Thanks. Can you point out configuration or documentation where this is
more detailed described?
Br
Margus (margusja) Roo
http://margus.roo.ee
skype: margusja
+372 51 48 780
On 17/12/15 21:33, Don Bosco Durai wrote:
Also, don’t forget to change your umask to 077 or 007.
This email thread as lot of context:
https://www.mail-archive.com/[email protected]/msg00719.html
Bosco
From: Margus Roo <[email protected] <mailto:[email protected]>>
Reply-To: <[email protected]
<mailto:[email protected]>>
Date: Thursday, December 17, 2015 at 5:12 AM
To: <[email protected]
<mailto:[email protected]>>
Subject: Re: HDFS-plugin does nothing
Tnx - clear
Margus (margusja) Roo
http://margus.roo.ee
skype: margusja
+372 51 48 780
On 17/12/15 15:07, Selvamohan Neethiraj wrote:
Please do NOT change permission to 000 for all files. You should
do it only to your own application folders and/or well-known folders.
Thanks,
Selva-
On Dec 17, 2015, at 7:56 AM, Margus Roo <[email protected]> wrote:
Found solution. Basically helped hdfs dfs -chmod -R 000
/user/margusja and now Ranger took over.
So how to disable Hadoop HDFS built in authorization? Or I have
to chmod -R 000 / ?
Margus (margusja) Roo
http://margus.roo.ee
skype: margusja
+372 51 48 780
On 17/12/15 14:30, Margus Roo wrote:
Hi thanks for answer.
At the moment margusja is in group margusja
[margusja@hadoopnn2 ~]$ id margusja
uid=1016(margusja) gid=1016(margusja) groups=1016(margusja)
Margus (margusja) Roo
http://margus.roo.ee
skype: margusja
+372 51 48 780
On 17/12/15 14:25, lukas nalezenec wrote:
Hi,
I solved this problem last week. I am also using SIMPLE auth.
If you are solving the same problem then after removing user
margusja from group hdfs it should work.
Lukas
2015-12-17 13:20 GMT+01:00 Margus Roo <[email protected]
<mailto:[email protected]>>:
Hi
I am new Ranger user and perhaps I did something wrong.
Installed Ranger via Ambari. I can log into Ranger UI and
all Unix local users are synced and there is configuration
under HDFS resource and test connection gives OK.
I can see loads of hdfs@... records with 200 under audit
plugins tab.
Now I am a little confused.
I can still do all operations with HDFS. Like there is no
ranger hdfs plugin activated.
in namenode I see:
authorize.ServiceAuthorizationManager
(ServiceAuthorizationManager.java:authorize(135)) -
Authorization successful for margusja (auth:SIMPLE) for
protocol=interface
org.apache.hadoop.hdfs.protocol.ClientProtocol
But I do not have any rules for margusja in Ranger.
What I expect is that user margusja will get permission
denied.
I use hdfs simple auth not kerberos. Is is possible use
ranger authorization without kerberos?
--
Margus (margusja) Roo
http://margus.roo.ee <http://margus.roo.ee/>
skype: margusja
+372 51 48 780 <tel:%2B372%2051%2048%20780>
