You are viewing a plain text version of this content. The canonical link for it is here.
Posted to notifications@kyuubi.apache.org by GitBox <gi...@apache.org> on 2022/11/21 10:10:48 UTC
[GitHub] [incubator-kyuubi] lordk911 opened a new issue, #3827: [DOCS] ranger-spark-audit-xml
lordk911 opened a new issue, #3827:
URL: https://github.com/apache/incubator-kyuubi/issues/3827
### Code of Conduct
- [X] I agree to follow this project's [Code of Conduct](https://www.apache.org/foundation/policies/conduct)
### Search before asking
- [X] I have searched in the [issues](https://github.com/apache/incubator-kyuubi/issues?q=is%3Aissue) and found no similar issues.
### Which parts of the documentation do you think need improvement?
_No response_
### Affects Version(s)
master
### Improving the documentation
the example of ranger-spark-audit.xml in document:
https://kyuubi.readthedocs.io/en/latest/security/authorization/spark/install.html#ranger-spark-audit-xml
as ranger document says : [Audit to DB will not be available from 0.6 version](https://cwiki.apache.org/confluence/display/RANGER/Audit+to+DataBase).
so config property about xasecure.audit.destination.db* maybe could remove from kyuubi's document
### Anything else
_No response_
### Are you willing to submit PR?
- [ ] Yes. I can submit a PR independently to improve.
- [ ] Yes. I would be willing to submit a PR with guidance from the Kyuubi community to improve.
- [ ] No. I cannot submit a PR at this time.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@kyuubi.apache.org.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@kyuubi.apache.org
For additional commands, e-mail: notifications-help@kyuubi.apache.org
[GitHub] [incubator-kyuubi] lordk911 commented on issue #3827: [DOCS] ranger-spark-audit-xml
Posted by GitBox <gi...@apache.org>.
lordk911 commented on issue #3827:
URL: https://github.com/apache/incubator-kyuubi/issues/3827#issuecomment-1333511149
Actually, audit log is not necessary for authz and have no affect of authz behavior, but it's a part of security. If user quite familiar with ranger and care about audit he/she will check ranger document by one self.
We can just leave a annotation, authz's audit log ability is powered by ranger.
Diffrent version of ranger have diffrent audit destination.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@kyuubi.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@kyuubi.apache.org
For additional commands, e-mail: notifications-help@kyuubi.apache.org
[GitHub] [incubator-kyuubi] pan3793 commented on issue #3827: [DOCS] ranger-spark-audit-xml
Posted by GitBox <gi...@apache.org>.
pan3793 commented on issue #3827:
URL: https://github.com/apache/incubator-kyuubi/issues/3827#issuecomment-1321911199
Sounds reasonable, cc @bowenliang123
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@kyuubi.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@kyuubi.apache.org
For additional commands, e-mail: notifications-help@kyuubi.apache.org
[GitHub] [incubator-kyuubi] bowenliang123 commented on issue #3827: [DOCS] ranger-spark-audit-xml
Posted by GitBox <gi...@apache.org>.
bowenliang123 commented on issue #3827:
URL: https://github.com/apache/incubator-kyuubi/issues/3827#issuecomment-1324417190
Yes, it seems audit to DB no longer supported.
Could you submit a PR to fix this by updating relevant configs to other audit destination source type referring to the config template of Ranger? <https://github.com/apache/ranger/blob/release-ranger-2.3.0/security-admin/scripts/ranger-admin-site-template.xml#L155>
@lordk911
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@kyuubi.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@kyuubi.apache.org
For additional commands, e-mail: notifications-help@kyuubi.apache.org