Re: User running job in forbidden queue

2016-09-07 Thread Loïc Chanel
I will dig into that option, as it sounds what I missed. Thank you Ramesh. Loïc Loïc CHANEL System Big Data engineer MS - WASABI - Worldline (Villeurbanne, France) 2016-09-07 21:15 GMT+02:00 Ramesh Mani : > Loïc, > > The lookup functionality in the ranger policy

Re: User running job in forbidden queue

2016-09-07 Thread Loïc Chanel
That's exactly what I was thinking, that's why I couldn't see any improvement of the feature but only a slight upgrade of the user's brain ;-) Still, the validation option sounds like a good idea. Regards, Loïcc Loïc CHANEL System Big Data engineer MS - WASABI - Worldline (Villeurbanne,

Re: User running job in forbidden queue

2016-09-07 Thread Don Bosco Durai
Hi Loïc > A possible improvement would be to prevent a user from creating a policy for > a queue that doesn't exist. > Tell me if it sounds feasible, and I'll create the corresponding Jira. I am not sure this will work. One of Ranger flexible feature is to be able to create policies on

Re: Antwort: Re: User running job in forbidden queue

2016-09-07 Thread Loïc Chanel
Markus, In addition to Bosco's information, I highly recommend you the following link : https://github.com/abajwa-hw/security-workshops/blob/master/Setup-ranger-23.md It is quite helpful to have a precise idea of how to secure a Hadoop cluster and the author seems to keep it up to date -- it