[jira] [Updated] (AMBARI-13177) For HDP 2.2: Ranger setup does not respect custom service users

["Gautam Borad (JIRA)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/AMBARI-13177?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Gautam Borad updated AMBARI-13177:
----------------------------------
    Attachment: AMBARI-13177.patch

> For HDP 2.2: Ranger setup does not respect custom service users
> ---------------------------------------------------------------
>
>                 Key: AMBARI-13177
>                 URL: https://issues.apache.org/jira/browse/AMBARI-13177
>             Project: Ambari
>          Issue Type: Bug
>          Components: ambari-server
>    Affects Versions: 2.1.0
>            Reporter: Gautam Borad
>            Assignee: Gautam Borad
>             Fix For: 2.1.3
>
>         Attachments: AMBARI-13177.patch
>
>
> PROBLEM: In an Ambari install it's possible to use different user accounts for service users, such as the hive user and the hdfs user. 
> The plugin enable scripts set the owner of various component specific files such as the jceks files. When the services use custom users, the ranger scripts still set the owner of the files to the "standard user", resulting in permissions problems. 
> For example if I make my hive user "special-hive-user", the ranger scripts still will set the owner to "hive".
> The ranger scripts need to use the information in Ambari for the custom service users and propagate this to the setup scripts.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)