You are viewing a plain text version of this content. The canonical link for it is here.
Posted to user@ranger.apache.org by Suraj Nayak <sn...@gmail.com> on 2017/03/30 02:57:54 UTC

Support for Cloud storage buckets

Hi All,

Does Ranger support auditing cloud storage filesystems ? Like s3://, gs://
?

I have some use case where I want to provide folder level access to Ranger
user group.

   - Is there documentation how to do this ?
   - Is it supported ?
   - Can it be achieved via custom plugins ?

Any thoughts?

Thanks!

-- 
Thanks
Suraj Nayak M

Re: Support for Cloud storage buckets

Posted by Sean Roberts <sr...@hortonworks.com>.
Currently s3a:// is not checked by HDFS authorization (Native or Ranger) and S3 does not provide the same type of access controls. Further, there is no authentication to use the configured s3a:// connection meaning that you can use s3a:// on a kerberized cluster without getting a Kerberos ticket.

Here is the ticket tracking S3 support: https://issues.apache.org/jira/browse/RANGER-1300

That is for direct file access, like hdfs://. Hive authorization controls should work regardless of the back-end file system.

--
Sean Roberts
Partner Engineering, EMEA
@seano


From: Suraj Nayak <sn...@gmail.com>
Reply-To: "user@ranger.apache.org" <us...@ranger.apache.org>
Date: Thursday, 6 April 2017 at 16:34
To: "user@ranger.incubator.apache.org" <us...@ranger.incubator.apache.org>, "user@ranger.apache.org" <us...@ranger.apache.org>, "dev@ranger.apache.org" <de...@ranger.apache.org>
Subject: Re: Support for Cloud storage buckets

Adding dev.


On Wed, Mar 29, 2017 at 7:57 PM, Suraj Nayak <sn...@gmail.com>> wrote:
Hi All,

Does Ranger support auditing cloud storage filesystems ? Like s3://, gs:// ?

I have some use case where I want to provide folder level access to Ranger user group.

  *   Is there documentation how to do this ?
  *   Is it supported ?
  *   Can it be achieved via custom plugins ?
Any thoughts?

Thanks!

--
Thanks
Suraj Nayak M



--
Thanks
Suraj Nayak M

Re: Support for Cloud storage buckets

Posted by Suraj Nayak <sn...@gmail.com>.
Adding dev.


On Wed, Mar 29, 2017 at 7:57 PM, Suraj Nayak <sn...@gmail.com> wrote:

> Hi All,
>
> Does Ranger support auditing cloud storage filesystems ? Like s3://, gs://
> ?
>
> I have some use case where I want to provide folder level access to Ranger
> user group.
>
>    - Is there documentation how to do this ?
>    - Is it supported ?
>    - Can it be achieved via custom plugins ?
>
> Any thoughts?
>
> Thanks!
>
> --
> Thanks
> Suraj Nayak M
>



-- 
Thanks
Suraj Nayak M