You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@hawq.apache.org by yo...@apache.org on 2017/04/05 17:38:11 UTC
[1/3] incubator-hawq-docs git commit: Removing release designation
from Ranger limitations pending voted release
Repository: incubator-hawq-docs
Updated Branches:
refs/heads/develop 4759d34c6 -> 5f5727ac0
Removing release designation from Ranger limitations pending voted release
Project: http://git-wip-us.apache.org/repos/asf/incubator-hawq-docs/repo
Commit: http://git-wip-us.apache.org/repos/asf/incubator-hawq-docs/commit/c9ead701
Tree: http://git-wip-us.apache.org/repos/asf/incubator-hawq-docs/tree/c9ead701
Diff: http://git-wip-us.apache.org/repos/asf/incubator-hawq-docs/diff/c9ead701
Branch: refs/heads/develop
Commit: c9ead701d1d3c0ed3ade1c47f6877141753dd6ed
Parents: 4759d34
Author: David Yozie <yo...@apache.org>
Authored: Wed Apr 5 10:31:25 2017 -0700
Committer: David Yozie <yo...@apache.org>
Committed: Wed Apr 5 10:31:25 2017 -0700
----------------------------------------------------------------------
markdown/ranger/ranger-overview.html.md.erb | 13 ++++++++-----
1 file changed, 8 insertions(+), 5 deletions(-)
----------------------------------------------------------------------
http://git-wip-us.apache.org/repos/asf/incubator-hawq-docs/blob/c9ead701/markdown/ranger/ranger-overview.html.md.erb
----------------------------------------------------------------------
diff --git a/markdown/ranger/ranger-overview.html.md.erb b/markdown/ranger/ranger-overview.html.md.erb
index f88a093..bfda4e8 100644
--- a/markdown/ranger/ranger-overview.html.md.erb
+++ b/markdown/ranger/ranger-overview.html.md.erb
@@ -37,12 +37,15 @@ A single configuration parameter, `hawq_acl_type` determines whether HAWQ defers
The Ranger plug-in service caches Ranger policies locally on each HAWQ node to avoid unnecessary round trips between the HAWQ node and the Ranger Policy Manager server.
-## <a id="limitations"></a>Limitations of Ranger Policy Management in HAWQ 2.2.0.0-incubating
-Neither Kerberos authentication nor SSL encryption is supported between a HAWQ node and the Ranger plug-in service, or between the plug-in service and the Ranger Policy Manager.
+## <a id="limitations"></a>Limitations of Ranger Policy Management
-The Ranger plug-in service is not compatible with Highly-Available HAWQ deployments. Should you need to activate the standby master in your HAWQ cluster, you must manually update the HAWQ Ranger service definition with the new master node connection information.
+In this release, HAWQ integration with Ranger has several limitations:
-Ranger User Group policies cannot be used with HAWQ in this release. Only User Policies are currently supported.
+- Neither Kerberos authentication nor SSL encryption is supported between a HAWQ node and the Ranger plug-in service, or between the plug-in service and the Ranger Policy Manager.
-Some authorization checks for superuser-restricted authorization events are handled by HAWQ natively, even when Ranger integration is enabled. See [HAWQ-Native Authorization](../clientaccess/hawq-access-checks.html#alwaysnative).
+- The Ranger plug-in service is not compatible with Highly-Available HAWQ deployments. Should you need to activate the standby master in your HAWQ cluster, you must manually update the HAWQ Ranger service definition with the new master node connection information.
+
+- Ranger User Group policies cannot be used with HAWQ in this release. Only User Policies are currently supported.
+
+- Some authorization checks for superuser-restricted authorization events are handled by HAWQ natively, even when Ranger integration is enabled. See [HAWQ-Native Authorization](../clientaccess/hawq-access-checks.html#alwaysnative).
[2/3] incubator-hawq-docs git commit: generalizing HAWQ version in
auditing examples
Posted by yo...@apache.org.
generalizing HAWQ version in auditing examples
Project: http://git-wip-us.apache.org/repos/asf/incubator-hawq-docs/repo
Commit: http://git-wip-us.apache.org/repos/asf/incubator-hawq-docs/commit/980e47f5
Tree: http://git-wip-us.apache.org/repos/asf/incubator-hawq-docs/tree/980e47f5
Diff: http://git-wip-us.apache.org/repos/asf/incubator-hawq-docs/diff/980e47f5
Branch: refs/heads/develop
Commit: 980e47f52129737fefb382037687ff976a85613c
Parents: c9ead70
Author: David Yozie <yo...@apache.org>
Authored: Wed Apr 5 10:34:47 2017 -0700
Committer: David Yozie <yo...@apache.org>
Committed: Wed Apr 5 10:34:47 2017 -0700
----------------------------------------------------------------------
markdown/ranger/ranger-auditing.html.md.erb | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
----------------------------------------------------------------------
http://git-wip-us.apache.org/repos/asf/incubator-hawq-docs/blob/980e47f5/markdown/ranger/ranger-auditing.html.md.erb
----------------------------------------------------------------------
diff --git a/markdown/ranger/ranger-auditing.html.md.erb b/markdown/ranger/ranger-auditing.html.md.erb
index 18f2138..7024280 100644
--- a/markdown/ranger/ranger-auditing.html.md.erb
+++ b/markdown/ranger/ranger-auditing.html.md.erb
@@ -77,7 +77,7 @@ For example:
<property>
<name>xasecure.audit.destination.solr.batch.filespool.dir</name>
- <value>/usr/local/hawq_2_2_0_0/ranger/plugin-service/logs/spool/audit/solr</value>
+ <value>/usr/local/hawq_<version>/ranger/plugin-service/logs/spool/audit/solr</value>
</property>
```
@@ -115,7 +115,7 @@ For example:
<property>
<name>xasecure.audit.destination.hdfs.batch.filespool.dir</name>
- <value>/usr/local/hawq_2_2_0_0/ranger/plugin-service/logs/spool/audit/hdfs</value>
+ <value>/usr/local/hawq_<version>/ranger/plugin-service/logs/spool/audit/hdfs</value>
</property>
```
## <a id="log4j"></a>Configuring Log4j Auditing
[3/3] incubator-hawq-docs git commit: generalizing HAWQ version in
ranger config
Posted by yo...@apache.org.
generalizing HAWQ version in ranger config
Project: http://git-wip-us.apache.org/repos/asf/incubator-hawq-docs/repo
Commit: http://git-wip-us.apache.org/repos/asf/incubator-hawq-docs/commit/5f5727ac
Tree: http://git-wip-us.apache.org/repos/asf/incubator-hawq-docs/tree/5f5727ac
Diff: http://git-wip-us.apache.org/repos/asf/incubator-hawq-docs/diff/5f5727ac
Branch: refs/heads/develop
Commit: 5f5727ac0caa4c3a3a4a9682e39c6776e1d71f09
Parents: 980e47f
Author: David Yozie <yo...@apache.org>
Authored: Wed Apr 5 10:38:00 2017 -0700
Committer: David Yozie <yo...@apache.org>
Committed: Wed Apr 5 10:38:00 2017 -0700
----------------------------------------------------------------------
markdown/ranger/ranger-integration-config.html.md.erb | 12 ++++++------
1 file changed, 6 insertions(+), 6 deletions(-)
----------------------------------------------------------------------
http://git-wip-us.apache.org/repos/asf/incubator-hawq-docs/blob/5f5727ac/markdown/ranger/ranger-integration-config.html.md.erb
----------------------------------------------------------------------
diff --git a/markdown/ranger/ranger-integration-config.html.md.erb b/markdown/ranger/ranger-integration-config.html.md.erb
index d5ef7cd..ff279ff 100644
--- a/markdown/ranger/ranger-integration-config.html.md.erb
+++ b/markdown/ranger/ranger-integration-config.html.md.erb
@@ -21,14 +21,14 @@ specific language governing permissions and limitations
under the License.
-->
-Your HAWQ 2.2.0 installation includes the following HAWQ-related Ranger components:
+Your HAWQ installation includes the following HAWQ-related Ranger components:
- Ranger Administrative UI
- HAWQ Ranger Plug-in Service
The Ranger Administrative UI is installed when you install HDP. You configure the Ranger service itself through Ambari. You configure HAWQ-Ranger authorization policies through the Ranger Administrative UI, which you can access at `http://<ranger-admin-node>:6080`.
-Installing or upgrading to HAWQ 2.2.0 installs the HAWQ Ranger Plug-in Service, but neither configures nor registers the plug-in.
+Installing or upgrading to HAWQ installs the HAWQ Ranger Plug-in Service, but neither configures nor registers the plug-in.
To use Ranger for managing HAWQ authentication events, you must first install and register several HAWQ JAR files on the Ranger Administration host. This one-time configuration establishes connectivity to your HAWQ cluster from the Ranger Administration host.
@@ -52,7 +52,7 @@ To use HAWQ Ranger integration, install a compatible Hadoop distribution and Apa
root@ranger-admin-node$ cd /usr/hdp/current/ranger-admin/ews/webapp/WEB-INF/classes/ranger-plugins
root@ranger-admin-node$ mkdir hawq
```
-3. Copy the necessary HAWQ JAR files (`postgresql-9.1-901-1.jdbc4.jar` and `ranger-plugin-admin-2.2.0.0.jar`) from the HAWQ master node to the new directory:
+3. Copy the necessary HAWQ JAR files (`postgresql-9.1-901-1.jdbc4.jar` and `ranger-plugin-admin-<version>.jar`) from the HAWQ master node to the new directory:
``` bash
root@ranger-admin-node$ scp <hawq-master>:/usr/local/hawq/ranger/lib/*.jar ./hawq
@@ -81,10 +81,10 @@ To use HAWQ Ranger integration, install a compatible Hadoop distribution and Apa
HAWQ PORT = 5432
HAWQ User = gpadmin
HAWQ Password = [*******]
- HAWQ service definition was not found in Ranger Admin, creating it by uploading /usr/local/hawq_2_2_0_0/ranger/etc/ranger-servicedef-hawq.json
+ HAWQ service definition was not found in Ranger Admin, creating it by uploading /usr/local/hawq_<version>/ranger/etc/ranger-servicedef-hawq.json
HAWQ service instance was not found in Ranger Admin, creating it.
- Updated POLICY_MGR_URL to http://ranger_host:6080 in /usr/local/hawq_2_2_0_0/ranger/etc/rps.properties
- Updated default value of JAVA_HOME to /usr/jdk64/jdk1.8.0_77 in /usr/local/hawq_2_2_0_0/ranger/etc/rps.properties
+ Updated POLICY_MGR_URL to http://ranger_host:6080 in /usr/local/hawq_<version>/ranger/etc/rps.properties
+ Updated default value of JAVA_HOME to /usr/jdk64/jdk1.8.0_77 in /usr/local/hawq_<version>/ranger/etc/rps.properties
```
**Note**: You can also enter the short form of the command: `./enable-ranger-plugin.sh -r` and the script will prompt you for entries.