You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@nifi.apache.org by "ASF GitHub Bot (JIRA)" <ji...@apache.org> on 2018/08/01 05:48:00 UTC
[jira] [Commented] (NIFIREG-186) Create Authorizer implementation
that uses Apache Ranger
[ https://issues.apache.org/jira/browse/NIFIREG-186?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16564769#comment-16564769 ]
ASF GitHub Bot commented on NIFIREG-186:
----------------------------------------
Github user ijokarumawak commented on the issue:
https://github.com/apache/nifi-registry/pull/131
Thanks @scottyaslan @kevdoran for reviewing this! I've incorporated your feedback. Here are the answers to Kevin's previous questions:
> How do we envision distributing the Ranger functionality?
I think we should follow how NiFi does with its Ranger component. I added 'include-ranger' build profile to bundle the extension into NiFi Registry binary. Since the extension is large, 50MB, I wouldn't recommend bundle it with Registry release by default.
If needed, anyone can build the extension easily by executing:
```
$ mvn clean install -Pcontrib-check -Pinclude-ranger -f nifi-registry-extensions/nifi-registry-ranger-extension
```
Then extract the built zip file 'nifi-registry-extensions/nifi-registry-ranger-extension/target/nifi-registry-ranger-extension-0.3.0-SNAPSHOT-bin.zip' into some directory that NiFi Registry can access.
Specify the directory from nifi-registry.properties:
```
nifi.registry.extension.dir.ranger=./ext/ranger/lib
```
We should document these somewhere though..
> Also, is there a certain build or version of Ranger that is required for this integration, or any special instructions for configuring things on the Ranger end?
You need to apply a patch to Ranger since the NiFi Registry service is not merged into Ranger yet.
Please check https://issues.apache.org/jira/browse/RANGER-2157 to get the patch, or you can use my ranger branch. https://github.com/ijokarumawak/ranger/tree/nifi-registry
> Create Authorizer implementation that uses Apache Ranger
> --------------------------------------------------------
>
> Key: NIFIREG-186
> URL: https://issues.apache.org/jira/browse/NIFIREG-186
> Project: NiFi Registry
> Issue Type: Improvement
> Reporter: Koji Kawamura
> Assignee: Koji Kawamura
> Priority: Major
>
> In addition to the standard file-based Authorizer, we should provide an Authorizer implementation that uses Apache Ranger, so that users implement centralized authorization against both NiFi and NiFi Registry.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)