Re: Review Request 71260: RANGER-2512:RangerRolesRESTClient for serving user group roles to the plugins for evaluation

2019-09-12 Thread Abhay Kulkarni 

---
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/71260/#review217710
---




agents-common/src/main/java/org/apache/ranger/plugin/policyengine/RangerPolicyEngineImpl.java
Line 95 (original), 100 (patched)


When policy-engine is built from policy-deltas, this API is called. This 
needs to be provided with rangerRoles as well.



agents-common/src/main/java/org/apache/ranger/plugin/policyengine/RangerPolicyEngineImpl.java
Line 218 (original), 223 (patched)


After rangerRoles are provided to this API, the code to build 
userRoleMapping and groupRoleMapping needs to be inserted here.



agents-common/src/main/java/org/apache/ranger/plugin/policyengine/RangerPolicyEngineImpl.java
Line 336 (original), 348 (patched)


This API needs to have rangerRoles as an additional parameter. Please 
review.



agents-common/src/test/java/org/apache/ranger/plugin/policyengine/TestPolicyEngine.java
Lines 451 (patched)


It appears that rangerRoles are hard-coded in the TestPolicyEngine code. It 
will be better to enhance TestPolicyEngine code to accept this information as 
part of the JSON used to specify test-data.



security-admin/src/main/java/org/apache/ranger/biz/AssetMgr.java
Lines 700 (patched)


PluginInfo updates are managed here. Is there corresponding GUI code change 
included here to display it?



security-admin/src/main/java/org/apache/ranger/biz/RoleDBStore.java
Lines 275 (patched)


The global state for maintaing role version (across all services) may cause 
unnecessary role-downloads when a role that is not used in any policy of a 
service is modified. Is using global role version in x_global_state for 
determining if roles need to be downloaded helpful here?



security-admin/src/main/java/org/apache/ranger/common/RangerRoleCache.java
Lines 112 (patched)


This code block is not needed. Please consider removing this and related 
code.


- Abhay Kulkarni


On Sept. 5, 2019, 6 p.m., Ramesh Mani wrote:
> 
> ---
> This is an automatically generated e-mail. To reply, visit:
> https://reviews.apache.org/r/71260/
> ---
> 
> (Updated Sept. 5, 2019, 6 p.m.)
> 
> 
> Review request for ranger, Don Bosco Durai, Gautam Borad, Abhay Kulkarni, 
> Madhan Neethiraj, Pradeep Agrawal, Selvamohan Neethiraj, Sailaja Polavarapu, 
> and Velmurugan Periasamy.
> 
> 
> Bugs: RANGER-2512
> https://issues.apache.org/jira/browse/RANGER-2512
> 
> 
> Repository: ranger
> 
> 
> Description
> ---
> 
> RANGER-2512:RangerRolesRESTClient for serving user group
>  roles to the plugins for evaluation
> 
> 
> Diffs
> -
> 
>   
> agents-common/src/main/java/org/apache/ranger/admin/client/AbstractRangerAdminClient.java
>  6367235 
>   
> agents-common/src/main/java/org/apache/ranger/admin/client/RangerAdminClient.java
>  b09a9be 
>   
> agents-common/src/main/java/org/apache/ranger/admin/client/RangerAdminRESTClient.java
>  62d5776 
>   
> agents-common/src/main/java/org/apache/ranger/plugin/model/RangerPluginInfo.java
>  e3f9f15 
>   
> agents-common/src/main/java/org/apache/ranger/plugin/policyengine/RangerPolicyEngine.java
>  d201aa6 
>   
> agents-common/src/main/java/org/apache/ranger/plugin/policyengine/RangerPolicyEngineCache.java
>  015ca09 
>   
> agents-common/src/main/java/org/apache/ranger/plugin/policyengine/RangerPolicyEngineImpl.java
>  51cd658 
>   
> agents-common/src/main/java/org/apache/ranger/plugin/service/RangerAuthContext.java
>  3d0f107 
>   
> agents-common/src/main/java/org/apache/ranger/plugin/service/RangerBasePlugin.java
>  8d89a18 
>   
> agents-common/src/main/java/org/apache/ranger/plugin/util/PolicyRefresher.java
>  0e52c31 
>   
> agents-common/src/main/java/org/apache/ranger/plugin/util/RangerRESTUtils.java
>  310f69d 
>   agents-common/src/main/java/org/apache/ranger/plugin/util/RangerRoles.java 
> PRE-CREATION 
>   
> agents-common/src/main/java/org/apache/ranger/plugin/util/RangerRolesProvider.java
>  PRE-CREATION 
>   
> agents-common/src/main/java/org/apache/ranger/plugin/util/RangerRolesUtil.java
>  PRE-CREATION 
>   
> agents-common/src/main/java/org/apache/ranger/plugin/util/ServicePolicies.java
>  8c63434 
>   
> agents-common/src/test/java/org/apache/ranger/plugin/policyengine/TestPolicyEngine.java
>  7180675 
>   
> knox-agent/src/main/java/org/apache/ranger/admin/client/RangerAdminJersey2RESTClient.java
>  f57012e 
>

Re: Review Request 71477: RANGER-2564:Avoid recursive audit log in Solr Plugin by user solr when plugin is enabled for ranger_audits collection-addon to exclude deny also from loging for user SOLR

2019-09-12 Thread Madhan Neethiraj 

---
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/71477/#review217707
---


Ship it!




Ship It!

- Madhan Neethiraj


On Sept. 12, 2019, 6:57 p.m., Ramesh Mani wrote:
> 
> ---
> This is an automatically generated e-mail. To reply, visit:
> https://reviews.apache.org/r/71477/
> ---
> 
> (Updated Sept. 12, 2019, 6:57 p.m.)
> 
> 
> Review request for ranger, Abhay Kulkarni and Velmurugan Periasamy.
> 
> 
> Bugs: RANGER-2564
> https://issues.apache.org/jira/browse/RANGER-2564
> 
> 
> Repository: ranger
> 
> 
> Description
> ---
> 
> RANGER-2564:Avoid recursive audit log in Solr Plugin by user solr when plugin 
> is enabled for ranger_audits collection-addon to exclude deny also from 
> loging for user SOLR
> 
> 
> Diffs
> -
> 
>   
> plugin-solr/src/main/java/org/apache/ranger/authorization/solr/authorizer/RangerSolrAuditHandler.java
>  c6e7beb 
> 
> 
> Diff: https://reviews.apache.org/r/71477/diff/1/
> 
> 
> Testing
> ---
> 
> - This addon  patch for RANGER-2564 to exclude deny also from loging for user 
> solr in ranger_audits collection.
> - This is done to avoid the recursive call.
> 
> 
> Thanks,
> 
> Ramesh Mani
> 
>

Re: Review Request 71477: RANGER-2564:Avoid recursive audit log in Solr Plugin by user solr when plugin is enabled for ranger_audits collection-addon to exclude deny also from loging for user SOLR

2019-09-12 Thread Abhay Kulkarni 

---
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/71477/#review217706
---


Ship it!




Ship It!

- Abhay Kulkarni


On Sept. 12, 2019, 6:57 p.m., Ramesh Mani wrote:
> 
> ---
> This is an automatically generated e-mail. To reply, visit:
> https://reviews.apache.org/r/71477/
> ---
> 
> (Updated Sept. 12, 2019, 6:57 p.m.)
> 
> 
> Review request for ranger, Abhay Kulkarni and Velmurugan Periasamy.
> 
> 
> Bugs: RANGER-2564
> https://issues.apache.org/jira/browse/RANGER-2564
> 
> 
> Repository: ranger
> 
> 
> Description
> ---
> 
> RANGER-2564:Avoid recursive audit log in Solr Plugin by user solr when plugin 
> is enabled for ranger_audits collection-addon to exclude deny also from 
> loging for user SOLR
> 
> 
> Diffs
> -
> 
>   
> plugin-solr/src/main/java/org/apache/ranger/authorization/solr/authorizer/RangerSolrAuditHandler.java
>  c6e7beb 
> 
> 
> Diff: https://reviews.apache.org/r/71477/diff/1/
> 
> 
> Testing
> ---
> 
> - This addon  patch for RANGER-2564 to exclude deny also from loging for user 
> solr in ranger_audits collection.
> - This is done to avoid the recursive call.
> 
> 
> Thanks,
> 
> Ramesh Mani
> 
>

Review Request 71477: RANGER-2564:Avoid recursive audit log in Solr Plugin by user solr when plugin is enabled for ranger_audits collection-addon to exclude deny also from loging for user SOLR

2019-09-12 Thread Ramesh Mani 

---
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/71477/
---

Review request for ranger, Abhay Kulkarni and Velmurugan Periasamy.


Bugs: RANGER-2564
https://issues.apache.org/jira/browse/RANGER-2564


Repository: ranger


Description
---

RANGER-2564:Avoid recursive audit log in Solr Plugin by user solr when plugin 
is enabled for ranger_audits collection-addon to exclude deny also from loging 
for user SOLR


Diffs
-

  
plugin-solr/src/main/java/org/apache/ranger/authorization/solr/authorizer/RangerSolrAuditHandler.java
 c6e7beb 


Diff: https://reviews.apache.org/r/71477/diff/1/


Testing
---

- This addon  patch for RANGER-2564 to exclude deny also from loging for user 
solr in ranger_audits collection.
- This is done to avoid the recursive call.


Thanks,

Ramesh Mani

Re: Review Request 71473: RANGER-2567: Ranger fails to connect wired Solr

2019-09-12 Thread Madhan Neethiraj 


> On Sept. 12, 2019, 4:04 p.m., Madhan Neethiraj wrote:
> > embeddedwebserver/src/main/java/org/apache/ranger/server/tomcat/EmbeddedServer.java
> > Lines 470 (patched)
> > 
> >
> > Instead of updating system properties, I suggest to set SSLContext with:
> > 
> >   SSLConext sslContext = getSSLContext(); // from application config; 
> > refer to RangerRESTClient.getSSLContext()
> > 
> >   SSLContext.setDefault(sslContext);

if calling SSLContext.setDefault() doesn't work, try the following alternate (a 
little more involved):

HttpClientUtil.setSchemaRegistryProvider(new 
MySchemaRegistryProvider());

private static final class MySchemaRegistryProvider extends 
HttpClientUtil.SchemaRegistryProvider {
private MySchemaRegistryProvider() {
}

@Override
public Registry getSchemaRegistry() {
RegistryBuilder builder = 
RegistryBuilder.create();

builder.register("http", 
PlainConnectionSocketFactory.getSocketFactory());

SSLContext sslContext = getSslContext();

if (sslContext != null) {
builder.register("https", new 
SSLConnectionSocketFactory(sslContext));
} else {
builder.register("https", 
SSLConnectionSocketFactory.getSystemSocketFactory());
}

return builder.build();
}

// if application is configured with truststore details, create 
SslContext
// else return null
private SSLContext getSslContext() {
...
}
}


- Madhan


---
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/71473/#review217704
---


On Sept. 12, 2019, 11:33 a.m., Pradeep Agrawal wrote:
> 
> ---
> This is an automatically generated e-mail. To reply, visit:
> https://reviews.apache.org/r/71473/
> ---
> 
> (Updated Sept. 12, 2019, 11:33 a.m.)
> 
> 
> Review request for ranger, Ankita Sinha, bhavik patel, Gautam Borad, Abhay 
> Kulkarni, Madhan Neethiraj, Mehul Parikh, Mugdha Varadkar, Nikhil P, Nitin 
> Galave, Ramesh Mani, Sailaja Polavarapu, and Velmurugan Periasamy.
> 
> 
> Bugs: RANGER-2567
> https://issues.apache.org/jira/browse/RANGER-2567
> 
> 
> Repository: ranger
> 
> 
> Description
> ---
> 
> ** Problem Statement: ** Ranger fails to connect wired SSL through configured 
> ranger truststore file. Currently it works when solr certificate is added in 
> jdk ca certs. Though in the file PropertiesUtil.java, truststore related 
> System properties has been provided its not being considered probably 
> Ranger's embeded tomcat server starts prior to load of Ranger's truststore 
> configs via PropertiesUtil.java.
> 
> ** Proposed Solution: ** Proposed patch contain changes in 
> EmbeddedServer.java file so that truststore related configs can be 
> initialized prior to Ranger's embeded tomcat server start.
> 
> 
> Diffs
> -
> 
>   embeddedwebserver/pom.xml 8574c5721 
>   
> embeddedwebserver/src/main/java/org/apache/ranger/server/tomcat/EmbeddedServer.java
>  b39212a79 
>   src/main/assembly/admin-web.xml 449a11243 
> 
> 
> Diff: https://reviews.apache.org/r/71473/diff/2/
> 
> 
> Testing
> ---
> 
> Without patch solr collection was failing and after the patch ranger is able 
> to create solr collection and ranger UI is able to fetch access audit records 
> from solr.
> 
> 
> Thanks,
> 
> Pradeep Agrawal
> 
>

Re: Review Request 71473: RANGER-2567: Ranger fails to connect wired Solr

2019-09-12 Thread Madhan Neethiraj 

---
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/71473/#review217704
---




embeddedwebserver/src/main/java/org/apache/ranger/server/tomcat/EmbeddedServer.java
Lines 470 (patched)


Instead of updating system properties, I suggest to set SSLContext with:

  SSLConext sslContext = getSSLContext(); // from application config; refer 
to RangerRESTClient.getSSLContext()

  SSLContext.setDefault(sslContext);


- Madhan Neethiraj


On Sept. 12, 2019, 11:33 a.m., Pradeep Agrawal wrote:
> 
> ---
> This is an automatically generated e-mail. To reply, visit:
> https://reviews.apache.org/r/71473/
> ---
> 
> (Updated Sept. 12, 2019, 11:33 a.m.)
> 
> 
> Review request for ranger, Ankita Sinha, bhavik patel, Gautam Borad, Abhay 
> Kulkarni, Madhan Neethiraj, Mehul Parikh, Mugdha Varadkar, Nikhil P, Nitin 
> Galave, Ramesh Mani, Sailaja Polavarapu, and Velmurugan Periasamy.
> 
> 
> Bugs: RANGER-2567
> https://issues.apache.org/jira/browse/RANGER-2567
> 
> 
> Repository: ranger
> 
> 
> Description
> ---
> 
> ** Problem Statement: ** Ranger fails to connect wired SSL through configured 
> ranger truststore file. Currently it works when solr certificate is added in 
> jdk ca certs. Though in the file PropertiesUtil.java, truststore related 
> System properties has been provided its not being considered probably 
> Ranger's embeded tomcat server starts prior to load of Ranger's truststore 
> configs via PropertiesUtil.java.
> 
> ** Proposed Solution: ** Proposed patch contain changes in 
> EmbeddedServer.java file so that truststore related configs can be 
> initialized prior to Ranger's embeded tomcat server start.
> 
> 
> Diffs
> -
> 
>   embeddedwebserver/pom.xml 8574c5721 
>   
> embeddedwebserver/src/main/java/org/apache/ranger/server/tomcat/EmbeddedServer.java
>  b39212a79 
>   src/main/assembly/admin-web.xml 449a11243 
> 
> 
> Diff: https://reviews.apache.org/r/71473/diff/2/
> 
> 
> Testing
> ---
> 
> Without patch solr collection was failing and after the patch ranger is able 
> to create solr collection and ranger UI is able to fetch access audit records 
> from solr.
> 
> 
> Thanks,
> 
> Pradeep Agrawal
> 
>

Re: Review Request 71473: RANGER-2567: Ranger fails to connect wired Solr

2019-09-12 Thread Abhay Kulkarni 

---
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/71473/#review217703
---




embeddedwebserver/src/main/java/org/apache/ranger/server/tomcat/EmbeddedServer.java
Lines 459 (patched)


If this code is identical to code in PropertiesUtil.java (lines 75-99), 
please refactor PropertiesUtil.java such that a static 
PropertiesUtil.setTrustStore() encapsulates it. Then, it may called from here 
and code duplication may be avoided.
Also, in PropertiesUtil.java, there is a special treatment if 
trustStorePassword is set to "none". That seems to be missing from here.

Please review


- Abhay Kulkarni


On Sept. 12, 2019, 11:33 a.m., Pradeep Agrawal wrote:
> 
> ---
> This is an automatically generated e-mail. To reply, visit:
> https://reviews.apache.org/r/71473/
> ---
> 
> (Updated Sept. 12, 2019, 11:33 a.m.)
> 
> 
> Review request for ranger, Ankita Sinha, bhavik patel, Gautam Borad, Abhay 
> Kulkarni, Madhan Neethiraj, Mehul Parikh, Mugdha Varadkar, Nikhil P, Nitin 
> Galave, Ramesh Mani, Sailaja Polavarapu, and Velmurugan Periasamy.
> 
> 
> Bugs: RANGER-2567
> https://issues.apache.org/jira/browse/RANGER-2567
> 
> 
> Repository: ranger
> 
> 
> Description
> ---
> 
> ** Problem Statement: ** Ranger fails to connect wired SSL through configured 
> ranger truststore file. Currently it works when solr certificate is added in 
> jdk ca certs. Though in the file PropertiesUtil.java, truststore related 
> System properties has been provided its not being considered probably 
> Ranger's embeded tomcat server starts prior to load of Ranger's truststore 
> configs via PropertiesUtil.java.
> 
> ** Proposed Solution: ** Proposed patch contain changes in 
> EmbeddedServer.java file so that truststore related configs can be 
> initialized prior to Ranger's embeded tomcat server start.
> 
> 
> Diffs
> -
> 
>   embeddedwebserver/pom.xml 8574c5721 
>   
> embeddedwebserver/src/main/java/org/apache/ranger/server/tomcat/EmbeddedServer.java
>  b39212a79 
>   src/main/assembly/admin-web.xml 449a11243 
> 
> 
> Diff: https://reviews.apache.org/r/71473/diff/2/
> 
> 
> Testing
> ---
> 
> Without patch solr collection was failing and after the patch ranger is able 
> to create solr collection and ranger UI is able to fetch access audit records 
> from solr.
> 
> 
> Thanks,
> 
> Pradeep Agrawal
> 
>

Re: Review Request 71472: RANGER-2534 : Official logo for Apache Ranger

2019-09-12 Thread Madhan Neethiraj 

---
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/71472/#review217702
---


Ship it!




Ship It!

- Madhan Neethiraj


On Sept. 12, 2019, 12:22 p.m., Nitin Galave wrote:
> 
> ---
> This is an automatically generated e-mail. To reply, visit:
> https://reviews.apache.org/r/71472/
> ---
> 
> (Updated Sept. 12, 2019, 12:22 p.m.)
> 
> 
> Review request for ranger, Gautam Borad, Madhan Neethiraj, Mehul Parikh, 
> Pradeep Agrawal, and Velmurugan Periasamy.
> 
> 
> Bugs: RANGER-2534
> https://issues.apache.org/jira/browse/RANGER-2534
> 
> 
> Repository: ranger
> 
> 
> Description
> ---
> 
> Coming up with few suggestions to finalise Logo for Ranger. And also changed 
> ranger admin UI colour.
> 
> 
> Diffs
> -
> 
>   security-admin/src/main/resources/conf.dist/security-applicationContext.xml 
> e6b078b 
>   security-admin/src/main/webapp/favicon.ico 
> 8a163fbc628488b0f58bc23dc517294ce9aff557 
>   security-admin/src/main/webapp/images/favicon.ico PRE-CREATION 
>   security-admin/src/main/webapp/images/logo.png 
> 47718f922367d12d43d7cf74aa567e6f25b6ebee 
>   security-admin/src/main/webapp/images/ranger_logo.png PRE-CREATION 
>   security-admin/src/main/webapp/index.html ebcea3b 
>   security-admin/src/main/webapp/login.jsp 4202a9e 
>   security-admin/src/main/webapp/styles/xa.css 3968636 
>   
> security-admin/src/main/webapp/templates/common/ServiceManagerLayout_tmpl.html
>  08082bd 
>   
> security-admin/src/main/webapp/templates/security_zone/ZoneResourceItem_tmpl.html
>  31dd595 
>   security-admin/src/main/webapp/templates/users/UserTableLayout_tmpl.html 
> 6562bac 
> 
> 
> Diff: https://reviews.apache.org/r/71472/diff/1/
> 
> 
> Testing
> ---
> 
> 1)Verified that Ranger logo and fevicon icon is added on Ranger UI.
> 2)Verified colour schema changes on Ranger UI.
> 
> 
> Thanks,
> 
> Nitin Galave
> 
>

Review Request 71472: RANGER-2534 : Official logo for Apache Ranger

2019-09-12 Thread Nitin Galave 

---
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/71472/
---

Review request for ranger, Gautam Borad, Madhan Neethiraj, Mehul Parikh, 
Pradeep Agrawal, and Velmurugan Periasamy.


Bugs: RANGER-2534
https://issues.apache.org/jira/browse/RANGER-2534


Repository: ranger


Description
---

Coming up with few suggestions to finalise Logo for Ranger. And also changed 
ranger admin UI colour.


Diffs
-

  security-admin/src/main/resources/conf.dist/security-applicationContext.xml 
e6b078b 
  security-admin/src/main/webapp/favicon.ico 
8a163fbc628488b0f58bc23dc517294ce9aff557 
  security-admin/src/main/webapp/images/favicon.ico PRE-CREATION 
  security-admin/src/main/webapp/images/logo.png 
47718f922367d12d43d7cf74aa567e6f25b6ebee 
  security-admin/src/main/webapp/images/ranger_logo.png PRE-CREATION 
  security-admin/src/main/webapp/index.html ebcea3b 
  security-admin/src/main/webapp/login.jsp 4202a9e 
  security-admin/src/main/webapp/styles/xa.css 3968636 
  
security-admin/src/main/webapp/templates/common/ServiceManagerLayout_tmpl.html 
08082bd 
  
security-admin/src/main/webapp/templates/security_zone/ZoneResourceItem_tmpl.html
 31dd595 
  security-admin/src/main/webapp/templates/users/UserTableLayout_tmpl.html 
6562bac 


Diff: https://reviews.apache.org/r/71472/diff/1/


Testing
---

1)Verified that Ranger logo and fevicon icon is added on Ranger UI.
2)Verified colour schema changes on Ranger UI.


Thanks,

Nitin Galave

[jira] [Updated] (RANGER-2567) Ranger fails to connect wired Solr

2019-09-12 Thread Pradeep Agrawal (Jira) 


 [ 
https://issues.apache.org/jira/browse/RANGER-2567?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Pradeep Agrawal updated RANGER-2567:

Summary: Ranger fails to connect wired Solr  (was: Ranger fails to connect 
wired SSL)

> Ranger fails to connect wired Solr
> --
>
> Key: RANGER-2567
> URL: https://issues.apache.org/jira/browse/RANGER-2567
> Project: Ranger
>  Issue Type: Improvement
>  Components: Ranger
>Affects Versions: 2.0.0
>Reporter: Pradeep Agrawal
>Assignee: Pradeep Agrawal
>Priority: Major
> Fix For: 2.1.0
>
>
> Ranger fails to connect wired SSL through configured ranger truststore file. 
> Currently it works when solr certificate is added in jdk ca certs. 



--
This message was sent by Atlassian Jira
(v8.3.2#803003)

Review Request 71473: RANGER-2567: Ranger fails to connect wired SSL

2019-09-12 Thread Pradeep Agrawal 

---
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/71473/
---

Review request for ranger, Ankita Sinha, bhavik patel, Gautam Borad, Abhay 
Kulkarni, Madhan Neethiraj, Mehul Parikh, Mugdha Varadkar, Nikhil P, Nitin 
Galave, Ramesh Mani, Sailaja Polavarapu, and Velmurugan Periasamy.


Bugs: RANGER-2567
https://issues.apache.org/jira/browse/RANGER-2567


Repository: ranger


Description
---

** Problem Statement: ** Ranger fails to connect wired SSL through configured 
ranger truststore file. Currently it works when solr certificate is added in 
jdk ca certs. Though in the file PropertiesUtil.java, truststore related System 
properties has been provided its not being considered probably Ranger's embeded 
tomcat server starts prior to load of Ranger's truststore configs via 
PropertiesUtil.java.

** Proposed Solution: ** Proposed patch contain changes in EmbeddedServer.java 
file so that truststore related configs can be initialized prior to Ranger's 
embeded tomcat server start.


Diffs
-

  embeddedwebserver/pom.xml 8574c5721 
  
embeddedwebserver/src/main/java/org/apache/ranger/server/tomcat/EmbeddedServer.java
 b39212a79 
  src/main/assembly/admin-web.xml 449a11243 


Diff: https://reviews.apache.org/r/71473/diff/1/


Testing
---

Without patch solr collection was failing and after the patch ranger is able to 
create solr collection and ranger UI is able to fetch access audit records from 
solr.


Thanks,

Pradeep Agrawal

[jira] [Updated] (RANGER-2534) Official logo for Apache Ranger

2019-09-12 Thread Nitin Galave (Jira) 


 [ 
https://issues.apache.org/jira/browse/RANGER-2534?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Nitin Galave updated RANGER-2534:
-
Attachment: 0002-RANGER-2534.patch

> Official logo for Apache Ranger
> ---
>
> Key: RANGER-2534
> URL: https://issues.apache.org/jira/browse/RANGER-2534
> Project: Ranger
>  Issue Type: Bug
>  Components: Ranger
>Reporter: Nitin Galave
>Assignee: Nitin Galave
>Priority: Major
> Attachments: 0001-RANGER-2534.patch, 0002-RANGER-2534.patch, 
> Apache_Ranger.png, favicon_icon.ico, landing_Page.png, loginPage_1.png, 
> ranger_logo.png, ranger_policy_table.png, user_group_listing_table.png
>
>
> Coming up with few suggestions to finalise Logo for Ranger. And also changed 
> ranger admin UI colour. 



--
This message was sent by Atlassian Jira
(v8.3.2#803003)

[jira] [Created] (RANGER-2567) Ranger fails to connect wired SSL

2019-09-12 Thread Pradeep Agrawal (Jira) 
Pradeep Agrawal created RANGER-2567:
---

 Summary: Ranger fails to connect wired SSL
 Key: RANGER-2567
 URL: https://issues.apache.org/jira/browse/RANGER-2567
 Project: Ranger
  Issue Type: Improvement
  Components: Ranger
Affects Versions: 2.0.0
Reporter: Pradeep Agrawal
Assignee: Pradeep Agrawal
 Fix For: 2.1.0


Ranger fails to connect wired SSL through configured ranger truststore file. 
Currently it works when solr certificate is added in jdk ca certs. 



--
This message was sent by Atlassian Jira
(v8.3.2#803003)

[jira] [Updated] (RANGER-2566) Optimize logging code of RangerHiveAuthorizer

2019-09-12 Thread Haihui Xu (Jira) 


 [ 
https://issues.apache.org/jira/browse/RANGER-2566?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Haihui Xu updated RANGER-2566:
--
Labels: patch  (was: )

> Optimize  logging code of  RangerHiveAuthorizer 
> 
>
> Key: RANGER-2566
> URL: https://issues.apache.org/jira/browse/RANGER-2566
> Project: Ranger
>  Issue Type: Improvement
>  Components: plugins
>Reporter: Haihui Xu
>Assignee: Haihui Xu
>Priority: Major
>  Labels: patch
> Fix For: 0.5.3, 1.1.0, 2.0.0
>
> Attachments: RANGER-2566.patch
>
>
> The log code :
> {code:java}
> LOG.info("grantPrivileges(): " + request);
>   if(LOG.isDebugEnabled()) {
>   LOG.debug("grantPrivileges(): " + request);
>   }
> {code}
> It looks strange. Maybe need  to potimize.



--
This message was sent by Atlassian Jira
(v8.3.2#803003)