You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@ambari.apache.org by mu...@apache.org on 2017/07/06 04:24:17 UTC
[16/17] ambari git commit: AMBARI-21058 HDP 3.0 - Changing common
service version for Ranger & Ranger Kms (mugdha)
http://git-wip-us.apache.org/repos/asf/ambari/blob/3dc51b0c/ambari-server/src/main/resources/common-services/RANGER/0.7.0.3.0/configuration/ranger-tagsync-site.xml
----------------------------------------------------------------------
diff --git a/ambari-server/src/main/resources/common-services/RANGER/0.7.0.3.0/configuration/ranger-tagsync-site.xml b/ambari-server/src/main/resources/common-services/RANGER/0.7.0.3.0/configuration/ranger-tagsync-site.xml
deleted file mode 100644
index 5e60c06..0000000
--- a/ambari-server/src/main/resources/common-services/RANGER/0.7.0.3.0/configuration/ranger-tagsync-site.xml
+++ /dev/null
@@ -1,206 +0,0 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<!--
-/**
- * Licensed to the Apache Software Foundation (ASF) under one
- * or more contributor license agreements. See the NOTICE file
- * distributed with this work for additional information
- * regarding copyright ownership. The ASF licenses this file
- * to you under the Apache License, Version 2.0 (the
- * "License"); you may not use this file except in compliance
- * with the License. You may obtain a copy of the License at
- *
- * http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an "AS IS" BASIS,
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * See the License for the specific language governing permissions and
- * limitations under the License.
- */
--->
-<configuration supports_final="true">
- <property>
- <name>ranger.tagsync.logdir</name>
- <value>/var/log/ranger/tagsync</value>
- <description>Ranger Log dir</description>
- <value-attributes>
- <type>directory</type>
- <overridable>false</overridable>
- <editable-only-at-install>true</editable-only-at-install>
- </value-attributes>
- <on-ambari-upgrade add="false"/>
- </property>
- <property>
- <name>ranger.tagsync.dest.ranger.endpoint</name>
- <value>{{ranger_external_url}}</value>
- <description>Ranger TagAdmin REST URL</description>
- <value-attributes>
- <empty-value-valid>true</empty-value-valid>
- </value-attributes>
- <on-ambari-upgrade add="false"/>
- </property>
- <property>
- <name>ranger.tagsync.source.atlas</name>
- <display-name>Enable Atlas Tag Source</display-name>
- <value>false</value>
- <description/>
- <value-attributes>
- <type>boolean</type>
- </value-attributes>
- <depends-on>
- <property>
- <type>application-properties</type>
- <name>atlas.server.bind.address</name>
- </property>
- </depends-on>
- <on-ambari-upgrade add="false"/>
- </property>
- <property>
- <name>ranger.tagsync.source.atlasrest</name>
- <display-name>Enable AtlasRest Tag Source</display-name>
- <value>false</value>
- <description/>
- <value-attributes>
- <type>boolean</type>
- </value-attributes>
- <on-ambari-upgrade add="false"/>
- </property>
- <property>
- <name>ranger.tagsync.source.file</name>
- <display-name>Enable File Tag Source</display-name>
- <value>false</value>
- <description/>
- <value-attributes>
- <type>boolean</type>
- </value-attributes>
- <on-ambari-upgrade add="false"/>
- </property>
- <property>
- <name>ranger.tagsync.source.file.check.interval.millis</name>
- <display-name>File Source: File update polling interval</display-name>
- <value/>
- <description/>
- <value-attributes>
- <empty-value-valid>true</empty-value-valid>
- </value-attributes>
- <on-ambari-upgrade add="false"/>
- </property>
- <property>
- <name>ranger.tagsync.source.atlasrest.download.interval.millis</name>
- <display-name>AtlasREST Source: Atlas source download interval</display-name>
- <value>60000</value>
- <value-attributes>
- <empty-value-valid>true</empty-value-valid>
- </value-attributes>
- <on-ambari-upgrade add="false"/>
- </property>
-
- <property>
- <name>ranger.tagsync.source.file.filename</name>
- <display-name>File Source: Filename</display-name>
- <value/>
- <description>File Source Filename</description>
- <value-attributes>
- <empty-value-valid>true</empty-value-valid>
- </value-attributes>
- <on-ambari-upgrade add="false"/>
- </property>
-
- <property>
- <name>ranger.tagsync.source.atlasrest.endpoint</name>
- <display-name>AtlasREST Source: Atlas endpoint</display-name>
- <value/>
- <description/>
- <value-attributes>
- <empty-value-valid>true</empty-value-valid>
- </value-attributes>
- <on-ambari-upgrade add="false"/>
- <depends-on>
- <property>
- <type>application-properties</type>
- <name>atlas.server.http.port</name>
- </property>
- <property>
- <type>application-properties</type>
- <name>atlas.server.https.port</name>
- </property>
- <property>
- <type>application-properties</type>
- <name>atlas.enableTLS</name>
- </property>
- </depends-on>
- </property>
- <property>
- <name>ranger.tagsync.kerberos.principal</name>
- <value/>
- <description/>
- <property-type>KERBEROS_PRINCIPAL</property-type>
- <value-attributes>
- <empty-value-valid>true</empty-value-valid>
- </value-attributes>
- <on-ambari-upgrade add="false"/>
- </property>
- <property>
- <name>ranger.tagsync.kerberos.keytab</name>
- <value/>
- <description/>
- <value-attributes>
- <empty-value-valid>true</empty-value-valid>
- </value-attributes>
- <on-ambari-upgrade add="false"/>
- </property>
- <property>
- <name>ranger.tagsync.dest.ranger.username</name>
- <value>rangertagsync</value>
- <description/>
- <on-ambari-upgrade add="false"/>
- </property>
-
- <property>
- <name>ranger.tagsync.source.atlasrest.username</name>
- <value>admin</value>
- <description/>
- <on-ambari-upgrade add="false"/>
- </property>
-
- <property>
- <name>ranger.tagsync.atlas.default.cluster.name</name>
- <value>{{cluster_name}}</value>
- <description>Capture cluster name</description>
- <value-attributes>
- <empty-value-valid>true</empty-value-valid>
- </value-attributes>
- <on-ambari-upgrade add="false"/>
- </property>
-
- <property>
- <name>ranger.tagsync.keystore.filename</name>
- <value>/usr/hdp/current/ranger-tagsync/conf/rangertagsync.jceks</value>
- <description>Keystore file</description>
- <value-attributes>
- <empty-value-valid>true</empty-value-valid>
- </value-attributes>
- <on-ambari-upgrade add="false"/>
- </property>
- <property>
- <name>ranger.tagsync.source.atlasrest.keystore.filename</name>
- <value>/usr/hdp/current/ranger-tagsync/conf/atlasuser.jceks</value>
- <description>Tagsync atlasrest keystore file</description>
- <value-attributes>
- <empty-value-valid>true</empty-value-valid>
- </value-attributes>
- <on-ambari-upgrade add="false"/>
- </property>
- <property>
- <name>ranger.tagsync.dest.ranger.ssl.config.filename</name>
- <value>{{stack_root}}/current/ranger-tagsync/conf/ranger-policymgr-ssl.xml</value>
- <description>Keystore and truststore information used for tagsync, required if tagsync -> ranger admin communication is SSL enabled</description>
- <on-ambari-upgrade add="false"/>
- </property>
- <property>
- <name>ranger.tagsync.source.atlasrest.ssl.config.filename</name>
- <value>{{stack_root}}/current/ranger-tagsync/conf/atlas-tagsync-ssl.xml</value>
- <description>Keystore and truststore information used for tagsync, required if tagsync to atlas communication is SSL enabled</description>
- <on-ambari-upgrade add="false"/>
- </property>
-</configuration>
http://git-wip-us.apache.org/repos/asf/ambari/blob/3dc51b0c/ambari-server/src/main/resources/common-services/RANGER/0.7.0.3.0/configuration/ranger-ugsync-site.xml
----------------------------------------------------------------------
diff --git a/ambari-server/src/main/resources/common-services/RANGER/0.7.0.3.0/configuration/ranger-ugsync-site.xml b/ambari-server/src/main/resources/common-services/RANGER/0.7.0.3.0/configuration/ranger-ugsync-site.xml
deleted file mode 100644
index 922fbd8..0000000
--- a/ambari-server/src/main/resources/common-services/RANGER/0.7.0.3.0/configuration/ranger-ugsync-site.xml
+++ /dev/null
@@ -1,577 +0,0 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<!--
- Licensed to the Apache Software Foundation (ASF) under one or more
- contributor license agreements. See the NOTICE file distributed with
- this work for additional information regarding copyright ownership.
- The ASF licenses this file to You under the Apache License, Version 2.0
- (the "License"); you may not use this file except in compliance with
- the License. You may obtain a copy of the License at
-
- http://www.apache.org/licenses/LICENSE-2.0
-
- Unless required by applicable law or agreed to in writing, software
- distributed under the License is distributed on an "AS IS" BASIS,
- WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- See the License for the specific language governing permissions and
- limitations under the License.
--->
-<configuration supports_final="true">
- <property>
- <name>ranger.usersync.port</name>
- <value>5151</value>
- <description>Port for unix authentication service, run within usersync</description>
- <on-ambari-upgrade add="false"/>
- </property>
- <property>
- <name>ranger.usersync.ssl</name>
- <value>true</value>
- <description>SSL enabled? (ranger admin -> usersync communication)</description>
- <on-ambari-upgrade add="false"/>
- </property>
-
- <property>
- <name>ranger.usersync.keystore.password</name>
- <value>UnIx529p</value>
- <property-type>PASSWORD</property-type>
- <description>Keystore password</description>
- <value-attributes>
- <type>password</type>
- </value-attributes>
- <on-ambari-upgrade add="false"/>
- </property>
-
- <property>
- <name>ranger.usersync.truststore.password</name>
- <value>changeit</value>
- <property-type>PASSWORD</property-type>
- <description>Truststore password</description>
- <value-attributes>
- <type>password</type>
- </value-attributes>
- <on-ambari-upgrade add="false"/>
- </property>
- <property>
- <name>ranger.usersync.passwordvalidator.path</name>
- <value>./native/credValidator.uexe</value>
- <description>Native program for password validation</description>
- <on-ambari-upgrade add="false"/>
- </property>
- <property>
- <name>ranger.usersync.enabled</name>
- <display-name>Enable User Sync</display-name>
- <value>true</value>
- <description>Should users and groups be synchronized to Ranger Database? Required to setup Ranger policies</description>
- <value-attributes>
- <empty-value-valid>true</empty-value-valid>
- <type>value-list</type>
- <overridable>false</overridable>
- <entries>
- <entry>
- <value>true</value>
- <label>Yes</label>
- </entry>
- <entry>
- <value>false</value>
- <label>No</label>
- </entry>
- </entries>
- <selection-cardinality>1</selection-cardinality>
- </value-attributes>
- <on-ambari-upgrade add="false"/>
- </property>
- <property>
- <name>ranger.usersync.sink.impl.class</name>
- <value>org.apache.ranger.unixusersync.process.PolicyMgrUserGroupBuilder</value>
- <description>Class to be used as sink (to sync users into ranger admin)</description>
- <on-ambari-upgrade add="false"/>
- </property>
- <property>
- <name>ranger.usersync.policymanager.baseURL</name>
- <value>{{ranger_external_url}}</value>
- <description>URL to be used by clients to access ranger admin, use FQDN</description>
- <on-ambari-upgrade add="false"/>
- </property>
- <property>
- <name>ranger.usersync.policymanager.maxrecordsperapicall</name>
- <value>1000</value>
- <description>How many records to be returned per API call</description>
- <on-ambari-upgrade add="false"/>
- </property>
- <property>
- <name>ranger.usersync.policymanager.mockrun</name>
- <value>false</value>
- <description>Is user sync doing mock run?</description>
- <on-ambari-upgrade add="false"/>
- </property>
- <property>
- <name>ranger.usersync.unix.minUserId</name>
- <display-name>Minimum User ID</display-name>
- <value>500</value>
- <description>Only sync users above this user id (applicable for UNIX)</description>
- <on-ambari-upgrade add="false"/>
- </property>
- <property>
- <name>ranger.usersync.unix.group.file</name>
- <display-name>Group File</display-name>
- <value>/etc/group</value>
- <description>Location of the groups file on the linux server</description>
- <on-ambari-upgrade add="false"/>
- </property>
- <property>
- <name>ranger.usersync.unix.password.file</name>
- <display-name>Password File</display-name>
- <value>/etc/passwd</value>
- <description>Location of the password file on the linux server</description>
- <on-ambari-upgrade add="false"/>
- </property>
- <property>
- <name>ranger.usersync.sleeptimeinmillisbetweensynccycle</name>
- <value>60000</value>
- <description>Sleeptime interval in milliseconds, if < 6000 then default to 1 min</description>
- <on-ambari-upgrade add="false"/>
- </property>
- <property>
- <name>ranger.usersync.source.impl.class</name>
- <value>org.apache.ranger.unixusersync.process.UnixUserGroupBuilder</value>
- <display-name>Sync Source</display-name>
- <description>For Ldap: org.apache.ranger.ldapusersync.process.LdapUserGroupBuilder, For Unix: org.apache.ranger.unixusersync.process.UnixUserGroupBuilder, org.apache.ranger.unixusersync.process.FileSourceUserGroupBuilder</description>
- <value-attributes>
- <type>value-list</type>
- <empty-value-valid>true</empty-value-valid>
- <overridable>false</overridable>
- <entries>
- <entry>
- <value>org.apache.ranger.unixusersync.process.UnixUserGroupBuilder</value>
- <label>UNIX</label>
- </entry>
- <entry>
- <value>org.apache.ranger.unixusersync.process.FileSourceUserGroupBuilder</value>
- <label>FILE</label>
- </entry>
- <entry>
- <value>org.apache.ranger.ldapusersync.process.LdapUserGroupBuilder</value>
- <label>LDAP/AD</label>
- </entry>
- </entries>
- <selection-cardinality>1</selection-cardinality>
- </value-attributes>
- <on-ambari-upgrade add="false"/>
- </property>
- <property>
- <name>ranger.usersync.filesource.file</name>
- <display-name>File Name</display-name>
- <value>/tmp/usergroup.txt</value>
- <description>Path to the file with the users and groups information. Example: /tmp/usergroup.json or /tmp/usergroup.csv or /tmp/usergroup.txt</description>
- <on-ambari-upgrade add="false"/>
- </property>
- <property>
- <name>ranger.usersync.filesource.text.delimiter</name>
- <display-name>Delimiter</display-name>
- <value>,</value>
- <description>Delimiter used in file, if File based user sync is used</description>
- <on-ambari-upgrade add="false"/>
- </property>
- <property>
- <name>ranger.usersync.ldap.url</name>
- <display-name>LDAP/AD URL</display-name>
- <value/>
- <description>LDAP server URL. Example: value = ldap://localhost:389 or ldaps//localhost:636</description>
- <on-ambari-upgrade add="false"/>
- </property>
- <property>
- <name>ranger.usersync.ldap.binddn</name>
- <display-name>Bind User</display-name>
- <value/>
- <description>Full distinguished name (DN), including common name (CN), of an LDAP user account that has privileges to search for users. This user is used for searching the users. This could be read-only LDAP user. Example: cn=admin,dc=example,dc=com</description>
- <on-ambari-upgrade add="false"/>
- </property>
- <property>
- <name>ranger.usersync.ldap.ldapbindpassword</name>
- <display-name>Bind User Password</display-name>
- <value/>
- <property-type>PASSWORD</property-type>
- <description>Password for the LDAP bind user used for searching users.</description>
- <value-attributes>
- <type>password</type>
- </value-attributes>
- <on-ambari-upgrade add="false"/>
- </property>
- <property>
- <name>ranger.usersync.ldap.bindalias</name>
- <value>testldapalias</value>
- <description>Set as ranger.usersync.ldap.bindalias (string as is)</description>
- <on-ambari-upgrade add="false"/>
- </property>
-
- <property>
- <name>ranger.usersync.ldap.searchBase</name>
- <value>dc=hadoop,dc=apache,dc=org</value>
- <description>"# search base for users and groups
-# sample value would be dc=hadoop,dc=apache,dc=org
-# From Ranger Release 0.6.0 multiple Ous can be configured with ; (semicolon) separated"</description>
- <value-attributes>
- <empty-value-valid>true</empty-value-valid>
- </value-attributes>
- <on-ambari-upgrade add="false"/>
- </property>
- <property>
- <name>ranger.usersync.ldap.user.searchbase</name>
- <display-name>User Search Base</display-name>
- <value/>
- <description>"# search base for users
-# sample value would be ou=users,dc=hadoop,dc=apache,dc=org
-# overrides value specified in ranger.usersync.ldap.searchBase
-# From Ranger Release 0.6.0 multiple Ous can be configured with ; (semicolon) separated eg: cn=users,dc=example,dc=com;ou=example1,ou=example2"</description>
- <on-ambari-upgrade add="false"/>
- </property>
- <property>
- <name>ranger.usersync.ldap.user.searchscope</name>
- <display-name>User Search Scope</display-name>
- <value>sub</value>
- <description>"# search scope for the users, only base, one and sub are supported values
-# please customize the value to suit your deployment
-# default value: sub"</description>
- <on-ambari-upgrade add="false"/>
- </property>
- <property>
- <name>ranger.usersync.ldap.user.objectclass</name>
- <display-name>User Object Class</display-name>
- <value>person</value>
- <description>LDAP User Object Class. Example: person or user</description>
- <on-ambari-upgrade add="false"/>
- </property>
- <property>
- <name>ranger.usersync.ldap.user.searchfilter</name>
- <display-name>User Search Filter</display-name>
- <value/>
- <description>"optional additional filter constraining the users selected for syncing
-# a sample value would be (dept=eng)
-# please customize the value to suit your deployment
-# default value is empty"</description>
- <value-attributes>
- <empty-value-valid>true</empty-value-valid>
- </value-attributes>
- <on-ambari-upgrade add="false"/>
- </property>
- <property>
- <name>ranger.usersync.ldap.user.nameattribute</name>
- <display-name>Username Attribute</display-name>
- <value/>
- <description>LDAP user name attribute. Example: sAMAccountName in AD, uid or cn in OpenLDAP</description>
- <on-ambari-upgrade add="true"/>
- </property>
- <property>
- <name>ranger.usersync.ldap.referral</name>
- <value>ignore</value>
- <description>Set to follow if multiple LDAP servers are configured to return continuation references for results. Set to ignore (default) if no referrals should be followed</description>
- <value-attributes>
- <empty-value-valid>true</empty-value-valid>
- </value-attributes>
- <on-ambari-upgrade add="false"/>
- </property>
- <property>
- <name>ranger.usersync.ldap.user.groupnameattribute</name>
- <display-name>User Group Name Attribute</display-name>
- <value>memberof, ismemberof</value>
- <description>LDAP user group name attribute. Generally it is the same as username attribute. Example: sAMAccountName in AD, uid or cn in OpenLDAP</description>
- <on-ambari-upgrade add="false"/>
- </property>
- <property>
- <name>ranger.usersync.ldap.username.caseconversion</name>
- <value>none</value>
- <description>User name case conversion</description>
- <on-ambari-upgrade add="false"/>
- </property>
- <property>
- <name>ranger.usersync.ldap.groupname.caseconversion</name>
- <value>none</value>
- <description>Group name case conversion</description>
- <on-ambari-upgrade add="false"/>
- </property>
- <property>
- <name>ranger.usersync.logdir</name>
- <value>{{usersync_log_dir}}</value>
- <description>User sync log directory</description>
- <value-attributes>
- <visible>false</visible>
- <overridable>false</overridable>
- </value-attributes>
- <on-ambari-upgrade add="false"/>
- </property>
-
- <property>
- <name>ranger.usersync.group.usermapsyncenabled</name>
- <value>true</value>
- <display-name>Group User Map Sync</display-name>
- <description>Sync specific groups for users?</description>
- <value-attributes>
- <empty-value-valid>true</empty-value-valid>
- <type>value-list</type>
- <overridable>false</overridable>
- <entries>
- <entry>
- <value>true</value>
- <label>Yes</label>
- </entry>
- <entry>
- <value>false</value>
- <label>No</label>
- </entry>
- </entries>
- <selection-cardinality>1</selection-cardinality>
- </value-attributes>
- <on-ambari-upgrade add="false"/>
- </property>
- <property>
- <name>ranger.usersync.group.searchbase</name>
- <display-name>Group Search Base</display-name>
- <value/>
- <description>"# search base for groups
-# sample value would be ou=groups,dc=hadoop,dc=apache,dc=org
-# overrides value specified in ranger.usersync.ldap.searchBase, ranger.usersync.ldap.user.searchbase
-# if a value is not specified, takes the value of ranger.usersync.ldap.searchBase
-# if ranger.usersync.ldap.searchBase is also not specified, takes the value of ranger.usersync.ldap.user.searchbase"
-# From Ranger Release 0.6.0 multiple Ous can be configured with ; (semicolon) separated eg: ou=groups,DC=example,DC=com;ou=group1,ou=group2"
-</description>
- <on-ambari-upgrade add="false"/>
- </property>
- <property>
- <name>ranger.usersync.group.searchscope</name>
- <value/>
- <description>"# search scope for the groups, only base, one and sub are supported values
-# please customize the value to suit your deployment
-# default value: sub"</description>
- <value-attributes>
- <empty-value-valid>true</empty-value-valid>
- </value-attributes>
- <on-ambari-upgrade add="false"/>
- </property>
- <property>
- <name>ranger.usersync.group.objectclass</name>
- <display-name>Group Object Class</display-name>
- <value/>
- <description>LDAP Group object class. Example: group</description>
- <on-ambari-upgrade add="true"/>
- </property>
- <property>
- <name>ranger.usersync.group.searchfilter</name>
- <value/>
- <display-name>Group Search Filter</display-name>
- <description>"# optional additional filter constraining the groups selected for syncing
-# a sample value would be (dept=eng)
-# please customize the value to suit your deployment
-# default value is empty"</description>
- <value-attributes>
- <empty-value-valid>true</empty-value-valid>
- </value-attributes>
- <on-ambari-upgrade add="false"/>
- </property>
- <property>
- <name>ranger.usersync.group.nameattribute</name>
- <display-name>Group Name Attribute</display-name>
- <value/>
- <description>LDAP group name attribute. Example: cn</description>
- <on-ambari-upgrade add="false"/>
- </property>
- <property>
- <name>ranger.usersync.group.memberattributename</name>
- <display-name>Group Member Attribute</display-name>
- <value/>
- <description>LDAP group member attribute name. Example: member</description>
- <on-ambari-upgrade add="false"/>
- </property>
- <property>
- <name>ranger.usersync.pagedresultsenabled</name>
- <value>true</value>
- <description>Results can be paged?</description>
- <value-attributes>
- <empty-value-valid>true</empty-value-valid>
- <type>value-list</type>
- <overridable>false</overridable>
- <entries>
- <entry>
- <value>true</value>
- <label>Yes</label>
- </entry>
- <entry>
- <value>false</value>
- <label>No</label>
- </entry>
- </entries>
- <selection-cardinality>1</selection-cardinality>
- </value-attributes>
- <on-ambari-upgrade add="false"/>
- </property>
- <property>
- <name>ranger.usersync.pagedresultssize</name>
- <value>500</value>
- <description>Page size</description>
- <on-ambari-upgrade add="false"/>
- </property>
-
- <property>
- <name>ranger.usersync.kerberos.principal</name>
- <value/>
- <description/>
- <property-type>KERBEROS_PRINCIPAL</property-type>
- <value-attributes>
- <empty-value-valid>true</empty-value-valid>
- </value-attributes>
- <on-ambari-upgrade add="false"/>
- </property>
- <property>
- <name>ranger.usersync.kerberos.keytab</name>
- <value/>
- <description/>
- <value-attributes>
- <empty-value-valid>true</empty-value-valid>
- </value-attributes>
- <on-ambari-upgrade add="false"/>
- </property>
- <property>
- <name>ranger.usersync.policymgr.username</name>
- <value>rangerusersync</value>
- <description/>
- <on-ambari-upgrade add="false"/>
- </property>
- <property>
- <name>ranger.usersync.policymgr.alias</name>
- <value>ranger.usersync.policymgr.password</value>
- <description/>
- <on-ambari-upgrade add="false"/>
- </property>
-
- <property>
- <name>ranger.usersync.group.search.first.enabled</name>
- <display-name>Enable Group Search First</display-name>
- <value>false</value>
- <description/>
- <value-attributes>
- <type>value-list</type>
- <overridable>false</overridable>
- <entries>
- <entry>
- <value>true</value>
- <label>Yes</label>
- </entry>
- <entry>
- <value>false</value>
- <label>No</label>
- </entry>
- </entries>
- <selection-cardinality>1</selection-cardinality>
- </value-attributes>
- <on-ambari-upgrade add="false"/>
- </property>
- <property>
- <name>ranger.usersync.user.searchenabled</name>
- <display-name>Enable User Search</display-name>
- <value>false</value>
- <description/>
- <value-attributes>
- <type>value-list</type>
- <overridable>false</overridable>
- <entries>
- <entry>
- <value>true</value>
- <label>Yes</label>
- </entry>
- <entry>
- <value>false</value>
- <label>No</label>
- </entry>
- </entries>
- <selection-cardinality>1</selection-cardinality>
- </value-attributes>
- <on-ambari-upgrade add="false"/>
- </property>
- <property>
- <name>ranger.usersync.ldap.deltasync</name>
- <display-name>Incremental Sync</display-name>
- <value>true</value>
- <description>Enable Incremental Sync</description>
- <value-attributes>
- <type>value-list</type>
- <overridable>false</overridable>
- <entries>
- <entry>
- <value>true</value>
- <label>Yes</label>
- </entry>
- <entry>
- <value>false</value>
- <label>No</label>
- </entry>
- </entries>
- <selection-cardinality>1</selection-cardinality>
- <empty-value-valid>true</empty-value-valid>
- </value-attributes>
- <on-ambari-upgrade add="false"/>
- </property>
-
- <property>
- <name>ranger.usersync.group.searchenabled</name>
- <display-name>Enable Group Sync</display-name>
- <value>false</value>
- <description>"# do we want to do ldapsearch to find groups instead of relying on user entry attributes
- # valid values: true, false
- # any value other than true would be treated as false
- # default value: false"</description>
- <value-attributes>
- <empty-value-valid>true</empty-value-valid>
- <type>value-list</type>
- <overridable>false</overridable>
- <entries>
- <entry>
- <value>true</value>
- <label>Yes</label>
- </entry>
- <entry>
- <value>false</value>
- <label>No</label>
- </entry>
- </entries>
- <selection-cardinality>1</selection-cardinality>
- </value-attributes>
- <depends-on>
- <property>
- <type>ranger-ugsync-site</type>
- <name>ranger.usersync.ldap.deltasync</name>
- </property>
- </depends-on>
- <on-ambari-upgrade add="false"/>
- </property>
- <property>
- <name>ranger.usersync.keystore.file</name>
- <value>/usr/hdp/current/ranger-usersync/conf/unixauthservice.jks</value>
- <description>Keystore file used for usersync</description>
- <on-ambari-upgrade add="false"/>
- </property>
- <property>
- <name>ranger.usersync.truststore.file</name>
- <value>/usr/hdp/current/ranger-usersync/conf/mytruststore.jks</value>
- <description>Truststore used for usersync, required if usersync -> ranger admin communication is SSL enabled</description>
- <on-ambari-upgrade add="false"/>
- </property>
- <property>
- <name>ranger.usersync.ldap.bindkeystore</name>
- <value/>
- <description>Set same value as ranger.usersync.keystore.file property i.e default value /usr/hdp/current/ranger-usersync/conf/ugsync.jceks</description>
- <value-attributes>
- <empty-value-valid>true</empty-value-valid>
- </value-attributes>
- <on-ambari-upgrade add="false"/>
- </property>
- <property>
- <name>ranger.usersync.credstore.filename</name>
- <value>/usr/hdp/current/ranger-usersync/conf/ugsync.jceks</value>
- <description>Credential store file name for user sync, specify full path</description>
- <on-ambari-upgrade add="false"/>
- </property>
- <property>
- <name>ranger.usersync.policymgr.keystore</name>
- <value>/usr/hdp/current/ranger-usersync/conf/ugsync.jceks</value>
- <description/>
- <on-ambari-upgrade add="false"/>
- </property>
-</configuration>
http://git-wip-us.apache.org/repos/asf/ambari/blob/3dc51b0c/ambari-server/src/main/resources/common-services/RANGER/0.7.0.3.0/configuration/tagsync-application-properties.xml
----------------------------------------------------------------------
diff --git a/ambari-server/src/main/resources/common-services/RANGER/0.7.0.3.0/configuration/tagsync-application-properties.xml b/ambari-server/src/main/resources/common-services/RANGER/0.7.0.3.0/configuration/tagsync-application-properties.xml
deleted file mode 100644
index f616324..0000000
--- a/ambari-server/src/main/resources/common-services/RANGER/0.7.0.3.0/configuration/tagsync-application-properties.xml
+++ /dev/null
@@ -1,62 +0,0 @@
-<?xml version="1.0"?>
-<?xml-stylesheet type="text/xsl" href="configuration.xsl"?>
-<!--
-/**
- * Licensed to the Apache Software Foundation (ASF) under one
- * or more contributor license agreements. See the NOTICE file
- * distributed with this work for additional information
- * regarding copyright ownership. The ASF licenses this file
- * to you under the Apache License, Version 2.0 (the
- * "License"); you may not use this file except in compliance
- * with the License. You may obtain a copy of the License at
- *
- * http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an "AS IS" BASIS,
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * See the License for the specific language governing permissions and
- * limitations under the License.
- */
--->
-<configuration>
- <property>
- <name>atlas.kafka.entities.group.id</name>
- <display-name>Atlas Source: Kafka consumer group</display-name>
- <value>ranger_entities_consumer</value>
- <description/>
- <on-ambari-upgrade add="false"/>
- </property>
- <property>
- <name>atlas.kafka.bootstrap.servers</name>
- <display-name>Atlas Source: Kafka endpoint</display-name>
- <value>localhost:6667</value>
- <description/>
- <depends-on>
- <property>
- <type>kafka-broker</type>
- <name>port</name>
- </property>
- </depends-on>
- <value-attributes>
- <empty-value-valid>true</empty-value-valid>
- </value-attributes>
- <on-ambari-upgrade add="false"/>
- </property>
- <property>
- <name>atlas.kafka.zookeeper.connect</name>
- <display-name>Atlas Source: Zookeeper endpoint</display-name>
- <value>localhost:2181</value>
- <description/>
- <depends-on>
- <property>
- <type>zoo.cfg</type>
- <name>clientPort</name>
- </property>
- </depends-on>
- <value-attributes>
- <empty-value-valid>true</empty-value-valid>
- </value-attributes>
- <on-ambari-upgrade add="false"/>
- </property>
-</configuration>
http://git-wip-us.apache.org/repos/asf/ambari/blob/3dc51b0c/ambari-server/src/main/resources/common-services/RANGER/0.7.0.3.0/configuration/tagsync-log4j.xml
----------------------------------------------------------------------
diff --git a/ambari-server/src/main/resources/common-services/RANGER/0.7.0.3.0/configuration/tagsync-log4j.xml b/ambari-server/src/main/resources/common-services/RANGER/0.7.0.3.0/configuration/tagsync-log4j.xml
deleted file mode 100644
index 8ec85a0..0000000
--- a/ambari-server/src/main/resources/common-services/RANGER/0.7.0.3.0/configuration/tagsync-log4j.xml
+++ /dev/null
@@ -1,90 +0,0 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<!--
-/**
- * Licensed to the Apache Software Foundation (ASF) under one
- * or more contributor license agreements. See the NOTICE file
- * distributed with this work for additional information
- * regarding copyright ownership. The ASF licenses this file
- * to you under the Apache License, Version 2.0 (the
- * "License"); you may not use this file except in compliance
- * with the License. You may obtain a copy of the License at
- *
- * http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an "AS IS" BASIS,
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * See the License for the specific language governing permissions and
- * limitations under the License.
- */
--->
-<configuration supports_adding_forbidden="false">
- <property>
- <name>ranger_tagsync_log_maxfilesize</name>
- <value>256</value>
- <description>The maximum size of backup file before the log is rotated</description>
- <display-name>Ranger tagsync Log: backup file size</display-name>
- <value-attributes>
- <unit>MB</unit>
- </value-attributes>
- <on-ambari-upgrade add="false"/>
- </property>
- <property>
- <name>ranger_tagsync_log_number_of_backup_files</name>
- <value>20</value>
- <description>The number of backup files</description>
- <display-name>Ranger tagsync Log: # of backup files</display-name>
- <value-attributes>
- <type>int</type>
- <minimum>0</minimum>
- </value-attributes>
- <on-ambari-upgrade add="false"/>
- </property>
- <property>
- <name>content</name>
- <display-name>tagsync-log4j template</display-name>
- <description>tagsync-log4j.properties</description>
- <value>
-#
-# Licensed to the Apache Software Foundation (ASF) under one
-# or more contributor license agreements. See the NOTICE file
-# distributed with this work for additional information
-# regarding copyright ownership. The ASF licenses this file
-# to you under the Apache License, Version 2.0 (the
-# "License"); you may not use this file except in compliance
-# with the License. You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-#
-
-
-log4j.rootLogger = info,logFile
-
-# logFile
-log4j.appender.logFile=org.apache.log4j.DailyRollingFileAppender
-log4j.appender.logFile.file=${logdir}/tagsync.log
-log4j.appender.logFile.datePattern='.'yyyy-MM-dd
-log4j.appender.logFile.layout=org.apache.log4j.PatternLayout
-log4j.appender.logFile.MaxFileSize = {{ranger_tagsync_log_maxfilesize}}MB
-log4j.appender.logFile.MaxBackupIndex = {{ranger_tagsync_log_number_of_backup_files}}
-log4j.appender.logFile.layout.ConversionPattern=%d{dd MMM yyyy HH:mm:ss} %5p %c{1} [%t] - %L %m%n
-
-# console
-log4j.appender.console=org.apache.log4j.ConsoleAppender
-log4j.appender.console.Target=System.out
-log4j.appender.console.layout=org.apache.log4j.PatternLayout
-log4j.appender.console.layout.ConversionPattern=%d{dd MMM yyyy HH:mm:ss} %5p %c{1} [%t] - %L %m%n
- </value>
- <value-attributes>
- <type>content</type>
- <show-property-name>false</show-property-name>
- </value-attributes>
- <on-ambari-upgrade add="false"/>
- </property>
-</configuration>
http://git-wip-us.apache.org/repos/asf/ambari/blob/3dc51b0c/ambari-server/src/main/resources/common-services/RANGER/0.7.0.3.0/configuration/usersync-log4j.xml
----------------------------------------------------------------------
diff --git a/ambari-server/src/main/resources/common-services/RANGER/0.7.0.3.0/configuration/usersync-log4j.xml b/ambari-server/src/main/resources/common-services/RANGER/0.7.0.3.0/configuration/usersync-log4j.xml
deleted file mode 100644
index 6d91b6e..0000000
--- a/ambari-server/src/main/resources/common-services/RANGER/0.7.0.3.0/configuration/usersync-log4j.xml
+++ /dev/null
@@ -1,89 +0,0 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<!--
-/**
- * Licensed to the Apache Software Foundation (ASF) under one
- * or more contributor license agreements. See the NOTICE file
- * distributed with this work for additional information
- * regarding copyright ownership. The ASF licenses this file
- * to you under the Apache License, Version 2.0 (the
- * "License"); you may not use this file except in compliance
- * with the License. You may obtain a copy of the License at
- *
- * http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an "AS IS" BASIS,
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * See the License for the specific language governing permissions and
- * limitations under the License.
- */
--->
-<configuration supports_adding_forbidden="false">
- <property>
- <name>ranger_usersync_log_maxfilesize</name>
- <value>256</value>
- <description>The maximum size of backup file before the log is rotated</description>
- <display-name>Ranger usersync Log: backup file size</display-name>
- <value-attributes>
- <unit>MB</unit>
- </value-attributes>
- <on-ambari-upgrade add="false"/>
- </property>
- <property>
- <name>ranger_usersync_log_maxbackupindex</name>
- <value>20</value>
- <description>The number of backup files</description>
- <display-name>Ranger usersync Log: # of backup files</display-name>
- <value-attributes>
- <type>int</type>
- <minimum>0</minimum>
- </value-attributes>
- <on-ambari-upgrade add="false"/>
- </property>
- <property>
- <name>content</name>
- <display-name>usersync-log4j template</display-name>
- <description>usersync-log4j.properties</description>
- <value>
-#
-# Licensed to the Apache Software Foundation (ASF) under one
-# or more contributor license agreements. See the NOTICE file
-# distributed with this work for additional information
-# regarding copyright ownership. The ASF licenses this file
-# to you under the Apache License, Version 2.0 (the
-# "License"); you may not use this file except in compliance
-# with the License. You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-#
-
-log4j.rootLogger = info,logFile
-
-# logFile
-log4j.appender.logFile=org.apache.log4j.DailyRollingFileAppender
-log4j.appender.logFile.file=${logdir}/usersync.log
-log4j.appender.logFile.datePattern='.'yyyy-MM-dd
-log4j.appender.logFile.layout=org.apache.log4j.PatternLayout
-log4j.appender.logFile.layout.ConversionPattern=%d{dd MMM yyyy HH:mm:ss} %5p %c{1} [%t] - %m%n
-log4j.appender.logFile.MaxFileSize = {{ranger_usersync_log_maxfilesize}}MB
-log4j.appender.logFile.MaxBackupIndex = {{ranger_usersync_log_maxbackupindex}}
-
-# console
-log4j.appender.console=org.apache.log4j.ConsoleAppender
-log4j.appender.console.Target=System.out
-log4j.appender.console.layout=org.apache.log4j.PatternLayout
-log4j.appender.console.layout.ConversionPattern=%d{dd MMM yyyy HH:mm:ss} %5p %c{1} [%t] - %m%n
- </value>
- <value-attributes>
- <type>content</type>
- <show-property-name>false</show-property-name>
- </value-attributes>
- <on-ambari-upgrade add="false"/>
- </property>
-</configuration>
http://git-wip-us.apache.org/repos/asf/ambari/blob/3dc51b0c/ambari-server/src/main/resources/common-services/RANGER/0.7.0.3.0/configuration/usersync-properties.xml
----------------------------------------------------------------------
diff --git a/ambari-server/src/main/resources/common-services/RANGER/0.7.0.3.0/configuration/usersync-properties.xml b/ambari-server/src/main/resources/common-services/RANGER/0.7.0.3.0/configuration/usersync-properties.xml
deleted file mode 100644
index 15aabe8..0000000
--- a/ambari-server/src/main/resources/common-services/RANGER/0.7.0.3.0/configuration/usersync-properties.xml
+++ /dev/null
@@ -1,32 +0,0 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<?xml-stylesheet type="text/xsl" href="configuration.xsl"?>
-<!--
-/**
- * Licensed to the Apache Software Foundation (ASF) under one
- * or more contributor license agreements. See the NOTICE file
- * distributed with this work for additional information
- * regarding copyright ownership. The ASF licenses this file
- * to you under the Apache License, Version 2.0 (the
- * "License"); you may not use this file except in compliance
- * with the License. You may obtain a copy of the License at
- *
- * http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an "AS IS" BASIS,
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * See the License for the specific language governing permissions and
- * limitations under the License.
- */
--->
-<configuration supports_final="false">
-
-
-
-
-
-
-
-
-
-</configuration>
http://git-wip-us.apache.org/repos/asf/ambari/blob/3dc51b0c/ambari-server/src/main/resources/common-services/RANGER/0.7.0.3.0/kerberos.json
----------------------------------------------------------------------
diff --git a/ambari-server/src/main/resources/common-services/RANGER/0.7.0.3.0/kerberos.json b/ambari-server/src/main/resources/common-services/RANGER/0.7.0.3.0/kerberos.json
deleted file mode 100644
index 1fc8acf..0000000
--- a/ambari-server/src/main/resources/common-services/RANGER/0.7.0.3.0/kerberos.json
+++ /dev/null
@@ -1,153 +0,0 @@
-{
- "services": [
- {
- "name": "RANGER",
- "identities": [
- {
- "name": "/spnego"
- },
- {
- "name": "/smokeuser"
- }
- ],
- "configurations": [
- {
- "ranger-admin-site": {
- "xasecure.audit.jaas.Client.loginModuleName": "com.sun.security.auth.module.Krb5LoginModule",
- "xasecure.audit.jaas.Client.loginModuleControlFlag": "required",
- "xasecure.audit.jaas.Client.option.useKeyTab": "true",
- "xasecure.audit.jaas.Client.option.storeKey": "false",
- "xasecure.audit.jaas.Client.option.serviceName": "solr"
- }
- }
- ],
- "components": [
- {
- "name": "RANGER_ADMIN",
- "identities": [
- {
- "name": "rangeradmin",
- "principal": {
- "value": "rangeradmin/_HOST@${realm}",
- "type" : "service",
- "configuration": "ranger-admin-site/ranger.admin.kerberos.principal",
- "local_username" : "${ranger-env/ranger_user}"
- },
- "keytab": {
- "file": "${keytab_dir}/rangeradmin.service.keytab",
- "owner": {
- "name": "${ranger-env/ranger_user}",
- "access": "r"
- },
- "configuration": "ranger-admin-site/ranger.admin.kerberos.keytab"
- }
- },
- {
- "name": "rangerlookup",
- "principal": {
- "value": "rangerlookup/_HOST@${realm}",
- "configuration": "ranger-admin-site/ranger.lookup.kerberos.principal",
- "type" : "service"
- },
- "keytab": {
- "file": "${keytab_dir}/rangerlookup.service.keytab",
- "owner": {
- "name": "${ranger-env/ranger_user}",
- "access": "r"
- },
- "configuration": "ranger-admin-site/ranger.lookup.kerberos.keytab"
- }
- },
- {
- "name": "/spnego",
- "keytab": {
- "configuration": "ranger-admin-site/ranger.spnego.kerberos.keytab"
- }
- },
- {
- "name": "/RANGER/RANGER_ADMIN/rangeradmin",
- "principal": {
- "configuration": "ranger-admin-site/xasecure.audit.jaas.Client.option.principal"
- },
- "keytab": {
- "configuration": "ranger-admin-site/xasecure.audit.jaas.Client.option.keyTab"
- }
- },
- {
- "name": "/AMBARI_INFRA/INFRA_SOLR/infra-solr",
- "when" : {
- "contains" : ["services", "AMBARI_INFRA"]
- }
- }
- ]
- },
- {
- "name": "RANGER_USERSYNC",
- "identities": [
- {
- "name": "rangerusersync",
- "principal": {
- "value": "rangerusersync/_HOST@${realm}",
- "type" : "service",
- "configuration" : "ranger-ugsync-site/ranger.usersync.kerberos.principal",
- "local_username" : "rangerusersync"
- },
- "keytab": {
- "file": "${keytab_dir}/rangerusersync.service.keytab",
- "owner": {
- "name": "${ranger-env/ranger_user}",
- "access": "r"
- },
- "configuration": "ranger-ugsync-site/ranger.usersync.kerberos.keytab"
- }
- }
- ]
- },
- {
- "name": "RANGER_TAGSYNC",
- "identities": [
- {
- "name": "rangertagsync",
- "principal": {
- "value": "rangertagsync/_HOST@${realm}",
- "type" : "service",
- "configuration": "ranger-tagsync-site/ranger.tagsync.kerberos.principal",
- "local_username" : "rangertagsync"
- },
- "keytab": {
- "file": "${keytab_dir}/rangertagsync.service.keytab",
- "owner": {
- "name": "${ranger-env/ranger_user}",
- "access": "r"
- },
- "configuration": "ranger-tagsync-site/ranger.tagsync.kerberos.keytab"
- }
- },
- {
- "name": "/RANGER/RANGER_TAGSYNC/rangertagsync",
- "principal": {
- "configuration": "tagsync-application-properties/atlas.jaas.KafkaClient.option.principal"
- },
- "keytab": {
- "configuration": "tagsync-application-properties/atlas.jaas.KafkaClient.option.keyTab"
- }
- }
- ],
- "configurations": [
- {
- "tagsync-application-properties": {
- "atlas.jaas.KafkaClient.loginModuleName": "com.sun.security.auth.module.Krb5LoginModule",
- "atlas.jaas.KafkaClient.loginModuleControlFlag": "required",
- "atlas.jaas.KafkaClient.option.useKeyTab": "true",
- "atlas.jaas.KafkaClient.option.storeKey": "true",
- "atlas.jaas.KafkaClient.option.serviceName": "kafka",
- "atlas.kafka.sasl.kerberos.service.name": "kafka",
- "atlas.kafka.security.protocol": "PLAINTEXTSASL"
- }
- }
- ]
- }
- ]
- }
- ]
-}
\ No newline at end of file
http://git-wip-us.apache.org/repos/asf/ambari/blob/3dc51b0c/ambari-server/src/main/resources/common-services/RANGER/0.7.0.3.0/metainfo.xml
----------------------------------------------------------------------
diff --git a/ambari-server/src/main/resources/common-services/RANGER/0.7.0.3.0/metainfo.xml b/ambari-server/src/main/resources/common-services/RANGER/0.7.0.3.0/metainfo.xml
deleted file mode 100644
index e208800..0000000
--- a/ambari-server/src/main/resources/common-services/RANGER/0.7.0.3.0/metainfo.xml
+++ /dev/null
@@ -1,189 +0,0 @@
-<?xml version="1.0"?>
-<!--
-/**
- * Licensed to the Apache Software Foundation (ASF) under one
- * or more contributor license agreements. See the NOTICE file
- * distributed with this work for additional information
- * regarding copyright ownership. The ASF licenses this file
- * to you under the Apache License, Version 2.0 (the
- * "License"); you may not use this file except in compliance
- * with the License. You may obtain a copy of the License at
- *
- * http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an "AS IS" BASIS,
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * See the License for the specific language governing permissions and
- * limitations under the License.
- */
--->
-<metainfo>
- <schemaVersion>2.0</schemaVersion>
- <services>
- <service>
- <name>RANGER</name>
- <displayName>Ranger</displayName>
- <comment>Comprehensive security for Hadoop</comment>
- <version>0.7.0.3.0</version>
- <components>
-
- <component>
- <name>RANGER_ADMIN</name>
- <displayName>Ranger Admin</displayName>
- <category>MASTER</category>
- <cardinality>1+</cardinality>
- <versionAdvertised>true</versionAdvertised>
- <dependencies>
- <dependency>
- <name>AMBARI_INFRA/INFRA_SOLR_CLIENT</name>
- <scope>host</scope>
- <auto-deploy>
- <enabled>true</enabled>
- </auto-deploy>
- </dependency>
- </dependencies>
- <commandScript>
- <script>scripts/ranger_admin.py</script>
- <scriptType>PYTHON</scriptType>
- <timeout>600</timeout>
- </commandScript>
- <logs>
- <log>
- <logId>ranger_admin</logId>
- <primary>true</primary>
- </log>
- <log>
- <logId>ranger_dbpatch</logId>
- </log>
- </logs>
- </component>
-
- <component>
- <name>RANGER_TAGSYNC</name>
- <displayName>Ranger Tagsync</displayName>
- <category>SLAVE</category>
- <cardinality>0-1</cardinality>
- <versionAdvertised>true</versionAdvertised>
- <commandScript>
- <script>scripts/ranger_tagsync.py</script>
- <scriptType>PYTHON</scriptType>
- <timeout>600</timeout>
- </commandScript>
- <configuration-dependencies>
- <config-type>ranger-tagsync-site</config-type>
- <config-type>tagsync-application-properties</config-type>
- </configuration-dependencies>
- </component>
-
- <component>
- <name>RANGER_USERSYNC</name>
- <displayName>Ranger Usersync</displayName>
- <category>MASTER</category>
- <cardinality>1</cardinality>
- <versionAdvertised>true</versionAdvertised>
- <auto-deploy>
- <enabled>true</enabled>
- <co-locate>RANGER/RANGER_ADMIN</co-locate>
- </auto-deploy>
- <commandScript>
- <script>scripts/ranger_usersync.py</script>
- <scriptType>PYTHON</scriptType>
- <timeout>600</timeout>
- </commandScript>
- <logs>
- <log>
- <logId>ranger_usersync</logId>
- <primary>true</primary>
- </log>
- </logs>
- </component>
-
- </components>
- <configuration-dependencies>
- <config-type>admin-properties</config-type>
- <config-type>ranger-site</config-type>
- <config-type>usersync-properties</config-type>
- <config-type>ranger-admin-site</config-type>
- <config-type>ranger-ugsync-site</config-type>
- <config-type>admin-log4j</config-type>
- <config-type>usersync-log4j</config-type>
- <config-type>ranger-solr-configuration</config-type>
- </configuration-dependencies>
-
- <commandScript>
- <script>scripts/service_check.py</script>
- <scriptType>PYTHON</scriptType>
- <timeout>300</timeout>
- </commandScript>
-
- <themes>
- <theme>
- <fileName>theme_version_1.json</fileName>
- <default>true</default>
- </theme>
- <theme>
- <fileName>theme_version_2.json</fileName>
- <default>true</default>
- </theme>
- <theme>
- <fileName>theme_version_3.json</fileName>
- <default>true</default>
- </theme>
- <theme>
- <fileName>theme_version_5.json</fileName>
- <default>true</default>
- </theme>
- </themes>
-
- <osSpecifics>
- <osSpecific>
- <osFamily>redhat7,amazon2015,redhat6,suse11,suse12</osFamily>
- <packages>
- <package>
- <name>ranger_${stack_version}-admin</name>
- </package>
- <package>
- <name>ranger_${stack_version}-usersync</name>
- </package>
- <package>
- <name>ranger_${stack_version}-tagsync</name>
- <condition>should_install_ranger_tagsync</condition>
- </package>
- <package>
- <name>ambari-infra-solr-client</name>
- <condition>should_install_infra_solr_client</condition>
- </package>
- </packages>
- </osSpecific>
- <osSpecific>
- <osFamily>debian7,ubuntu12,ubuntu14,ubuntu16</osFamily>
- <packages>
- <package>
- <name>ranger-${stack_version}-admin</name>
- </package>
- <package>
- <name>ranger-${stack_version}-usersync</name>
- </package>
- <package>
- <name>ranger-${stack_version}-tagsync</name>
- <condition>should_install_ranger_tagsync</condition>
- </package>
- <package>
- <name>ambari-infra-solr-client</name>
- <condition>should_install_infra_solr_client</condition>
- </package>
- </packages>
- </osSpecific>
- </osSpecifics>
-
- <quickLinksConfigurations>
- <quickLinksConfiguration>
- <fileName>quicklinks.json</fileName>
- <default>true</default>
- </quickLinksConfiguration>
- </quickLinksConfigurations>
-
- </service>
- </services>
-</metainfo>
\ No newline at end of file
http://git-wip-us.apache.org/repos/asf/ambari/blob/3dc51b0c/ambari-server/src/main/resources/common-services/RANGER/0.7.0.3.0/package/alerts/alert_ranger_admin_passwd_check.py
----------------------------------------------------------------------
diff --git a/ambari-server/src/main/resources/common-services/RANGER/0.7.0.3.0/package/alerts/alert_ranger_admin_passwd_check.py b/ambari-server/src/main/resources/common-services/RANGER/0.7.0.3.0/package/alerts/alert_ranger_admin_passwd_check.py
deleted file mode 100644
index 8ea8070..0000000
--- a/ambari-server/src/main/resources/common-services/RANGER/0.7.0.3.0/package/alerts/alert_ranger_admin_passwd_check.py
+++ /dev/null
@@ -1,195 +0,0 @@
-#!/usr/bin/env python
-
-"""
-Licensed to the Apache Software Foundation (ASF) under one
-or more contributor license agreements. See the NOTICE file
-distributed with this work for additional information
-regarding copyright ownership. The ASF licenses this file
-to you under the Apache License, Version 2.0 (the
-"License"); you may not use this file except in compliance
-with the License. You may obtain a copy of the License at
-
- http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
-"""
-
-import base64
-import urllib2
-import ambari_simplejson as json # simplejson is much faster comparing to Python 2.6 json module and has the same functions set.
-import logging
-from resource_management.core.environment import Environment
-from resource_management.libraries.script import Script
-from resource_management.libraries.functions.stack_features import check_stack_feature
-from resource_management.libraries.functions import StackFeature
-
-logger = logging.getLogger()
-RANGER_ADMIN_URL = '{{admin-properties/policymgr_external_url}}'
-ADMIN_USERNAME = '{{ranger-env/admin_username}}'
-ADMIN_PASSWORD = '{{ranger-env/admin_password}}'
-RANGER_ADMIN_USERNAME = '{{ranger-env/ranger_admin_username}}'
-RANGER_ADMIN_PASSWORD = '{{ranger-env/ranger_admin_password}}'
-SECURITY_ENABLED = '{{cluster-env/security_enabled}}'
-
-def get_tokens():
- """
- Returns a tuple of tokens in the format {{site/property}} that will be used
- to build the dictionary passed into execute
-
- :return tuple
- """
- return (RANGER_ADMIN_URL, ADMIN_USERNAME, ADMIN_PASSWORD, RANGER_ADMIN_USERNAME, RANGER_ADMIN_PASSWORD, SECURITY_ENABLED)
-
-
-def execute(configurations={}, parameters={}, host_name=None):
- """
- Returns a tuple containing the result code and a pre-formatted result label
-
- Keyword arguments:
- configurations (dictionary): a mapping of configuration key to value
- parameters (dictionary): a mapping of script parameter key to value
- host_name (string): the name of this host where the alert is running
- """
-
- if configurations is None:
- return (('UNKNOWN', ['There were no configurations supplied to the script.']))
-
- ranger_link = None
- ranger_auth_link = None
- ranger_get_user = None
- admin_username = None
- admin_password = None
- ranger_admin_username = None
- ranger_admin_password = None
- security_enabled = False
-
- stack_version_formatted = Script.get_stack_version()
- stack_supports_ranger_kerberos = stack_version_formatted and check_stack_feature(StackFeature.RANGER_KERBEROS_SUPPORT, stack_version_formatted)
-
- if RANGER_ADMIN_URL in configurations:
- ranger_link = configurations[RANGER_ADMIN_URL]
- if ranger_link.endswith('/'):
- ranger_link = ranger_link[:-1]
- ranger_auth_link = '{0}/{1}'.format(ranger_link, 'service/public/api/repository/count')
- ranger_get_user = '{0}/{1}'.format(ranger_link, 'service/xusers/users')
-
- if ADMIN_USERNAME in configurations:
- admin_username = configurations[ADMIN_USERNAME]
-
- if ADMIN_PASSWORD in configurations:
- admin_password = configurations[ADMIN_PASSWORD]
-
- if RANGER_ADMIN_USERNAME in configurations:
- ranger_admin_username = configurations[RANGER_ADMIN_USERNAME]
-
- if RANGER_ADMIN_PASSWORD in configurations:
- ranger_admin_password = configurations[RANGER_ADMIN_PASSWORD]
-
- if SECURITY_ENABLED in configurations:
- security_enabled = str(configurations[SECURITY_ENABLED]).upper() == 'TRUE'
-
- label = None
- result_code = 'OK'
-
- try:
- if security_enabled and stack_supports_ranger_kerberos:
- result_code = 'UNKNOWN'
- label = 'This alert will get skipped for Ranger Admin on kerberos env'
- else:
- admin_http_code = check_ranger_login(ranger_auth_link, admin_username, admin_password)
- if admin_http_code == 200:
- get_user_code = get_ranger_user(ranger_get_user, admin_username, admin_password, ranger_admin_username)
- if get_user_code:
- user_http_code = check_ranger_login(ranger_auth_link, ranger_admin_username, ranger_admin_password)
- if user_http_code == 200:
- result_code = 'OK'
- label = 'Login Successful for users {0} and {1}'.format(admin_username, ranger_admin_username)
- elif user_http_code == 401:
- result_code = 'CRITICAL'
- label = 'User:{0} credentials on Ambari UI are not in sync with Ranger'.format(ranger_admin_username)
- else:
- result_code = 'WARNING'
- label = 'Ranger Admin service is not reachable, please restart the service'
- else:
- result_code = 'OK'
- label = 'Login Successful for user: {0}. User:{1} user not yet synced with Ranger'.format(admin_username, ranger_admin_username)
- elif admin_http_code == 401:
- result_code = 'CRITICAL'
- label = 'User:{0} credentials on Ambari UI are not in sync with Ranger'.format(admin_username)
- else:
- result_code = 'WARNING'
- label = 'Ranger Admin service is not reachable, please restart the service'
-
- except Exception, e:
- label = str(e)
- result_code = 'UNKNOWN'
- logger.exception(label)
-
- return ((result_code, [label]))
-
-def check_ranger_login(ranger_auth_link, username, password):
- """
- params ranger_auth_link: ranger login url
- params username: user credentials
- params password: user credentials
-
- return response code
- """
- try:
- usernamepassword = '{0}:{1}'.format(username, password)
- base_64_string = base64.encodestring(usernamepassword).replace('\n', '')
- request = urllib2.Request(ranger_auth_link)
- request.add_header("Content-Type", "application/json")
- request.add_header("Accept", "application/json")
- request.add_header("Authorization", "Basic {0}".format(base_64_string))
- result = urllib2.urlopen(request, timeout=20)
- response_code = result.getcode()
- if response_code == 200:
- response = json.loads(result.read())
- return response_code
- except urllib2.HTTPError, e:
- logger.exception("Error during Ranger service authentication. Http status code - {0}. {1}".format(e.code, e.read()))
- return e.code
- except urllib2.URLError, e:
- logger.exception("Error during Ranger service authentication. {0}".format(e.reason))
- return None
- except Exception, e:
- return 401
-
-def get_ranger_user(ranger_get_user, username, password, user):
- """
- params ranger_get_user: ranger get user url
- params username: user credentials
- params password: user credentials
- params user: user to be search
- return Boolean if user exist or not
- """
- try:
- url = '{0}?name={1}'.format(ranger_get_user, user)
- usernamepassword = '{0}:{1}'.format(username, password)
- base_64_string = base64.encodestring(usernamepassword).replace('\n', '')
- request = urllib2.Request(url)
- request.add_header("Content-Type", "application/json")
- request.add_header("Accept", "application/json")
- request.add_header("Authorization", "Basic {0}".format(base_64_string))
- result = urllib2.urlopen(request, timeout=20)
- response_code = result.getcode()
- response = json.loads(result.read())
- if response_code == 200 and len(response['vXUsers']) > 0:
- for xuser in response['vXUsers']:
- if xuser['name'] == user:
- return True
- else:
- return False
- except urllib2.HTTPError, e:
- logger.exception("Error getting user from Ranger service. Http status code - {0}. {1}".format(e.code, e.read()))
- return False
- except urllib2.URLError, e:
- logger.exception("Error getting user from Ranger service. {0}".format(e.reason))
- return False
- except Exception, e:
- return False