[jira] [Updated] (RANGER-2936) Support for policy download mode configuration on plugin

["Jalpan Randeri (Jira)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/RANGER-2936?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Jalpan Randeri updated RANGER-2936:
-----------------------------------
    Attachment: 0001-RANGER-2936-Support-for-policy-download-mode-configu.patch

> Support for policy download mode configuration on plugin
> --------------------------------------------------------
>
>                 Key: RANGER-2936
>                 URL: https://issues.apache.org/jira/browse/RANGER-2936
>             Project: Ranger
>          Issue Type: Improvement
>          Components: plugins
>            Reporter: Jalpan Randeri
>            Priority: Minor
>              Labels: newbie, pull-request-available
>         Attachments: 0001-RANGER-2936-Support-for-policy-download-mode-configu.patch
>
>
> h3. Description
> Ranger Plugins uses RangerAdminRESTClient to download policies. Ranger Admin server exposes two different endpoints for policy downloads
>  # Secure mode
>  # normal mode RangerAdminRESTClient select mode secure mode if Hadoop cluster is running in Kerberos. [https://github.com/apache/ranger/blob/master/agents-common/src/main/java/org/apache/ranger/admin/client/RangerAdminRESTClient.java#L129]
> Since, Ranger admin server is capable of managing heterogeneous Hadoop clusters. Ranger plugins are unable to communicate with Ranger admin server under following scenario
>  * Ranger Plugin is running on Hadoop cluster protected by Kerberos
>  * Ranger Admin server is running in non-Kerberos mode
> Above mentioned scenario, ranger plugins are observing following error
> {quote} 
>  {{2020-06-13 03:47:20 WARN RangerAdminRESTClient:176 - [] Error getting policies.
>  secureMode=true,
>  user=hive (auth:KERBEROS),
>  response=
> {"httpStatusCode":401,"statusCode":401,"msgDesc":"Authentication Failed"}
> ,
>  serviceName=hivedev}}
> {quote}
> h3. How to this patch mitigate issue?
> This patch introduces boolean configuration {{ranger.plugin.\{service}.policyDownload.secureMode}} in RangerAdminRESTClient.
>  * true use secure mode to download policies
>  * false use simple mode to download policies
> Plugin will read this configuration to determine policy download mode



--
This message was sent by Atlassian Jira
(v8.3.4#803005)