You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@ambari.apache.org by "Andrew Onischuk (JIRA)" <ji...@apache.org> on 2015/06/14 12:07:00 UTC

[jira] [Resolved] (AMBARI-11912) Ambari removing ranger group from ranger user after installation

     [ https://issues.apache.org/jira/browse/AMBARI-11912?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Andrew Onischuk resolved AMBARI-11912.
--------------------------------------
    Resolution: Fixed

Committed to trunk and branch-2.1

> Ambari removing ranger group from ranger user after installation
> ----------------------------------------------------------------
>
>                 Key: AMBARI-11912
>                 URL: https://issues.apache.org/jira/browse/AMBARI-11912
>             Project: Ambari
>          Issue Type: Bug
>            Reporter: Andrew Onischuk
>            Assignee: Andrew Onischuk
>             Fix For: 2.1.0
>
>
> After installation Ambari is removing the default `ranger` group from `ranger`
> user and adding the `hadoop` user. This is breaking Unix Authentication.
> Before Installing Ranger through Ambari
>     
>     
>     [root@pa-0105-postgres-1 yum.repos.d]# cat /etc/passwd | grep ranger
>     [root@pa-0105-postgres-1 yum.repos.d]# yum install -y ranger-admin
>     [root@pa-0105-postgres-1 yum.repos.d]# cat /etc/passwd | grep ranger
>     ranger:x:2546:498:Ranger:/var/lib/ranger:/bin/bash
>     [root@pa-0105-postgres-1 yum.repos.d]# groups ranger
>     ranger : ranger
>     [root@pa-0105-postgres-1 yum.repos.d]# yum install ranger-usersync
>     [root@pa-0105-postgres-1 yum.repos.d]# ls -l /usr/hdp/current/ranger-usersync/native/
>     total 8
>     -rwsr-x---. 1 root ranger 5640 Jun  1 00:13 credValidator.uexe
>     
> After Installing Ranger through Ambari
>     
>     
>     [root@pa-0105-postgres-1 ranger-usersync]# groups ranger
>     ranger : hadoop
>     
> Logs during installation in Ambari
>     
>     
>     Group['hadoop'] {'ignore_failures': False}
>     2015-06-01 06:49:35,553 - Group['users'] {'ignore_failures': False}
>     2015-06-01 06:49:35,553 - Group['ranger'] {'ignore_failures': False}
>     2015-06-01 06:49:35,553 - Adding group Group['ranger']
>     2015-06-01 06:49:35,599 - User['ambari-qa'] {'gid': 'hadoop', 'ignore_failures': False, 'groups': ['users']}
>     2015-06-01 06:49:35,601 - User['zookeeper'] {'gid': 'hadoop', 'ignore_failures': False, 'groups': ['hadoop']}
>     2015-06-01 06:49:35,603 - User['hdfs'] {'gid': 'hadoop', 'ignore_failures': False, 'groups': ['hadoop']}
>     2015-06-01 06:49:35,604 - User['ranger'] {'gid': 'hadoop', 'ignore_failures': False, 'groups': ['hadoop']}
>     2015-06-01 06:49:35,605 - Adding user User['ranger']
>     
> CC sneethiraj/vperiasamy



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)