You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@ranger.apache.org by ding gaozhan <94...@qq.com> on 2020/10/28 08:00:32 UTC
Review Request 72992: RANGER-3061 Default configuration error when
enable ssl for ranger admin
-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/72992/
-----------------------------------------------------------
Review request for ranger.
Repository: ranger
Description
-------
When enable ssl for ranger admin, all plugins such as hdfs, hive, need read ssl configuration from file 'ranger-policymgr-ssl.xml' . But the configuration for 'ranger-policymgr-ssl.xml' path was incorrect in file 'ranger-xxx-security.xml' . The default configuration item comes from ranger-xxx-security.cfg. We should change it.
Diffs
-----
hdfs-agent/conf/ranger-hdfs-security-changes.cfg 5639c173c
hive-agent/conf/ranger-hive-security-changes.cfg 0e8d0d4b2
kms/scripts/install.properties e33192bfe
knox-agent/conf/ranger-knox-security-changes.cfg db702e573
plugin-atlas/conf/ranger-atlas-security-changes.cfg 08790b985
plugin-elasticsearch/conf/ranger-elasticsearch-security-changes.cfg 5b0deaeeb
plugin-kafka/conf/ranger-kafka-security-changes.cfg a43eb23f3
plugin-kms/conf/ranger-kms-security-changes.cfg f4779ac6f
plugin-kylin/conf/ranger-kylin-security-changes.cfg e6cc1f9a3
plugin-ozone/conf/ranger-ozone-security-changes.cfg e91e7fd83
plugin-presto/conf/ranger-presto-security-changes.cfg 15fc7fd9f
plugin-solr/conf/ranger-solr-security-changes.cfg 7ab518aac
plugin-sqoop/conf/ranger-sqoop-security-changes.cfg fadca54c3
plugin-yarn/conf/ranger-yarn-security-changes.cfg d1c7308fe
storm-agent/conf/ranger-storm-security-changes.cfg 9e84c770e
Diff: https://reviews.apache.org/r/72992/diff/1/
Testing
-------
Manual test passed
Thanks,
ding gaozhan
Re: Review Request 72992: RANGER-3061 Default configuration error when
enable ssl for ranger admin
Posted by Madhan Neethiraj <ma...@apache.org>.
-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/72992/#review222152
-----------------------------------------------------------
Ship it!
Ship It!
- Madhan Neethiraj
On Oct. 28, 2020, 8 a.m., ding gaozhan wrote:
>
> -----------------------------------------------------------
> This is an automatically generated e-mail. To reply, visit:
> https://reviews.apache.org/r/72992/
> -----------------------------------------------------------
>
> (Updated Oct. 28, 2020, 8 a.m.)
>
>
> Review request for ranger.
>
>
> Repository: ranger
>
>
> Description
> -------
>
> When enable ssl for ranger admin, all plugins such as hdfs, hive, need read ssl configuration from file 'ranger-policymgr-ssl.xml' . But the configuration for 'ranger-policymgr-ssl.xml' path was incorrect in file 'ranger-xxx-security.xml' . The default configuration item comes from ranger-xxx-security.cfg. We should change it.
>
>
> Diffs
> -----
>
> hdfs-agent/conf/ranger-hdfs-security-changes.cfg 5639c173c
> hive-agent/conf/ranger-hive-security-changes.cfg 0e8d0d4b2
> kms/scripts/install.properties e33192bfe
> knox-agent/conf/ranger-knox-security-changes.cfg db702e573
> plugin-atlas/conf/ranger-atlas-security-changes.cfg 08790b985
> plugin-elasticsearch/conf/ranger-elasticsearch-security-changes.cfg 5b0deaeeb
> plugin-kafka/conf/ranger-kafka-security-changes.cfg a43eb23f3
> plugin-kms/conf/ranger-kms-security-changes.cfg f4779ac6f
> plugin-kylin/conf/ranger-kylin-security-changes.cfg e6cc1f9a3
> plugin-ozone/conf/ranger-ozone-security-changes.cfg e91e7fd83
> plugin-presto/conf/ranger-presto-security-changes.cfg 15fc7fd9f
> plugin-solr/conf/ranger-solr-security-changes.cfg 7ab518aac
> plugin-sqoop/conf/ranger-sqoop-security-changes.cfg fadca54c3
> plugin-yarn/conf/ranger-yarn-security-changes.cfg d1c7308fe
> storm-agent/conf/ranger-storm-security-changes.cfg 9e84c770e
>
>
> Diff: https://reviews.apache.org/r/72992/diff/1/
>
>
> Testing
> -------
>
> Manual test passed
>
>
> Thanks,
>
> ding gaozhan
>
>