Re: [VOTE] Graduate Apache Ranger Project from the Incubator - Resending with additional mail distro

2017-01-09 Thread Luciano Resende
+1 (binding) On Wed, Jan 4, 2017 at 2:48 PM, Ramesh Mani wrote: > Dear Incubator members, > > Apache Ranger Project community has successfully released 0.6.2 version > and with it there had been a lot of discussion within Apache Ranger > community to consider graduation

Re: [VOTE] Graduate Apache Ranger Project from the Incubator - Resending with additional mail distro

2017-01-09 Thread Jakob Homan
+1 (binding) On 9 January 2017 at 10:52, Sailaja Polavarapu wrote: > +1 > > -Sailaja > > > > > On 1/4/17, 2:48 PM, "Ramesh Mani" wrote: > >>Dear Incubator members, >> >>Apache Ranger Project community has successfully released 0.6.2 version

Re: [VOTE] Graduate Apache Ranger Project from the Incubator - Resending with additional mail distro

2017-01-09 Thread Sailaja Polavarapu
+1 -Sailaja On 1/4/17, 2:48 PM, "Ramesh Mani" wrote: >Dear Incubator members, > >Apache Ranger Project community has successfully released 0.6.2 version and >with it there had been a lot of discussion within Apache Ranger community to >consider graduation to TLP.

Re: [VOTE] Graduate Apache Ranger Project from the Incubator - Resending with additional mail distro

2017-01-08 Thread Gautam Borad
+1 On Thu, Jan 5, 2017 at 6:22 AM, Chris Nauroth wrote: > +1 (binding) > > Chris Nauroth > > On Wed, Jan 4, 2017 at 2:48 PM, Ramesh Mani wrote: > >> Dear Incubator members, >> >> Apache Ranger Project community has successfully released 0.6.2 version

Re: Ranger/Hive Version mismatch in HDP 2.5 ?

2017-01-06 Thread Yan Zhou
ay, January 5, 2017 at 10:50 PM > *To: *"user@ranger.incubator.apache.org" <user@ranger.incubator.apache.org>, > "dev-subscr...@ranger.incubator.apache.org" <dev-subscribe@ranger. > incubator.apache.org> > > *Subject: *Re: Ranger/Hive Version mismatch

Re: Ranger/Hive Version mismatch in HDP 2.5 ?

2017-01-05 Thread Yan Zhou
Thanks > > > > Bosco > > > > > > From: Yan Zhou <yzhouopensou...@gmail.com> > Reply-To: <user@ranger.incubator.apache.org> > Date: Thursday, January 5, 2017 at 9:43 AM > To: <user@ranger.incubator.apache.org>, <dev@ranger.i

Re: Unable to connect to S3 after enabling Ranger with Hive

2017-01-05 Thread Selvamohan Neethiraj
or.apache.org> Date: Thursday, January 5, 2017 at 5:08 PM To: "user@ranger.incubator.apache.org" <user@ranger.incubator.apache.org> Subject: Re: Unable to connect to S3 after enabling Ranger with Hive Don Bosco / Selvamohan, Even though it provides solution to handle the custom pr

Re: Unable to connect to S3 after enabling Ranger with Hive

2017-01-05 Thread Anandha L Ranganathan
.@gmail.com> > *Reply-To: *<user@ranger.incubator.apache.org> > *Date: *Thursday, January 5, 2017 at 1:05 PM > > *To: *<user@ranger.incubator.apache.org> > *Subject: *Re: Unable to connect to S3 after enabling Ranger with Hive > > > > Yes. It is ranger for hive. > > >

Re: Ranger database setup in AWS Aurora database.

2017-01-05 Thread Anandha L Ranganathan
er.incubator.apache.org" < > user@ranger.incubator.apache.org> > Date: Thursday, January 5, 2017 at 4:02 PM > To: "user@ranger.incubator.apache.org" <user@ranger.incubator.apache.org> > > Subject: Re: Ranger database setup in AWS Aurora database. > > You

Re: Ranger/Hive Version mismatch in HDP 2.5 ?

2017-01-05 Thread Madhan Neethiraj
y 5, 2017 at 9:43 AM To: <user@ranger.incubator.apache.org>, <d...@ranger.incubator.apache.org> Subject: Re: Ranger/Hive Version mismatch in HDP 2.5 ? Can anyone help to clarify this version issue between Hive and Ranger 0.6.0 in HDP 2.5? I'm now in a dilemm

Re: Ranger database setup in AWS Aurora database.

2017-01-05 Thread Selvamohan Neethiraj
From: Don Bosco Durai <bo...@apache.org> Reply-To: "user@ranger.incubator.apache.org" <user@ranger.incubator.apache.org> Date: Thursday, January 5, 2017 at 4:02 PM To: "user@ranger.incubator.apache.org" <user@ranger.incubator.apache.org> Subject: Re: Ranger

Re: Unable to connect to S3 after enabling Ranger with Hive

2017-01-05 Thread Don Bosco Durai
Is this for Ranger or Hive? Bosco From: Anandha L Ranganathan <analog.s...@gmail.com> Reply-To: <user@ranger.incubator.apache.org> Date: Thursday, January 5, 2017 at 12:16 PM To: <user@ranger.incubator.apache.org> Subject: Re: Unable to connect to S3 after enablin

Re: Ranger database setup in AWS Aurora database.

2017-01-05 Thread Anandha L Ranganathan
e.org> > *Date: *Tuesday, January 3, 2017 at 7:27 PM > *To: *<user@ranger.incubator.apache.org> > *Subject: *Re: Ranger database setup in AWS Aurora database. > > > > Hi, > > > > For that, you need to refer Aurora DB docs provided by a

Re: Ranger/Hive Version mismatch in HDP 2.5 ?

2017-01-05 Thread Yan Zhou
Can anyone help to clarify this version issue between Hive and Ranger 0.6.0 in HDP 2.5? I'm now in a dilemma where Ranger 0.6.0 forces me to use Hive 2.1 while HDP 2.5 only has Hive 1.2.1. Many Thanks! On Wed, Jan 4, 2017 at 1:08 PM, Yan Zhou wrote: > Ranger's

Re: Unable to connect to S3 after enabling Ranger with Hive

2017-01-05 Thread Anandha L Ranganathan
> >> |fs\.s3a\..* >> >> And restart the HiveServer2 to see if this fixes this issue ? >> >> Thanks, >> Selva- >> From: Anandha L Ranganathan <analog.s...@gmail.com> >> Reply-To: "user@ranger.incubator.apache.org" < >> user@ranger.

Re: Ranger/Hive Version mismatch in HDP 2.5 ?

2017-01-04 Thread Yan Zhou
Ranger's pom.xml has the Hive version as 2.1.0. Thanks On Wed, Jan 4, 2017 at 12:15 PM, Don Bosco Durai wrote: > I feel we should have a matrix for the component versions supported by > each Ranger release. Having it on the main page will be good. > > > >

Re: ranger solr-plugin

2017-01-04 Thread Don Bosco Durai
? And give any feedback you might have. Thanks Bosco From: Gautam Borad <gbo...@gmail.com> Reply-To: <user@ranger.incubator.apache.org> Date: Tuesday, January 3, 2017 at 10:16 PM To: <user@ranger.incubator.apache.org> Cc: fangheart <fanghe...@fangheart.win>

Re: Ranger/Hive Version mismatch in HDP 2.5 ?

2017-01-04 Thread Don Bosco Durai
I feel we should have a matrix for the component versions supported by each Ranger release. Having it on the main page will be good. https://cwiki.apache.org/confluence/display/RANGER/Index One more thing I noticed is that the Installation and User guide is still pointing to release 0.5.

Re: Ranger database setup in AWS Aurora database.

2017-01-04 Thread Don Bosco Durai
7 at 7:27 PM To: <user@ranger.incubator.apache.org> Subject: Re: Ranger database setup in AWS Aurora database. Hi, For that, you need to refer Aurora DB docs provided by amazon. For MySQL please refer below text. MySQL/MariaDB Prerequisite : Server variable log_bin_trust

Re: ranger solr-plugin

2017-01-03 Thread Gautam Borad
w. > > > > Thanks > > > > Bosco > > > > > > *From: *Gautam Borad <gbo...@gmail.com> > *Reply-To: *<user@ranger.incubator.apache.org> > *Date: *Tuesday, January 3, 2017 at 12:34 AM > *To: *<user@ranger.incubator.apache.org> >

Re: ranger solr-plugin

2017-01-03 Thread Don Bosco Durai
.apache.org> Cc: fangheart <fanghe...@fangheart.win> Subject: Re: ranger solr-plugin The following documents should server your purpose : - Enable Ranger Solr Plugin - Configure SolrCloud in secure mode - Ranger installation in Kerberos Environment Also Bosco, am not sure

Re: ranger solr-plugin

2017-01-03 Thread Gautam Borad
;fanghe...@fangheart.win> > *Date: *Wednesday, December 28, 2016 at 4:38 PM > *To: *Don Bosco Durai <bo...@apache.org> > *Subject: *Re: ranger solr-plugin > > > > Thank you very much for your reply.if you can support the > kerberoes for ranger admin,i

Re: ranger solr-plugin

2017-01-02 Thread Don Bosco Durai
it? Thanks Bosco From: fangheart <fanghe...@fangheart.win> Date: Wednesday, December 28, 2016 at 4:38 PM To: Don Bosco Durai <bo...@apache.org> Subject: Re: ranger solr-plugin Thank you very much for your reply.if you can support the kerberoes for ranger admin,i

Re: Git tags for releases

2016-12-28 Thread Owen O'Malley
quot;Lal,Alok(allal)" <al...@ebay.com> > *Date: *Wednesday, December 28, 2016 at 10:34 AM > *To: *"user@ranger.incubator.apache.org" <user@ranger.incubator.apache.org > > > *Subject: *Re: Git tags for releases > > > > *From: *Don Bosco Durai <bo...@apa

Re: Git tags for releases

2016-12-28 Thread Lal,Alok(allal)
rchive as the source of truth for determining which releases have been made. From: "Lal,Alok(allal)" <al...@ebay.com> Date: Wednesday, December 28, 2016 at 10:34 AM To: "user@ranger.incubator.apache.org" <user@ranger.incubator.apache.org> Subject: Re: Git tags f

Re: Git tags for releases

2016-12-27 Thread Don Bosco Durai
We should be able to do this. Vel, can we can make this part of our post-release checklist? https://cwiki.apache.org/confluence/pages/viewpage.action?pageId=65867946 Thanks Bosco From: Lars Francke Reply-To: Date:

Re: ranger solr-plugin

2016-12-27 Thread Don Bosco Durai
if you need help on setting up Kerberos for Ranger Admin. Bosco From: "方久鑫 (fangheart)" <fanghe...@fangheart.win> Date: Friday, October 28, 2016 at 1:20 AM To: Don Bosco Durai <bo...@apache.org> Subject: Re: Re: ranger solr-plugin my version is 0.6. And now

Re: Unable to connect to S3 after enabling Ranger with Hive

2016-12-19 Thread Anandha L Ranganathan
2 to see if this fixes this issue ? > > Thanks, > Selva- > From: Anandha L Ranganathan <analog.s...@gmail.com> > Reply-To: "user@ranger.incubator.apache.org" < > user@ranger.incubator.apache.org> > Date: Monday, December 19, 2016 at 6:27 PM > > To: &

Re: Unable to connect to S3 after enabling Ranger with Hive

2016-12-19 Thread Anandha L Ranganathan
user@ranger.incubator.apache.org> > Date: Monday, December 19, 2016 at 5:54 PM > To: "user@ranger.incubator.apache.org" <user@ranger.incubator.apache.org> > Subject: Re: Unable to connect to S3 after enabling Ranger with Hive > > Selva, > > We are using HDP and h

Re: Unable to connect to S3 after enabling Ranger with Hive

2016-12-19 Thread Selvamohan Neethiraj
"user@ranger.incubator.apache.org" <user@ranger.incubator.apache.org> Date: Monday, December 19, 2016 at 5:54 PM To: "user@ranger.incubator.apache.org" <user@ranger.incubator.apache.org> Subject: Re: Unable to connect to S3 after enabling Ranger with Hive Selva, We are using HDP an

Re: Unable to connect to S3 after enabling Ranger with Hive

2016-12-19 Thread Anandha L Ranganathan
Selva, We are using HDP and here are versions and results. Hive : 1.2.1.2.4 Ranger: 0.5.0.2.4 0: jdbc:hive2://usw2dxdpmn01:10010> set hive.conf.restricted.list;

Re: Pre-requisite for KMS

2016-12-07 Thread Don Bosco Durai
with “keyadmin” role. This is to provide separation of duty feature. Bosco From: Aneela Saleem <ane...@platalytics.com> Reply-To: <user@ranger.incubator.apache.org> Date: Tuesday, December 6, 2016 at 8:42 PM To: <user@ranger.incubator.apache.org> Cc: <br...@lattice-engines.

Re: Pre-requisite for KMS

2016-12-06 Thread Aneela Saleem
ecember 06, 2016 2:27 PM > To: user@ranger.incubator.apache.org > Subject: Re: Pre-requisite for KMS > > Thanks Benjamin for the quick response, > Yeah, this is exactly that I want to achieve. But, I am not using ambari > or cloudera. I have installed simple Hadoop from apache dis

RE: Pre-requisite for KMS

2016-12-06 Thread Benjamin Ross
:27 PM To: user@ranger.incubator.apache.org Subject: Re: Pre-requisite for KMS Thanks Benjamin for the quick response, Yeah, this is exactly that I want to achieve. But, I am not using ambari or cloudera. I have installed simple Hadoop from apache distribution and know want to configure

Re: allow all users to decrypt?

2016-11-09 Thread Don Bosco Durai
Hi Ben > Alternatively, is there any way to add the user DOMAIN\build to ranger? Ranger uses the same username that is used by HDFS. And that will depend on how your core-site.xml is configured or how the users are materialized on the linux boxes. You can check the Ranger Audits to see what

Re: ranger solr-plugin

2016-10-27 Thread Don Bosco Durai
[Copied user and dev group] Hello I personally have not tested with Solr’s basic auth. All my testing was with Kerberos. Which Ranger version are you using? Looking at the line numbers, it doesn’t seem to be Ranger 0.6 Bosco From: "方久鑫 (fangheart)"

Re: Fw: Letter for help about ranger-kafka-plugin

2016-10-15 Thread Alok Lal
Hi Duan, It's best to post your question on ranger's user mailing list. Someone there would be able to help you. Please provide information like what version/distribution of kafka and ranger you are using to help resolve the issues. Thanks Alok On Thu, Oct 13, 2016 at 8:23 AM, Duan Xiong

Re: Questions for Ranger's hive plugin

2016-10-14 Thread Don Bosco Durai
Da Madhan is the original author for the audit framework in Ranger 0.4 release. One quick feedback is, if you are using HDP, which in turn uses Ambari, then any manual configuration you might do will be overwritten. The best way to debug log4j related issues, is to create a file appender

RE: Authentication Failure talking to Ranger KMS

2016-10-11 Thread Benjamin Ross
To: Benjamin Ross Cc: u...@hadoop.apache.org; user@ranger.incubator.apache.org Subject: Re: Authentication Failure talking to Ranger KMS Somes to me you encountered this bug? HDFS-10481<https://issues.apache.org/jira/browse/HDFS-10481> If you’re using CDH, this is fixed in CDH5.5.5, CD

Re: Ranger Integration with Hadoop:Issue-Unable to decrypt password due to error

2016-09-22 Thread Ramesh Mani
Venu, Please check that the java you install has JCE unlimited strength. You can verify that in java directory jre/lib/security. http://www.oracle.com/technetwork/java/javase/downloads/jce-7-download-432124.html Please try this. Thanks, Ramesh From: Venu Nadh Veeralanka

Re: Exception while creating encryption zone

2016-09-21 Thread Velmurugan Periasamy
mailto:user@ranger.incubator.apache.org>" <user@ranger.incubator.apache.org<mailto:user@ranger.incubator.apache.org>> Subject: Re: Exception while creating encryption zone Now that my encryption zone is created (directory /user/lchanel/testdir), I'm trying to put a test file in it, but it seems ther

Re: Exception while creating encryption zone

2016-09-21 Thread Loïc Chanel
ccess to “hdfs” user. If not, grant these permissions. >> >> >> From: Loïc Chanel <loic.cha...@telecomnancy.net> >> Reply-To: "user@ranger.incubator.apache.org" < >> user@ranger.incubator.apache.org> >> Date: Friday, September 16, 2016 at 10:38 AM &

Re: Exception while creating encryption zone

2016-09-16 Thread Loïc Chanel
ons. > > > From: Loïc Chanel <loic.cha...@telecomnancy.net> > Reply-To: "user@ranger.incubator.apache.org" < > user@ranger.incubator.apache.org> > Date: Friday, September 16, 2016 at 10:38 AM > > To: "user@ranger.incubator.apache.org" <

Re: Exception while creating encryption zone

2016-09-16 Thread Velmurugan Periasamy
;user@ranger.incubator.apache.org<mailto:user@ranger.incubator.apache.org>" <user@ranger.incubator.apache.org<mailto:user@ranger.incubator.apache.org>> Subject: Re: Exception while creating encryption zone As he's the superdamin user, he should be able to do so, right ? If not, how can I test

Re: Exception while creating encryption zone

2016-09-16 Thread Loïc Chanel
tor.apache.org> > Date: Friday, September 16, 2016 at 8:53 AM > To: "user@ranger.incubator.apache.org" <user@ranger.incubator.apache.org> > Subject: Re: Exception while creating encryption zone > > Hi all, > > Using TCPDUMP, I investigated a little bit more,

Re: Need help in integrating apache-ranger-incubating-0.6.1

2016-09-16 Thread Velmurugan Periasamy
pository.apache.org:443 <http://repository.apache.org:443/> [repository.apache.org/207.244.88.143 <http://repository.apache.org/207.244.88.143> ] failed: Connection timed out and 'parent.relativePath' points at wrong local POM @ line 19, column 13 -> [Help 2] [ERROR] [ERROR] To see the full stack tra

Re: Exception while creating encryption zone

2016-09-16 Thread Velmurugan Periasamy
ncubator.apache.org<mailto:user@ranger.incubator.apache.org>> Subject: Re: Exception while creating encryption zone Hi all, Using TCPDUMP, I investigated a little bit more, and I found that there isn't any call from the host I make my "hdfs crypto -createZone -keyName test_lc

Re: Ranger REST API - Search Service - Parameter type seems not to work

2016-09-12 Thread Lune Silver
Hey Madhan ! I should take the habit to check the github, not the wiki indeed ^_^. https://cwiki.apache.org/confluence/display/RANGER/REST+APIs+for+Service+Definition%2C+Service+and+Policy+Management#RESTAPIsforServiceDefinition,ServiceandPolicyManagement-SearchServices I'm going to test with

Re: Ranger REST API - Search Service - Parameter type seems not to work

2016-09-11 Thread Madhan Neethiraj
Lune, Use ‘serviceType’ as the parameter name to filter on service-type. For other parameter names to use in search filter, please refer to SearchFilter.java - ranger-0.5 or master. Hope this helps. Madhan From: Lune Silver Reply-To:

Re: User running job in forbidden queue

2016-09-07 Thread Loïc Chanel
ïc Chanel <loic.cha...@telecomnancy.net> > Reply-To: "user@ranger.incubator.apache.org" < > user@ranger.incubator.apache.org> > Date: Wednesday, September 7, 2016 at 1:07 AM > To: "user@ranger.incubator.apache.org" <user@ranger.incubator.apache.org> > &

Re: User running job in forbidden queue

2016-09-07 Thread Loïc Chanel
; > Thanks > > > > Bosco > > > > > > *From: *Loïc Chanel <loic.cha...@telecomnancy.net> > *Reply-To: *<user@ranger.incubator.apache.org> > *Date: *Wednesday, September 7, 2016 at 1:07 AM > > *To: *<user@ranger.incubator.apache.org> > *Su

Re: User running job in forbidden queue

2016-09-07 Thread Don Bosco Durai
ednesday, September 7, 2016 at 1:07 AM To: <user@ranger.incubator.apache.org> Subject: Re: User running job in forbidden queue Bosco, I think the audit log would have been a great indicator of my mistake, but another problem I have to work on is the fact that I haven't any audit logs b

Re: Antwort: Re: User running job in forbidden queue

2016-09-07 Thread Loïc Chanel
> Bosco > > > > > > > > *From: *<markus.gier...@fiduciagad.de> > *Reply-To: *<user@ranger.incubator.apache.org> > *Date: *Tuesday, September 6, 2016 at 10:23 AM > *To: *<user@ranger.incubator.apache.org> > *Subject: *Antwort: Re: User r

Re: Antwort: Re: User running job in forbidden queue

2016-09-06 Thread Don Bosco Durai
ncubator.apache.org> Subject: Antwort: Re: User running job in forbidden queue Hi Bosco, is there a guide or a best practice document for multi-tenancy ? Can I really separate different use cases on the same cluster without any security doubts? Best regards, Markus Fiducia & GAD IT

Antwort: Re: User running job in forbidden queue

2016-09-06 Thread Markus . Gierich
osco Durai <bo...@apache.org> An: <user@ranger.incubator.apache.org> Datum: 06.09.2016 18:41 Betreff:Re: User running job in forbidden queue Hi Loïc Just curious, was the audit log helpful? I understand, this could be frustrating, so during the last couple of releases, i

Re: accumulo?

2016-09-05 Thread Luk Vervenne
Fully support your view on this… we now work with xacml on accumulo… luk > On 5 Sep 2016, at 17:33, Don Bosco Durai wrote: > > There is a JIRA tracking it, but no one is working on it yet. > > https://issues.apache.org/jira/browse/RANGER-919 > > Bosco > > > On 9/5/16,

Re: Audit to secure solr with digest authentication

2016-08-30 Thread Lune Silver
Hey Don ! Ty for your answer. Best regards. Gwenael Le Barzic On Sun, Aug 28, 2016 at 5:54 PM, Don Bosco Durai wrote: > Lune > > > > The version before Ranger 0.6 might not work well with authentication. > Even though, it might have been easy for us to support basic or

Re: Help starting RangerKMS

2016-08-28 Thread Don Bosco Durai
6, 2016 at 7:04 AM To: "user@ranger.incubator.apache.org" <user@ranger.incubator.apache.org> Cc: Mark Cohen <mco...@lattice-engines.com> Subject: RE: Help starting RangerKMS I actually figured this out. It was pretty simple - the issue was that the ranger KMS master

Re: Audit to secure solr with digest authentication

2016-08-28 Thread Don Bosco Durai
Lune The version before Ranger 0.6 might not work well with authentication. Even though, it might have been easy for us to support basic or digest auth, but I think, we missed it. The background is, Solr 5.2 introduced support for Kerberos and Solr 5.3 started natively supporting Basic

Re: Ranger usersync in kerberized environment issue

2016-08-18 Thread Margus Roo
Hi One method to debug it is: 1. get the TGT using kinit 2. use curl --negotiate ... http://192.168.23.208:6080/service/xusers/groups/?pageSize=1000=0 If it works then you can test POST. Margus (margusja) Roo

Re: About the specification of each plugin(s policy

2016-08-17 Thread Lune Silver
Hello Don. Ty for your answer. I'm gonna check this ^_^. BR. Lune On Tue, Aug 16, 2016 at 5:10 PM, Don Bosco Durai wrote: > I don’t know whether these are explicitly documented. You can see the > details in the service definition for each of the components supports >

Re: About the specification of each plugin(s policy

2016-08-16 Thread Don Bosco Durai
I don’t know whether these are explicitly documented. You can see the details in the service definition for each of the components supports natively. All the service definitions are in this location agents-common/src/main/resources/service-defs. They are pretty simple and straight forward.

Re: Kafka and Ranger

2016-08-16 Thread Lune Silver
Hello everyone. The problem is coming from Ambari. There is a script here : /usr/lib/ambari-server/lib/resource_management/libraries/functions/ranger_functions_v2.py /usr/lib/ambari-agent/lib/resource_management/libraries/functions/ranger_functions_v2.py At line 168, L168 :

Re: [jira] [Commented] (HAWQ-256) Integrate Security with Apache Ranger

2016-08-15 Thread Don Bosco Durai
Team The HAWQ community is working on integrating Ranger as one of their authorization provider. The HAWQ JIRA https://issues.apache.org/jira/browse/HAWQ-256 has the high level design document and also there is a long discussion around the topic. Since HAWQ is written in C/C++, the plan is to

Re: How to add/delete/update users to Apache Ranger via REST API

2016-08-14 Thread Margus Roo
I lately just needed to delete: http://hostname:6080/service/xusers/users/userName/ Method DELETE. Margus (margusja) Roo http://margus.roo.ee skype: margusja +372 51 48 780 On 14/08/16 21:06, Vishwakarma, Chhaya wrote: Hi All, How can I add/remove/update users/groups through Ranger REST

Re: Ranger-0.6 HDFS authentication failed in secure mode

2016-08-13 Thread Don Bosco Durai
at 11:33 PM To: <user@ranger.incubator.apache.org> Subject: Re: Ranger-0.6 HDFS authentication failed in secure mode Thanks Bosco, I have already installed JCE unlimited strength package and Kerberos is already working fine. Also i tried with Kerberos principal instead of just admin, it did not

Re: Ranger-0.6 HDFS authentication failed in secure mode

2016-08-12 Thread Don Bosco Durai
ust 12, 2016 at 3:02 AM To: <user@ranger.incubator.apache.org> Subject: Re: Ranger-0.6 HDFS authentication failed in secure mode Hi Sailaja, I set these configuration parameters, still i get the following error on Ranger UI as well as in ranger_admin.log file Unable to retrie

Re: Ranger-0.6 HDFS authentication failed in secure mode

2016-08-11 Thread Sailaja Polavarapu
t;user@ranger.incubator.apache.org<mailto:user@ranger.incubator.apache.org>> Date: Thursday, August 11, 2016 at 12:01 PM To: "user@ranger.incubator.apache.org<mailto:user@ranger.incubator.apache.org>" <user@ranger.incubator.apache.org<mailto:user@ranger.incubator.apache.org>>

Re: Ranger-0.6 HDFS authentication failed in secure mode

2016-08-11 Thread Aneela Saleem
t 11, 2016 at 11:32 PM > To: "user@ranger.incubator.apache.org" <user@ranger.incubator.apache.org> > Subject: Re: Ranger-0.6 HDFS authentication failed in secure mode > > Hi Folks! > > I have tried different options like kinit using nn/hadoop-master > principal. And

Re: Ranger-0.6 HDFS authentication failed in secure mode

2016-08-11 Thread Sailaja Polavarapu
incubator.apache.org>" <user@ranger.incubator.apache.org<mailto:user@ranger.incubator.apache.org>> Date: Thursday, August 11, 2016 at 11:15 AM To: "user@ranger.incubator.apache.org<mailto:user@ranger.incubator.apache.org>" <user@ranger.incubator.apache.org<

Re: Ranger-0.6 HDFS authentication failed in secure mode

2016-08-11 Thread Velmurugan Periasamy
e: Thursday, August 11, 2016 at 11:32 PM To: "user@ranger.incubator.apache.org<mailto:user@ranger.incubator.apache.org>" <user@ranger.incubator.apache.org<mailto:user@ranger.incubator.apache.org>> Subject: Re: Ranger-0.6 HDFS authentication failed in secure mode Hi Folk

Re: Ranger-0.6 HDFS authentication failed in secure mode

2016-08-11 Thread Aneela Saleem
Hi Folks! I have tried different options like kinit using nn/hadoop-master principal. And then enable hdfs plugin and start hadoop. But I am still facing the same issue. Any help related to above issue will be appreciable. Thanks On Mon, Aug 8, 2016 at 8:47 PM, Aneela Saleem

Re: hiveServer2.async.summary.batch_hiveServer2.async.summary.batch.hdfs_destWriter Exception encountered while connecting to the server GSS initiate failed No valid credentials provided

2016-08-10 Thread Margus Roo
Is there temporary fix? In HDP-2.3.4.0 threre is Ranger 0.5 available. And I do not know when 0.7 will be in HDP. Margus (margusja) Roo http://margus.roo.ee skype: margusja +372 51 48 780 On 10/08/16 18:54, Ramesh Mani wrote: Margus, This is was fixed in this apache jira

Re: Ranger-0.6 HDFS authentication failed in secure mode

2016-08-08 Thread Aneela Saleem
Madhan! I can see following exception in *ranger-admin.log* file 2016-08-08 17:42:43,501 [timed-executor-pool-0] ERROR apache.ranger.services.hdfs.client.HdfsResourceMgr (HdfsResourceMgr.java:49) - <== HdfsResourceMgr.testConnection Error: Unable to login to Hadoop environment [hdfs]

Re: Ranger-0.6 HDFS authentication failed in secure mode

2016-08-08 Thread Madhan Neethiraj
Aneela, Do you see any errors reported in Ranger Admin log file xa_portal.log, for the download request from the HDFS plugin? Thanks, Madhan From: Aneela Saleem Reply-To: "user@ranger.incubator.apache.org" Date: Monday,

Re: Issue in compiling Ranger 0.6

2016-08-07 Thread Don Bosco Durai
uot;docker rmi ranger_dev" or "sudo docker rmi ranger_dev" Thanks Bosco From: Ramesh Mani <rm...@hortonworks.com> Reply-To: <user@ranger.incubator.apache.org> Date: Sunday, August 7, 2016 at 12:25 PM To: "user@ranger.incubator.apache.org" <u

Re: Issue in compiling Ranger 0.6

2016-08-07 Thread Ramesh Mani
Aneela, Which version of Maven are you using? User 3.3.3 or above. That should resolve this issue. Thanks, Ramesh From: Aneela Saleem > Reply-To: "user@ranger.incubator.apache.org"

Re: Ranger auth vs HDFS auth

2016-08-03 Thread Don Bosco Durai
PM To: <user@ranger.incubator.apache.org>, Sreeni <ksraju...@yahoo.com> Subject: Re: Ranger auth vs HDFS auth Thanks for the clarification Sreeni. Ravi On Tue, Aug 2, 2016 at 7:40 PM, Sreeni <ksraju...@yahoo.com> wrote: See inline updates. Sreeni +1 951 977 3364 On T

Re: Ranger auth vs HDFS auth

2016-08-03 Thread ravi teja
Thanks for the clarification Sreeni. Ravi On Tue, Aug 2, 2016 at 7:40 PM, Sreeni wrote: > See inline updates. > > Sreeni +1 951 977 3364 > > > On Tuesday, August 2, 2016 9:04 AM, ravi teja > wrote: > > > Hi, > > We are evaluating Ranger for

Re: Ranger auth vs HDFS auth

2016-08-02 Thread Sreeni
See inline updates. Sreeni +1 951 977 3364 On Tuesday, August 2, 2016 9:04 AM, ravi teja wrote: Hi, We are evaluating Ranger for authorization over our existing hadoop cluster.Had some doubts: - I wonder , is ranger auth a substitute of HDFS authorization

Re: Question about Ranger REST URL with service-name component

2016-07-20 Thread Don Bosco Durai
Reply-To: <user@ranger.incubator.apache.org> Date: Wednesday, July 20, 2016 at 8:46 AM To: "user@ranger.incubator.apache.org" <user@ranger.incubator.apache.org> Subject: Re: Question about Ranger REST URL with service-name component Yes, that was it (should have figured out myself…:()

Re: Question about Ranger REST URL with service-name component

2016-07-20 Thread Stromas, Aaron
<mailto:user@ranger.incubator.apache.org>" <user@ranger.incubator.apache.org<mailto:user@ranger.incubator.apache.org>> Subject: Re: Question about Ranger REST URL with service-name component Hi Aaron, This may have to do with ‘&’ being interpreted as a special cha

Re: Question about Ranger REST URL with service-name component

2016-07-20 Thread Stromas, Aaron
016 at 9:14 AM To: "user@ranger.incubator.apache.org<mailto:user@ranger.incubator.apache.org>" <user@ranger.incubator.apache.org<mailto:user@ranger.incubator.apache.org>> Subject: Re: Question about Ranger REST URL with service-name component Hi Aaron, I have marked the correct URLs below

Re: Cannot create policy, getting 404

2016-07-20 Thread Stromas, Aaron
pache.org<mailto:user@ranger.incubator.apache.org>" <user@ranger.incubator.apache.org<mailto:user@ranger.incubator.apache.org>> Date: Wednesday, July 20, 2016 at 5:37 AM To: "user@ranger.incubator.apache.org<mailto:user@ranger.incubator.apache.org>" <user@ranger.incubator.apache

Re: Question about Ranger REST URL with service-name component

2016-07-20 Thread Abhay Kulkarni
.incubator.apache.org>" <user@ranger.incubator.apache.org<mailto:user@ranger.incubator.apache.org>> Subject: Re: Question about Ranger REST URL with service-name component Hi Bosco, I still do. My previous post was concerning the create policy object where I had an error in th

Re: Question about Ranger REST URL with service-name component

2016-07-20 Thread Stromas, Aaron
Tuesday, July 19, 2016 at 5:22 PM To: "user@ranger.incubator.apache.org<mailto:user@ranger.incubator.apache.org>" <user@ranger.incubator.apache.org<mailto:user@ranger.incubator.apache.org>> Subject: Re: Question about Ranger REST URL with service-name component Aaron, are you still havin

Re: Question about Ranger REST URL with service-name component

2016-07-20 Thread Larry McCay
Is there a doc JIRA filed for this issue? On Jul 20, 2016, at 5:35 AM, Lune Silver > wrote: I don't know if this is your problem, but there is an error in the rest api documentation concerning for example the way to get of a policy

Re: Cannot create policy, getting 404

2016-07-20 Thread Lune Silver
You can use json valider website to validate the json policy you submit. It helped me a lot in the beginning. BR. Lune Le 19 juil. 2016 20:09, "Stromas, Aaron" a écrit : > I should have checked the logs before posting – I had an error in content. > > Best regards, > >

Re: Question about Ranger REST URL with service-name component

2016-07-20 Thread Lune Silver
I don't know if this is your problem, but there is an error in the rest api documentation concerning for example the way to get of a policy thanks to the service-name and policy-name. The error is a missing level in the api arborescence. In the documentation, you can see this : /public/v2/api/

Re: Question about Ranger REST URL with service-name component

2016-07-19 Thread Don Bosco Durai
Aaron, are you still having this issues? Your previous mail said that you found errors in the log file. Thanks Bosco From: "Stromas, Aaron" Reply-To: Date: Tuesday, July 19, 2016 at 1:17 PM To:

Re: Cannot create policy, getting 404

2016-07-19 Thread Stromas, Aaron
I should have checked the logs before posting – I had an error in content. Best regards, -Aaron — Aaron Stromas | RSA The Security Division of EMC | Practice Consultant | Identity & Fraud Protection Practice | M +1 240 271 64 58 | From: Corporate User

Re: Custom truststore for ranger admin

2016-06-24 Thread Sailaja Polavarapu
11:17 AM To: "user@ranger.incubator.apache.org<mailto:user@ranger.incubator.apache.org>" <user@ranger.incubator.apache.org<mailto:user@ranger.incubator.apache.org>> Subject: Re: Custom truststore for ranger admin Ok, got it. You are using 2 way SSL. In RangerAdmin, you can sour

Re: Custom truststore for ranger admin

2016-06-24 Thread Don Bosco Durai
2016 at 10:51 AM To: <user@ranger.incubator.apache.org> Subject: Re: Custom truststore for ranger admin Yeah when ssl is set to "want", you need to get the certificate of the plugin and to add it to the truststore of the admin. Le 24 juin 2016 19:47, "Don Bosco Durai"

Re: Frequency of synchronization for usersync cannot be less than one hour

2016-06-24 Thread Lune Silver
Ah ah. It make sense :-). Ty for your answer ! BR. Lune Le 24 juin 2016 20:04, "Deepak Sharma" a écrit : > Dear Lune, > > > for LDAP/AD sync time is 1 hr. default , it does not matter what is set in > sleeptimeinmillisbetweensynccycl​e. This is to avoid making call

Re: Custom truststore for ranger admin

2016-06-24 Thread Lune Silver
Yeah when ssl is set to "want", you need to get the certificate of the plugin and to add it to the truststore of the admin. Le 24 juin 2016 19:47, "Don Bosco Durai" a écrit : > Just curious, since plugins are initiating the request, do you need > anything on the admin side? > >

Re: Custom truststore for ranger admin

2016-06-24 Thread Don Bosco Durai
Just curious, since plugins are initiating the request, do you need anything on the admin side? Thanks Bosco From: Lune Silver Reply-To: Date: Friday, June 24, 2016 at 10:45 AM To: Subject:

Re: Existing Solr Cloud + Ranger Audit

2016-06-22 Thread Don Bosco Durai
e: Wednesday, June 22, 2016 at 2:58 AM To: "user@ranger.incubator.apache.org" <user@ranger.incubator.apache.org> Subject: RE: Existing Solr Cloud + Ranger Audit Thanks – although I’ve read that plugins won’t be able to audit to a kerberised solr until we get Ranger 0.6.0? Chee

RE: Existing Solr Cloud + Ranger Audit

2016-06-22 Thread Ellis, Tom (Financial Markets IT)
ydsbankinggroup-cr.com/downloads> From: Don Bosco Durai [mailto:bo...@apache.org] Sent: 22 June 2016 08:03 To: user@ranger.incubator.apache.org Subject: Re: Existing Solr Cloud + Ranger Audit -- This email has reached the Bank via an external source -- Yes, you could. https://cwiki.apa

Re: Existing Solr Cloud + Ranger Audit

2016-06-22 Thread Don Bosco Durai
Yes, you could. https://cwiki.apache.org/confluence/display/RANGER/Install+and+Configure+Solr+for+Ranger+Audits+-+Apache+Ranger+0.5#InstallandConfigureSolrforRangerAudits-ApacheRanger0.5-SelfInstall Bosco From: "Ellis, Tom (Financial Markets IT)" Reply-To:

Re: Ranger question

2016-06-20 Thread Hafiz Mujadid
Hi, You need to set username and password in your http request. You can modify following code to do so DefaultHttpClient httpclient = new DefaultHttpClient()HttpGet httpget = new HttpGet(url) httpget.setHeader("Content-Type", "application/json")httpget.setHeader("Accept",

  1   2   3   4   5   >