You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@ambari.apache.org by "Yusaku Sako (JIRA)" <ji...@apache.org> on 2015/02/23 23:24:11 UTC

[jira] [Commented] (AMBARI-9757) When toggling Ranger HBase plugin, UI gives incorrect recommendations

    [ https://issues.apache.org/jira/browse/AMBARI-9757?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14333989#comment-14333989 ] 

Yusaku Sako commented on AMBARI-9757:
-------------------------------------

+1 for the patch.

> When toggling Ranger HBase plugin, UI gives incorrect recommendations
> ---------------------------------------------------------------------
>
>                 Key: AMBARI-9757
>                 URL: https://issues.apache.org/jira/browse/AMBARI-9757
>             Project: Ambari
>          Issue Type: Bug
>    Affects Versions: 2.0.0
>            Reporter: Srimanth Gunturi
>            Assignee: Srimanth Gunturi
>             Fix For: 2.0.0
>
>         Attachments: AMBARI-9757.patch
>
>
> When toggling Ranger HBase plugin, UI gives incorrect recommendations for HBase coprocessor properties.
> *1. Start with HBase properties with for a Kerberized cluster:*
> hbase.coprocessor.master.classes: org.apache.hadoop.hbase.security.access.AccessController
> hbase.coprocessor.region.classes: org.apache.hadoop.hbase.security.token.TokenProvider,org.apache.hadoop.hbase.security.access.SecureBulkLoadEndpoint,org.apache.hadoop.hbase.security.access.AccessController
> hbase.security.authorization: true
> *Action: Enable Ranger Plugin for HBase*
> AR: *UI recommended changes:*
> hbase.coprocessor.master.classes: com.xasecure.authorization.hbase.XaSecureAuthorizationCoprocessor
> hbase.coprocessor.region.classes: org.apache.hadoop.hbase.security.access.AccessController,com.xasecure.authorization.hbase.XaSecureAuthorizationCoprocessor
> ER: *UI recommended changes:*
> hbase.coprocessor.master.classes: com.xasecure.authorization.hbase.XaSecureAuthorizationCoprocessor
> hbase.coprocessor.region.classes: org.apache.hadoop.hbase.security.token.TokenProvider,org.apache.hadoop.hbase.security.access.SecureBulkLoadEndpoint,com.xasecure.authorization.hbase.XaSecureAuthorizationCoprocessor
> *2. Start with HBase properties with for a Kerberized cluster with HBase Ranger plugin enabled:*
> hbase.coprocessor.master.classes: com.xasecure.authorization.hbase.XaSecureAuthorizationCoprocessor
> hbase.coprocessor.region.classes: org.apache.hadoop.hbase.security.token.TokenProvider,org.apache.hadoop.hbase.security.access.SecureBulkLoadEndpoint,com.xasecure.authorization.hbase.XaSecureAuthorizationCoprocessor
> hbase.security.authorization: true
> *Action: Disable Ranger Plugin for HBase*
> AR: *UI recommended changes:*
> hbase.coprocessor.master.classes: blank
> hbase.coprocessor.region.classes: com.xasecure.authorization.hbase.XaSecureAuthorizationCoprocessor
> ER: *UI recommended changes:*
> hbase.coprocessor.master.classes: org.apache.hadoop.hbase.security.access.AccessController
> hbase.coprocessor.region.classes: org.apache.hadoop.hbase.security.token.TokenProvider,org.apache.hadoop.hbase.security.access.SecureBulkLoadEndpoint,org.apache.hadoop.hbase.security.access.AccessController



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)