabled? That would cover any additional parameters that need to be added for Hive (like http transport mode etc) - Velmurugan Periasamy On Sept. 14, 2016, 11:49 a.m., Mugdha Varadkar wrote: > > --- > This is an automatically generated e-mail. To reply, visit: > https://reviews.apache.org/r/51890/ > --- > > (Updated Sept. 14, 2016, 11:49 a.m.) > > > Review request for Ambari, Gautam Borad, Jayush Luniya, Sumit Mohanty, and > Velmurugan Periasamy. > > > Bugs: AMBARI-18386 > https://issues.apache.org/jira/browse/AMBARI-18386 > > > Repository: ambari > > > Description > --- > > From ambari stacks for Ranger: enable ranger hive plugin takes care of using > right jdbc url for repo configs that are set for creating a repository in > Ranger for Secure and simple install of hive. > However in HiverServer2 HA env, jdbc url needs to change in repo config with > zk url. > > > Diffs > - > > > ambari-server/src/main/resources/common-services/HIVE/0.12.0.2.0/package/scripts/params_linux.py > 5e3e233 > > Diff: https://reviews.apache.org/r/51890/diff/ > > > Testing > --- > > Tested Ranger hive plugin with Ranger install on centos6 > > > Thanks, > > Mugdha Varadkar > >
Re: Review Request 50300: AMBARI-17828 : Nimbus, Storm UI server stopped after disabling ranger plugins
--- This is an automatically generated e-mail. To reply, visit: https://reviews.apache.org/r/50300/#review143095 --- Ship it! Ship It! - Velmurugan Periasamy On July 21, 2016, 4:14 p.m., Gautam Borad wrote: > > --- > This is an automatically generated e-mail. To reply, visit: > https://reviews.apache.org/r/50300/ > --- > > (Updated July 21, 2016, 4:14 p.m.) > > > Review request for Ambari, Alejandro Fernandez, Jaimin Jetly, Sumit Mohanty, > Selvamohan Neethiraj, Srimanth Gunturi, and Velmurugan Periasamy. > > > Bugs: AMBARI-17828 > https://issues.apache.org/jira/browse/AMBARI-17828 > > > Repository: ambari > > > Description > --- > > Recommend the new class name of Storm > "org.apache.storm.security.auth.authorizer.SimpleACLAuthorizer" instead of > the old one. > > > Diffs > - > > ambari-server/src/main/resources/stacks/HDP/2.5/services/stack_advisor.py > 1bd820645b30da3b83935de89c82ecc8d78a82ec > ambari-server/src/test/python/stacks/2.5/common/test_stack_advisor.py > f0a1c871c8595e8c59f1f0ea66076c7a2608005a > > Diff: https://reviews.apache.org/r/50300/diff/ > > > Testing > --- > > Tested storm on 3 node centos cluster. > > > Thanks, > > Gautam Borad > >
Re: Review Request 49989: AMBARI-17682 : For hive and hbase two properties are present policy.grantrevoke.auth.users & policy.grant.revoke.auth.users
--- This is an automatically generated e-mail. To reply, visit: https://reviews.apache.org/r/49989/#review142080 --- Ship it! Ship It! - Velmurugan Periasamy On July 13, 2016, 1:21 p.m., Gautam Borad wrote: > > --- > This is an automatically generated e-mail. To reply, visit: > https://reviews.apache.org/r/49989/ > --- > > (Updated July 13, 2016, 1:21 p.m.) > > > Review request for Ambari, Alejandro Fernandez, Mahadev Konar, Sumit Mohanty, > Selvamohan Neethiraj, Srimanth Gunturi, and Velmurugan Periasamy. > > > Bugs: AMBARI-17682 > https://issues.apache.org/jira/browse/AMBARI-17682 > > > Repository: ambari > > > Description > --- > > Changed the names of the properties to be in sync with the right ones. > > > Diffs > - > > > ambari-server/src/main/resources/common-services/HBASE/0.96.0.2.0/package/scripts/params_linux.py > 6d304d496797a19701ecf4c74f054406f5ce2670 > > ambari-server/src/main/resources/common-services/HIVE/0.12.0.2.0/package/scripts/params_linux.py > 571eebdb3ac29555d2a12b72649c2b0338acfd86 > > Diff: https://reviews.apache.org/r/49989/diff/ > > > Testing > --- > > Tested on a local centos6 cluster with hbase and hive. > > > Thanks, > > Gautam Borad > >
Re: Review Request 49897: AMBARI-17617: Set default log level for Ranger KMS to INFO
--- This is an automatically generated e-mail. To reply, visit: https://reviews.apache.org/r/49897/#review141699 --- Ship it! Ship It! - Velmurugan Periasamy On July 11, 2016, 2:39 p.m., Gautam Borad wrote: > > --- > This is an automatically generated e-mail. To reply, visit: > https://reviews.apache.org/r/49897/ > --- > > (Updated July 11, 2016, 2:39 p.m.) > > > Review request for Ambari, Alejandro Fernandez, Jonathan Hurley, Sumit > Mohanty, Srimanth Gunturi, and Velmurugan Periasamy. > > > Bugs: AMBARI-17617 > https://issues.apache.org/jira/browse/AMBARI-17617 > > > Repository: ambari > > > Description > --- > > Kms log file is getting bigger till 18 GB , causing No space left on device > for inode. > Problem is : > 1. by default debug log is generated in the kms.log fle > 2. there is no split in log file if there is over flow of logs in kms.log > file like other access audit logs file and xa_portal logs. > > Fixed the above by setting default log level to INFO. > > > Diffs > - > > > ambari-server/src/main/resources/common-services/RANGER_KMS/0.5.0.2.3/configuration/kms-log4j.xml > 61aede3 > > Diff: https://reviews.apache.org/r/49897/diff/ > > > Testing > --- > > Tested on a local centos6 cluster with kms and monitored the log file. > > > Thanks, > > Gautam Borad > >
Re: Review Request 49752: AMBARI-17000 Allow ranger admin credentials to be specified during cluster creation
> On July 7, 2016, 8:19 p.m., Srimanth Gunturi wrote: > > ambari-server/src/main/resources/common-services/RANGER/0.4.0/package/scripts/ranger_admin.py, > > line 56 > > <https://reviews.apache.org/r/49752/diff/1/?file=1438640#file1438640line56> > > > > Is changing password supported only during install? After install if > > this password changes, do we need to re-invoke this method? Srimanth - Current plan is to support password change only during install. After that, password change needs to be done at Ranger end and config needs to be updated manually via Ambari (this is the current behavior though, so there is no change here). If passwords are not in sync, Ambari provided alert should continue to work. - Velmurugan --- This is an automatically generated e-mail. To reply, visit: https://reviews.apache.org/r/49752/#review141209 --- On July 7, 2016, 12:54 p.m., Mugdha Varadkar wrote: > > --- > This is an automatically generated e-mail. To reply, visit: > https://reviews.apache.org/r/49752/ > --- > > (Updated July 7, 2016, 12:54 p.m.) > > > Review request for Ambari, Alejandro Fernandez, Andrew Onischuk, Gautam > Borad, Jonathan Hurley, Jayush Luniya, Srimanth Gunturi, and Velmurugan > Periasamy. > > > Bugs: AMBARI-17000 > https://issues.apache.org/jira/browse/AMBARI-17000 > > > Repository: ambari > > > Description > --- > > Problem: > Today when a cluster is created, ranger admin has the default password. Since > ranger defines all the authorization related policies, the first thing user > needs to do after creating a cluster is to change ranger admin default login > password in Ambari and Ranger manually. > > > Solution: > Update ranger admin password only at time of installation if password doesn't > match with default password. > > Executing below command: > python db_setup.py -changepassword userID, currentPassword, newPassword. > > This script if called multiple time wont change password on subsequent calls, > since a flag is maintained in the db. The flag is set on first password > change and wont allow further password change(using this script) > Also the password change will work in HA environment since it maintains a > lock in db before updating the record. > > > Diffs > - > > > ambari-common/src/main/python/resource_management/libraries/functions/constants.py > 85e04e7 > > ambari-server/src/main/resources/common-services/RANGER/0.4.0/package/scripts/params.py > a85bde0 > > ambari-server/src/main/resources/common-services/RANGER/0.4.0/package/scripts/ranger_admin.py > c6e5b70 > > ambari-server/src/main/resources/common-services/RANGER/0.4.0/package/scripts/setup_ranger_xml.py > 6b04075 > > ambari-server/src/main/resources/stacks/HDP/2.0.6/properties/stack_features.json > ca000d1 > > Diff: https://reviews.apache.org/r/49752/diff/ > > > Testing > --- > > Ran 261 tests in 7.602s > > OK > -- > Total run:1015 > Total errors:0 > Total failures:0 > OK > > > Thanks, > > Mugdha Varadkar > >
Re: Review Request 49752: AMBARI-17000 Allow ranger admin credentials to be specified during cluster creation
--- This is an automatically generated e-mail. To reply, visit: https://reviews.apache.org/r/49752/#review141193 --- Ship it! Ship It! - Velmurugan Periasamy On July 7, 2016, 12:54 p.m., Mugdha Varadkar wrote: > > --- > This is an automatically generated e-mail. To reply, visit: > https://reviews.apache.org/r/49752/ > --- > > (Updated July 7, 2016, 12:54 p.m.) > > > Review request for Ambari, Alejandro Fernandez, Andrew Onischuk, Gautam > Borad, Jonathan Hurley, Jayush Luniya, Srimanth Gunturi, and Velmurugan > Periasamy. > > > Bugs: AMBARI-17000 > https://issues.apache.org/jira/browse/AMBARI-17000 > > > Repository: ambari > > > Description > --- > > Problem: > Today when a cluster is created, ranger admin has the default password. Since > ranger defines all the authorization related policies, the first thing user > needs to do after creating a cluster is to change ranger admin default login > password in Ambari and Ranger manually. > > > Solution: > Update ranger admin password only at time of installation if password doesn't > match with default password. > > Executing below command: > python db_setup.py -changepassword userID, currentPassword, newPassword. > > This script if called multiple time wont change password on subsequent calls, > since a flag is maintained in the db. The flag is set on first password > change and wont allow further password change(using this script) > Also the password change will work in HA environment since it maintains a > lock in db before updating the record. > > > Diffs > - > > > ambari-common/src/main/python/resource_management/libraries/functions/constants.py > 85e04e7 > > ambari-server/src/main/resources/common-services/RANGER/0.4.0/package/scripts/params.py > a85bde0 > > ambari-server/src/main/resources/common-services/RANGER/0.4.0/package/scripts/ranger_admin.py > c6e5b70 > > ambari-server/src/main/resources/common-services/RANGER/0.4.0/package/scripts/setup_ranger_xml.py > 6b04075 > > ambari-server/src/main/resources/stacks/HDP/2.0.6/properties/stack_features.json > ca000d1 > > Diff: https://reviews.apache.org/r/49752/diff/ > > > Testing > --- > > Ran 261 tests in 7.602s > > OK > -- > Total run:1015 > Total errors:0 > Total failures:0 > OK > > > Thanks, > > Mugdha Varadkar > >
Re: Review Request 49705: AMBARI-17586 : EU failed with errors during Kafka broker restart in Upgrade process
--- This is an automatically generated e-mail. To reply, visit: https://reviews.apache.org/r/49705/#review141177 --- Ship it! Ship It! - Velmurugan Periasamy On July 7, 2016, 7:17 a.m., Gautam Borad wrote: > > --- > This is an automatically generated e-mail. To reply, visit: > https://reviews.apache.org/r/49705/ > --- > > (Updated July 7, 2016, 7:17 a.m.) > > > Review request for Ambari, Alejandro Fernandez, Sumit Mohanty, Srimanth > Gunturi, and Velmurugan Periasamy. > > > Bugs: AMBARI-17586 > https://issues.apache.org/jira/browse/AMBARI-17586 > > > Repository: ambari > > > Description > --- > > While upgrading from HDP 2.3 to 2.4, Kafka broker fails on restart as it > doesn't get Keytabs / principals during upgrade. Handle Ranger service > creation with checks of principal / keytab. > > > Diffs > - > > > ambari-server/src/main/resources/common-services/KAFKA/0.8.1/package/scripts/params.py > 09ff522 > > Diff: https://reviews.apache.org/r/49705/diff/ > > > Testing > --- > > Verified upgrade of Kafka restart successfully after upgrade from Ambari. > > > Thanks, > > Gautam Borad > >
Re: Review Request 49507: AMBARI-17520: Update the policy_user property to use storm user principal specified in Storms config
> On July 1, 2016, 1:45 p.m., Robert Levas wrote:
> > Was this tested with the Storm Kerberos identity set to something like
> > `storm1234@${realm}`?
Looks like it is working fine. I also applied the patch and tried enabling
storm plugin. Noticed Ranger policies were created with permissions to modified
principal.
> On July 1, 2016, 1:45 p.m., Robert Levas wrote:
> > ambari-server/src/main/resources/common-services/STORM/0.9.1/package/scripts/params_linux.py,
> > line 303
> > <https://reviews.apache.org/r/49507/diff/1/?file=1434910#file1434910line303>
> >
> > Why are we hard-coding `{storm-user}-{cluster-name}` here? If it is
> > related to the Storm Kerberos identitiy, then there is no guarentee that
> > the user won't change this when configuring Kerberos identities.
I think this is the standard format for storm values in Ambari kerberos config.
I will let Gautam confirm that.
- Velmurugan
---
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/49507/#review140346
---
On July 1, 2016, 1:14 p.m., Gautam Borad wrote:
>
> ---
> This is an automatically generated e-mail. To reply, visit:
> https://reviews.apache.org/r/49507/
> ---
>
> (Updated July 1, 2016, 1:14 p.m.)
>
>
> Review request for Ambari, Alejandro Fernandez, Mugdha Varadkar, Robert
> Levas, Sriharsha Chintalapani, Srimanth Gunturi, and Velmurugan Periasamy.
>
>
> Bugs: AMBARI-17520
> https://issues.apache.org/jira/browse/AMBARI-17520
>
>
> Repository: ambari
>
>
> Description
> ---
>
> Update the policy_user property in Advanced ranger-storm-plugin-properties of
> Ranger with the value of the storm user bare principal specified in Storms
> Ambari config.
> With this the principal used for storm will also be added to default ranger
> policy and will prevent Storm service check failures.
>
>
> Diffs
> -
>
>
> ambari-server/src/main/resources/common-services/STORM/0.9.1/package/scripts/params_linux.py
> 073bb1c
>
> ambari-server/src/main/resources/common-services/STORM/0.9.3/configuration/ranger-storm-plugin-properties.xml
> 2fee04f
>
> Diff: https://reviews.apache.org/r/49507/diff/
>
>
> Testing
> ---
>
> Tested Ranger storm plugin on centos6 cluster. Kerberized the cluster and
> checked that Storm service check is working fine.
>
>
> Thanks,
>
> Gautam Borad
>
>
Re: Review Request 49078: AMBARI-17363: Enable Ranger support for Hive Interactive
--- This is an automatically generated e-mail. To reply, visit: https://reviews.apache.org/r/49078/#review139337 --- Ship it! Ship It! - Velmurugan Periasamy On June 22, 2016, 10:17 a.m., Gautam Borad wrote: > > --- > This is an automatically generated e-mail. To reply, visit: > https://reviews.apache.org/r/49078/ > --- > > (Updated June 22, 2016, 10:17 a.m.) > > > Review request for Ambari, Alejandro Fernandez, Mugdha Varadkar, Sumit > Mohanty, Srimanth Gunturi, and Velmurugan Periasamy. > > > Bugs: AMBARI-17363 > https://issues.apache.org/jira/browse/AMBARI-17363 > > > Repository: ambari > > > Description > --- > > Make config and stack changes for Hive Interactive to use Ranger authorizer > when Ranger Hive Plugin is enabled > > > Diffs > - > > > ambari-server/src/main/resources/common-services/HIVE/0.12.0.2.0/package/scripts/hive_server_interactive.py > d1c8401 > > ambari-server/src/main/resources/common-services/HIVE/0.12.0.2.0/package/scripts/setup_ranger_hive_interactive.py > PRE-CREATION > > Diff: https://reviews.apache.org/r/49078/diff/ > > > Testing > --- > > Tested by enabling ranger plugin with hive interactive on a centos 3 node > cluster. > > > Thanks, > > Gautam Borad > >
Re: Review Request 48730: AMBARI-17250 : Use right principals for Hbase Master in Kerberos enabled Ranger Hbase Plugin
--- This is an automatically generated e-mail. To reply, visit: https://reviews.apache.org/r/48730/#review137739 --- Ship it! Ship It! - Velmurugan Periasamy On June 15, 2016, 2:26 p.m., Gautam Borad wrote: > > --- > This is an automatically generated e-mail. To reply, visit: > https://reviews.apache.org/r/48730/ > --- > > (Updated June 15, 2016, 2:26 p.m.) > > > Review request for Ambari, Alejandro Fernandez, Jonathan Hurley, Srimanth > Gunturi, and Velmurugan Periasamy. > > > Bugs: AMBARI-17250 > https://issues.apache.org/jira/browse/AMBARI-17250 > > > Repository: ambari > > > Description > --- > > **Problem Statement :** > Hbase test connection and resource lookup fails on secure kerberized cluster > due to invalid principal for Hbase Master. > Ambari configs are passing hbase_jaas_principal need to correct that. > > > Diffs > - > > > ambari-server/src/main/resources/common-services/HBASE/0.96.0.2.0/package/scripts/params_linux.py > 76cefe7 > > Diff: https://reviews.apache.org/r/48730/diff/ > > > Testing > --- > > Verified Restart and test connection for Hbase after enabling Ranger Hbase > Plugin in kerberos env. > Verified resource lookup for Hbase in Ranger (in Kerberos env) > > > Thanks, > > Gautam Borad > >
Re: Review Request 48414: AMBARI-17118 Incorrect formated external url in ranger configuration - causes Namenode startup failure
--- This is an automatically generated e-mail. To reply, visit: https://reviews.apache.org/r/48414/#review137012 --- Ship it! Ship It! - Velmurugan Periasamy On June 10, 2016, 1:30 p.m., Mugdha Varadkar wrote: > > --- > This is an automatically generated e-mail. To reply, visit: > https://reviews.apache.org/r/48414/ > --- > > (Updated June 10, 2016, 1:30 p.m.) > > > Review request for Ambari, Alejandro Fernandez, Gautam Borad, Srimanth > Gunturi, and Velmurugan Periasamy. > > > Bugs: AMBARI-17118 > https://issues.apache.org/jira/browse/AMBARI-17118 > > > Repository: ambari > > > Description > --- > > Ranger Admin url when configured with trailing slash causes Namenode startup > failure > > > Diffs > - > > > ambari-common/src/main/python/resource_management/libraries/functions/ranger_functions.py > 48ae225 > > ambari-common/src/main/python/resource_management/libraries/functions/ranger_functions_v2.py > cfdd6f7 > > ambari-common/src/main/python/resource_management/libraries/functions/setup_ranger_plugin.py > 260f018 > > ambari-common/src/main/python/resource_management/libraries/functions/setup_ranger_plugin_xml.py > e5faf4b > > ambari-server/src/main/resources/common-services/HBASE/0.96.0.2.0/package/scripts/params_linux.py > 05bad1c > > ambari-server/src/main/resources/common-services/HDFS/2.1.0.2.0/package/scripts/params_linux.py > 9af87d4 > > ambari-server/src/main/resources/common-services/HIVE/0.12.0.2.0/package/scripts/params_linux.py > fea0635 > > ambari-server/src/main/resources/common-services/KAFKA/0.8.1/package/scripts/params.py > 09878ba > > ambari-server/src/main/resources/common-services/KNOX/0.5.0.2.2/package/scripts/params_linux.py > 4d30f55 > > ambari-server/src/main/resources/common-services/RANGER/0.4.0/package/scripts/params.py > 29ac561 > > ambari-server/src/main/resources/common-services/RANGER_KMS/0.5.0.2.3/package/scripts/kms.py > cbe2a31 > > ambari-server/src/main/resources/common-services/RANGER_KMS/0.5.0.2.3/package/scripts/params.py > 17f71fb > > ambari-server/src/main/resources/common-services/STORM/0.9.1/package/scripts/params_linux.py > 978ad92 > > ambari-server/src/main/resources/common-services/YARN/2.1.0.2.0/package/scripts/params_linux.py > 29fb3c1 > ambari-server/src/main/resources/stacks/HDP/2.3/services/stack_advisor.py > 36fe066 > > ambari-server/src/main/resources/stacks/HDP/2.5/services/HDFS/configuration/ranger-hdfs-plugin-properties.xml > PRE-CREATION > ambari-server/src/main/resources/stacks/HDP/2.5/services/stack_advisor.py > df6c65c > > Diff: https://reviews.apache.org/r/48414/diff/ > > > Testing > --- > > Tested Ranger Installation on centos6 > > > Thanks, > > Mugdha Varadkar > >
Re: Review Request 48547: AMBARI-17164 Handle Ranger upgrade scenario in Kerberized env
---
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/48547/#review137009
---
Ship it!
Ship It!
- Velmurugan Periasamy
On June 10, 2016, 12:50 p.m., Mugdha Varadkar wrote:
>
> ---
> This is an automatically generated e-mail. To reply, visit:
> https://reviews.apache.org/r/48547/
> ---
>
> (Updated June 10, 2016, 12:50 p.m.)
>
>
> Review request for Ambari, Gautam Borad, Jonathan Hurley, Nate Cole, Srimanth
> Gunturi, and Velmurugan Periasamy.
>
>
> Bugs: AMBARI-17164
> https://issues.apache.org/jira/browse/AMBARI-17164
>
>
> Repository: ambari
>
>
> Description
> ---
>
> Add this property to ranger-admin-site.xml:
> ranger.plugins.{component}.serviceuser=service_user
>
> Add spnego principal and keytab if cluster is kerberized to below properties:
> ranger.spnego.kerberos.principal
> ranger.spnego.kerberos.keytab
>
>
> Diffs
> -
>
>
> ambari-server/src/main/java/org/apache/ambari/server/serveraction/upgrades/RangerKerberosConfigCalculation.java
> PRE-CREATION
>
> ambari-server/src/main/resources/common-services/RANGER/0.6.0/configuration/ranger-admin-site.xml
> 35910ee
>
> ambari-server/src/main/resources/stacks/HDP/2.3/upgrades/nonrolling-upgrade-2.5.xml
> f40f760
> ambari-server/src/main/resources/stacks/HDP/2.3/upgrades/upgrade-2.5.xml
> ea5ff5a
>
> ambari-server/src/main/resources/stacks/HDP/2.4/upgrades/nonrolling-upgrade-2.5.xml
> 7fb03dc
> ambari-server/src/main/resources/stacks/HDP/2.4/upgrades/upgrade-2.5.xml
> 7f988e3
> ambari-server/src/main/resources/stacks/HDP/2.5/services/stack_advisor.py
> df6c65c
>
> ambari-server/src/test/java/org/apache/ambari/server/serveraction/upgrades/RangerKerberosConfigCalculationTest.java
> PRE-CREATION
>
> Diff: https://reviews.apache.org/r/48547/diff/
>
>
> Testing
> ---
>
> Tested upgrade scenario from stack 2.4 to 2.5
>
>
> ---
> T E S T S
> ---
> Picked up _JAVA_OPTIONS: -Xmx2048m -XX:MaxPermSize=512m
> -Djava.awt.headless=true
> Running
> org.apache.ambari.server.serveraction.upgrades.RangerKerberosConfigCalculationTest
> Tests run: 1, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.586 sec -
> in
> org.apache.ambari.server.serveraction.upgrades.RangerKerberosConfigCalculationTest
>
> Results :
>
> Tests run: 1, Failures: 0, Errors: 0, Skipped: 0
>
>
> Thanks,
>
> Mugdha Varadkar
>
>
Re: Review Request 48549: AMBARI-17165 Handle Java patches execution during Ranger upgrade
--- This is an automatically generated e-mail. To reply, visit: https://reviews.apache.org/r/48549/#review137008 --- Ship it! Ship It! - Velmurugan Periasamy On June 10, 2016, 12:47 p.m., Mugdha Varadkar wrote: > > --- > This is an automatically generated e-mail. To reply, visit: > https://reviews.apache.org/r/48549/ > --- > > (Updated June 10, 2016, 12:47 p.m.) > > > Review request for Ambari, Gautam Borad, Jonathan Hurley, Nate Cole, Srimanth > Gunturi, and Velmurugan Periasamy. > > > Bugs: AMBARI-17165 > https://issues.apache.org/jira/browse/AMBARI-17165 > > > Repository: ambari > > > Description > --- > > Revisiting execution of java patches during upgrade for Ranger Service > > > Diffs > - > > > ambari-server/src/main/resources/stacks/HDP/2.2/upgrades/nonrolling-upgrade-2.3.xml > 4fd5801 > > ambari-server/src/main/resources/stacks/HDP/2.2/upgrades/nonrolling-upgrade-2.4.xml > 272a3cc > ambari-server/src/main/resources/stacks/HDP/2.2/upgrades/upgrade-2.3.xml > b0cff68 > ambari-server/src/main/resources/stacks/HDP/2.2/upgrades/upgrade-2.4.xml > 0b72254 > > ambari-server/src/main/resources/stacks/HDP/2.3/upgrades/nonrolling-upgrade-2.3.xml > 111b432 > > ambari-server/src/main/resources/stacks/HDP/2.3/upgrades/nonrolling-upgrade-2.4.xml > 9365646 > > ambari-server/src/main/resources/stacks/HDP/2.3/upgrades/nonrolling-upgrade-2.5.xml > f40f760 > ambari-server/src/main/resources/stacks/HDP/2.3/upgrades/upgrade-2.3.xml > 712241b > ambari-server/src/main/resources/stacks/HDP/2.3/upgrades/upgrade-2.4.xml > 4187d64 > ambari-server/src/main/resources/stacks/HDP/2.3/upgrades/upgrade-2.5.xml > ea5ff5a > > ambari-server/src/main/resources/stacks/HDP/2.4/upgrades/nonrolling-upgrade-2.4.xml > e83b54b > > ambari-server/src/main/resources/stacks/HDP/2.4/upgrades/nonrolling-upgrade-2.5.xml > 7fb03dc > ambari-server/src/main/resources/stacks/HDP/2.4/upgrades/upgrade-2.4.xml > 4065e87 > ambari-server/src/main/resources/stacks/HDP/2.4/upgrades/upgrade-2.5.xml > 7f988e3 > > ambari-server/src/main/resources/stacks/HDP/2.5/upgrades/nonrolling-upgrade-2.5.xml > 460e6b3 > ambari-server/src/main/resources/stacks/HDP/2.5/upgrades/upgrade-2.5.xml > 6ce4c81 > > Diff: https://reviews.apache.org/r/48549/diff/ > > > Testing > --- > > Tested Ranger upgrade from stack 2.4 to 2.5 > > > Thanks, > > Mugdha Varadkar > >
