You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@ambari.apache.org by "Mugdha Varadkar (JIRA)" <ji...@apache.org> on 2016/06/21 07:07:57 UTC

[jira] [Updated] (AMBARI-17330) Ambari changes to support kerberized Ranger tagsync

     [ https://issues.apache.org/jira/browse/AMBARI-17330?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Mugdha Varadkar updated AMBARI-17330:
-------------------------------------
    Summary: Ambari changes to support kerberized Ranger tagsync  (was: Ambari changes to support kerberized tagsync)

> Ambari changes to support kerberized Ranger tagsync
> ---------------------------------------------------
>
>                 Key: AMBARI-17330
>                 URL: https://issues.apache.org/jira/browse/AMBARI-17330
>             Project: Ambari
>          Issue Type: Improvement
>          Components: ambari-server
>    Affects Versions: 2.4.0
>            Reporter: Mugdha Varadkar
>            Assignee: Mugdha Varadkar
>            Priority: Critical
>             Fix For: 2.4.0
>
>
> Remove below properties from ranger-tagsync-site.xml:
> - ranger.tagsync.atlas.to.ranger.service.mapping
> - ranger.tagsync.atlas.custom.resource.mappers
> Add below property in ranger-tagsync-site.xml:
> - ranger.tagsync.source.atlasrest.username (default - empty)
> Add below properties in tagsync-application-properties.xml only if cluster is kerberized:
> - atlas.jaas.KafkaClient.loginModuleName=com.sun.security.auth.module.Krb5LoginModule
> - atlas.jaas.KafkaClient.loginModuleControlFlag=required
> atlas.jaas.KafkaClient.option.useKeyTab=true
> - atlas.jaas.KafkaClient.option.storeKey=true
> - atlas.jaas.KafkaClient.option.serviceName=kafka
> - atlas.jaas.KafkaClient.option.keyTab=tagsync_keytab_path
> - atlas.jaas.KafkaClient.option.principal=tagsync_jaas_principal
> - atlas.kafka.sasl.kerberos.service.name=kafka
> - atlas.kafka.security.protocol=SASL_PLAINTEXT



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)