[jira] [Comment Edited] (RANGER-812) ranger policies malfunctioned

["bensonshih (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/RANGER-812?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15097722#comment-15097722 ] 

bensonshih edited comment on RANGER-812 at 1/14/16 6:53 AM:
------------------------------------------------------------

Hi all,
When I disabled "yarn.acl.enable" property in YARN configs, Ranger can works fine!
However in kafka, I tried to execute consume/publish command with disabled all policies of Ranger, it did not deny both consume/publish behavior. Did I miss any configuration setting or misunderstanding?

Executing consume/publish steps:

Step1: connect to kafka-broker server

step2: changer user
$ su kafka

step3: go to bin folder
$ cd /usr/hdp/2.3.0.0-2557/kafka/bin

step4: create a top
$ ./kafka-topics.sh --create --zookeeper {hostname}:2181 --replication-factor 1 --partitions 1 --topic test

step5: execute publish message
$ ./kafka-console-producer.sh --broker-list {hostname}:6667--topic test
This is a test message
//it should be denied right?

step6: execute consume message
$ ./kafka-console-consumer.sh --zookeeper {hostname}:2181 --topic test --from-beginning
//it also should be denied?



was (Author: fantastic340):
Hi all,
When I disabled "yarn.acl.enable" property in YARN configs, Ranger can works fine!
However in kafka, I tried to execute consume/publish command with disabled all policies of Ranger, it did not deny both consume/publish behavior. Did I miss any configuration setting or misunderstanding?

Executing consume/publish steps:

Step1: connect to kafka-broker server

step2: changer user
# su kafka

step3: go to bin folder
# cd /usr/hdp/2.3.0.0-2557/kafka/bin

step4: create a top
# ./kafka-topics.sh --create --zookeeper {hostname}:2181 --replication-factor 1 --partitions 1 --topic test

step5: execute publish message
# ./kafka-console-producer.sh --broker-list {hostname}:6667--topic test
This is a test message
//it should be denied right?

step6: execute consume message
# ./kafka-console-consumer.sh --zookeeper {hostname}:2181 --topic test --from-beginning
//it also should be denied?


> ranger policies malfunctioned
> -----------------------------
>
>                 Key: RANGER-812
>                 URL: https://issues.apache.org/jira/browse/RANGER-812
>             Project: Ranger
>          Issue Type: Bug
>          Components: plugins
>    Affects Versions: 0.5.0
>            Reporter: bensonshih
>            Priority: Minor
>
> After I enable ranger for yarn and kafka, then I disabled all the policies of ranger. however, I still can execute commands like create topic(kafka) or do some mapreduce job(yarn),it didn`t show any permission denied message



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)