[
https://issues.apache.org/jira/browse/RANGER-1847?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16214017#comment-16214017
]
Don Bosco Durai commented on RANGER-1847:
-----------------------------------------
[~rollantz], can I suggest to move this discussion to the
u...@ranger.apache.org mailing list? We can close this JIRA and create one if
there is an issue found which needs to be fixed.
You might also have to provide additional information regarding what your
overall setup is. In the case of Kafka, user level access control works only if
you have Kerberos enabled, otherwise, Kafka doesn't know which user is making
the call. If you don't have Kerberos enabled, then you can still use Ranger to
enforce IP level permission checks.
Ranger audits everything into Solr. If you are setting up manually, then I hope
you followed this document
https://cwiki.apache.org/confluence/display/RANGER/Install+and+Configure+Solr+for+Ranger+Audits+-+Apache+Ranger+0.5
to setup Solr and the plugins.
If still not working, we might need to look into the log files.
If you are just trying it out, then I recommend using Ambari to install Kafka
and enable Ranger. The Ranger team has worked with the Ambari team to seamless
integration between all the components in the Hadoop ecosystem. It is also very
easy to update the properties centrally from Ambari and push it to Ranger or
any of the components Ranger supports.
> Ranger Kafka Plugin sasl.enabled.mechanisms=PLAIN
> -------------------------------------------------
>
> Key: RANGER-1847
> URL: https://issues.apache.org/jira/browse/RANGER-1847
> Project: Ranger
> Issue Type: Test
> Components: plugins
> Affects Versions: 0.6.3, 0.7.1
> Environment: ubuntu stand-alone hobby environment
> Reporter: Ronald van de Kuil
> Priority: Minor
>
> I am such a NOOB hobby-ing away. And I like it. ;)
> I figured I would give it a try to setup Kafka to use the
> sasl.enabled.mechanisms of type PLAIN with ranger to do the authorisation and
> the auditing (instead of GSSAPI).
> I got it to work pretty far. KafkaServer gets into state SaslAuthenticated
> with Zookeeper.
> Next it loads the ranger kafka plugin. Then the RangerKafkaAuthorizer
> complains about Kerberos.
> I then updated the CLASSPATH and it complains about something else.
> I am not sure how to classify this issue.
--
This message was sent by Atlassian JIRA
(v6.4.14#64029)
