Ravi, you can also look into this blog from Balaji. https://hortonworks.com/blog/best-practices-in-hdfs-authorization-with-apache-ranger/
Bosco From: ravi teja <raviort...@gmail.com> Reply-To: <user@ranger.incubator.apache.org> Date: Tuesday, August 2, 2016 at 11:30 PM To: <user@ranger.incubator.apache.org>, Sreeni <ksraju...@yahoo.com> Subject: Re: Ranger auth vs HDFS auth Thanks for the clarification Sreeni. Ravi On Tue, Aug 2, 2016 at 7:40 PM, Sreeni <ksraju...@yahoo.com> wrote: See inline updates. Sreeni +1 951 977 3364 On Tuesday, August 2, 2016 9:04 AM, ravi teja <raviort...@gmail.com> wrote: Hi, We are evaluating Ranger for authorization over our existing hadoop cluster. Had some doubts: I wonder , is ranger auth a substitute of HDFS authorization (FSPermissionChecker) or a layer above it? - Layer above. If the hdfs and ranger rules are conflicting, eg: ranger allows but hdfs denies, which rule will be used? - Ranger rules imposed. Does Ranger work with NN federation? - Yes I was going through many articles but was unable to get these answers, it would be great if someone can help me here. Thanks in advance, Ravi
