Re: Review Request 62713: RANGER 1818: Good coding practice in Ranger recommended by static code analysis

2017-10-04 Thread Fatima Khan


> On Oct. 2, 2017, 5:44 p.m., Alejandro Fernandez wrote:
> > unixauthservice/src/main/java/org/apache/ranger/authentication/PasswordValidator.java
> > Line 117 (original), 117 (patched)
> > 
> >
> > Put a space after the ","

This patch has been committed.  Will get that improvement in next patch


- Fatima


---
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/62713/#review186857
---


On Sept. 30, 2017, 10:17 a.m., Fatima Khan wrote:
> 
> ---
> This is an automatically generated e-mail. To reply, visit:
> https://reviews.apache.org/r/62713/
> ---
> 
> (Updated Sept. 30, 2017, 10:17 a.m.)
> 
> 
> Review request for ranger, Don Bosco Durai, Gautam Borad, Abhay Kulkarni, 
> Madhan Neethiraj, Pradeep Agrawal, Ramesh Mani, Selvamohan Neethiraj, Sailaja 
> Polavarapu, and Velmurugan Periasamy.
> 
> 
> Bugs: RANGER-1818
> https://issues.apache.org/jira/browse/RANGER-1818
> 
> 
> Repository: ranger
> 
> 
> Description
> ---
> 
> Good coding practice in Ranger recommended by static code analysis on the 
> last commit made.Instead of printing the entire object we are printing only 
> the error message that gives clear information about the error.
> 
> 
> Diffs
> -
> 
>   
> unixauthclient/src/main/java/org/apache/ranger/authentication/unix/jaas/PamLoginModule.java
>  0b3d2e6 
>   
> unixauthservice/src/main/java/org/apache/ranger/authentication/PasswordValidator.java
>  20ced89 
> 
> 
> Diff: https://reviews.apache.org/r/62713/diff/1/
> 
> 
> Testing
> ---
> 
> 1.Tested SSO Authentication
> 2.Junit test was successful
> 
> 
> Thanks,
> 
> Fatima Khan
> 
>



[jira] [Commented] (RANGER-1817) Audit to Solr fails to log when the number of columns are in large number

2017-10-04 Thread Fatima Amjad Khan (JIRA)

[ 
https://issues.apache.org/jira/browse/RANGER-1817?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16191063#comment-16191063
 ] 

Fatima Amjad Khan commented on RANGER-1817:
---

committed to master 
https://github.com/apache/ranger/commit/11bf9152753fe20140b8143d437bc7bb4a2159af
committed to ranger-0.7 
https://github.com/apache/ranger/commit/f0a90a88773580cd2c703c935c6f065c09d19b97

> Audit to Solr fails to log when the number of columns are in large number
> -
>
> Key: RANGER-1817
> URL: https://issues.apache.org/jira/browse/RANGER-1817
> Project: Ranger
>  Issue Type: Bug
>  Components: Ranger
>Affects Versions: master, 0.7.1
>Reporter: Fatima Amjad Khan
>Assignee: Fatima Amjad Khan
> Fix For: master, 0.7.1
>
> Attachments: 0001-RANGER-1817.patch
>
>
> Audit to Solr fails to log when the number of columns are in large number. 
> This is due to Solr has a hard limit on solr.StrField and if this string is 
> exceeding max length 32766, it throws exception which causes the audit to 
> fail. To overcome this we need to trip this in Audit records and the best 
> place to do it is in solr schema for ranger-audits.
> For this we need to change the file managed_schema in ranger and commit it to 
> zookeeper.
> Change required in the managed_schema file is, find the following in the 
> managed_schema file and add this param to limit the length to 2500 max. 
> {noformat}
>  sortMissingLast="true" omitNorms="true">
> 
> 
> 
> 
> 
> 
> {noformat}



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)


[jira] [Updated] (RANGER-1819) Not able to delete group that is having special character(ampersand) from ranger admin

2017-10-04 Thread Nitin Galave (JIRA)

 [ 
https://issues.apache.org/jira/browse/RANGER-1819?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Nitin Galave updated RANGER-1819:
-
Attachment: (was: RANGER-1819.patch)

> Not able to delete group that is having special character(ampersand) from 
> ranger admin
> --
>
> Key: RANGER-1819
> URL: https://issues.apache.org/jira/browse/RANGER-1819
> Project: Ranger
>  Issue Type: Bug
>  Components: Ranger
>Affects Versions: 1.0.0
>Reporter: Deepak Sharma
>Assignee: Nitin Galave
> Fix For: 1.0.0, 0.7.2
>
>
> Trying to delete some of the group with special character from the ranger 
> admin, but not able to delete.
> This issue happens only if there is & in the username:
> groupspecial#$@&
> i see this error saying this user is not found, user does not seems to be 
> parsed correctly at the time of deletion, groupspecial#$@& is the username 
> whereas ranger tries to delete "groupspecial":
> {code}
> 2017-09-27 13:08:49,214 [http-bio-6182-exec-22] INFO  
> org.apache.ranger.biz.SessionMgr (SessionMgr.java:232) - UserSession Updated 
> to set new Permissions to User: hive
> 2017-09-27 13:08:49,214 [http-bio-6182-exec-22] INFO  
> org.apache.ranger.biz.SessionMgr (SessionMgr.java:184) - Login Success: 
> loginId=hive, sessionId=null, sessionId=8E3EF64186DAFB35987287CFB30A0B9B, 
> requestId=172.27.68.207, epoch=1506517729214
> 2017-09-27 13:08:52,333 [http-bio-6182-exec-21] INFO  
> org.apache.ranger.common.RESTErrorUtil (RESTErrorUtil.java:63) - Request 
> failed. loginId=admin, logMessage=groupspecial is Not Found
> javax.ws.rs.WebApplicationException
>   at 
> org.apache.ranger.common.RESTErrorUtil.createRESTException(RESTErrorUtil.java:56)
>   at 
> org.apache.ranger.common.RESTErrorUtil.createRESTException(RESTErrorUtil.java:325)
>   at 
> org.apache.ranger.service.XGroupService.getGroupByGroupName(XGroupService.java:104)
>   at 
> org.apache.ranger.rest.XUserREST.deleteSingleGroupByGroupName(XUserREST.java:1100)
>   at 
> org.apache.ranger.rest.XUserREST$$FastClassBySpringCGLIB$$b2a65360.invoke()
>   at 
> org.springframework.cglib.proxy.MethodProxy.invoke(MethodProxy.java:204)
>   at 
> org.springframework.aop.framework.CglibAopProxy$CglibMethodInvocation.invokeJoinpoint(CglibAopProxy.java:700)
>   at 
> org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:150)
>   at 
> org.springframework.security.access.intercept.aopalliance.MethodSecurityInterceptor.invoke(MethodSecurityInterceptor.java:64)
>   at 
> org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:172)
>   at 
> org.springframework.transaction.interceptor.TransactionInterceptor$1.proceedWithInvocation(TransactionInterceptor.java:96)
>   at 
> org.springframework.transaction.interceptor.TransactionAspectSupport.invokeWithinTransaction(TransactionAspectSupport.java:260)
> {code}
> *Same issue present in case of the users*
> Expected Result: It should delete the user/groups.



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)


[jira] [Updated] (RANGER-1819) Not able to delete group that is having special character(ampersand) from ranger admin

2017-10-04 Thread Nitin Galave (JIRA)

 [ 
https://issues.apache.org/jira/browse/RANGER-1819?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Nitin Galave updated RANGER-1819:
-
Attachment: RANGER-1819.1.patch

> Not able to delete group that is having special character(ampersand) from 
> ranger admin
> --
>
> Key: RANGER-1819
> URL: https://issues.apache.org/jira/browse/RANGER-1819
> Project: Ranger
>  Issue Type: Bug
>  Components: Ranger
>Affects Versions: 1.0.0
>Reporter: Deepak Sharma
>Assignee: Nitin Galave
> Fix For: 1.0.0, 0.7.2
>
> Attachments: RANGER-1819.1.patch
>
>
> Trying to delete some of the group with special character from the ranger 
> admin, but not able to delete.
> This issue happens only if there is & in the username:
> groupspecial#$@&
> i see this error saying this user is not found, user does not seems to be 
> parsed correctly at the time of deletion, groupspecial#$@& is the username 
> whereas ranger tries to delete "groupspecial":
> {code}
> 2017-09-27 13:08:49,214 [http-bio-6182-exec-22] INFO  
> org.apache.ranger.biz.SessionMgr (SessionMgr.java:232) - UserSession Updated 
> to set new Permissions to User: hive
> 2017-09-27 13:08:49,214 [http-bio-6182-exec-22] INFO  
> org.apache.ranger.biz.SessionMgr (SessionMgr.java:184) - Login Success: 
> loginId=hive, sessionId=null, sessionId=8E3EF64186DAFB35987287CFB30A0B9B, 
> requestId=172.27.68.207, epoch=1506517729214
> 2017-09-27 13:08:52,333 [http-bio-6182-exec-21] INFO  
> org.apache.ranger.common.RESTErrorUtil (RESTErrorUtil.java:63) - Request 
> failed. loginId=admin, logMessage=groupspecial is Not Found
> javax.ws.rs.WebApplicationException
>   at 
> org.apache.ranger.common.RESTErrorUtil.createRESTException(RESTErrorUtil.java:56)
>   at 
> org.apache.ranger.common.RESTErrorUtil.createRESTException(RESTErrorUtil.java:325)
>   at 
> org.apache.ranger.service.XGroupService.getGroupByGroupName(XGroupService.java:104)
>   at 
> org.apache.ranger.rest.XUserREST.deleteSingleGroupByGroupName(XUserREST.java:1100)
>   at 
> org.apache.ranger.rest.XUserREST$$FastClassBySpringCGLIB$$b2a65360.invoke()
>   at 
> org.springframework.cglib.proxy.MethodProxy.invoke(MethodProxy.java:204)
>   at 
> org.springframework.aop.framework.CglibAopProxy$CglibMethodInvocation.invokeJoinpoint(CglibAopProxy.java:700)
>   at 
> org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:150)
>   at 
> org.springframework.security.access.intercept.aopalliance.MethodSecurityInterceptor.invoke(MethodSecurityInterceptor.java:64)
>   at 
> org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:172)
>   at 
> org.springframework.transaction.interceptor.TransactionInterceptor$1.proceedWithInvocation(TransactionInterceptor.java:96)
>   at 
> org.springframework.transaction.interceptor.TransactionAspectSupport.invokeWithinTransaction(TransactionAspectSupport.java:260)
> {code}
> *Same issue present in case of the users*
> Expected Result: It should delete the user/groups.



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)


[jira] [Resolved] (RANGER-1685) Utility script that will list the users with a given role

2017-10-04 Thread Fatima Amjad Khan (JIRA)

 [ 
https://issues.apache.org/jira/browse/RANGER-1685?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Fatima Amjad Khan resolved RANGER-1685.
---
Resolution: Duplicate

> Utility script that will list the users with a given role
> -
>
> Key: RANGER-1685
> URL: https://issues.apache.org/jira/browse/RANGER-1685
> Project: Ranger
>  Issue Type: Bug
>  Components: Ranger
>Reporter: Fatima Amjad Khan
>Assignee: Fatima Amjad Khan
>
> Write a utility to display the list of users based on the given role 
> 1.List the users based on the role .
> 2.Allow Authorized users to view the list



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)


Re: Review Request 62714: RANGER-1819: Not able to delete group that is having special character(ampersand) from ranger admin.

2017-10-04 Thread Nitin Galave

---
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/62714/
---

(Updated Oct. 4, 2017, 10:38 a.m.)


Review request for ranger, Gautam Borad, Mehul Parikh, Pradeep Agrawal, and 
Velmurugan Periasamy.


Changes
---

Added new API i.e delete user by ID and done some clean up.


Bugs: RANGER-1819
https://issues.apache.org/jira/browse/RANGER-1819


Repository: ranger


Description
---

Trying to delete some of the group with special character from the ranger 
admin, but not able to delete.
This issue happens only if there is `&` in the groupname like groupspecial#$@&

Same issue present in case of users.


Solution : Replace currently API (i.e delete by name) call with delete by user 
id API.So we don't have to do extra handling for special charactes and it also 
includes best practices for REST API.


Diffs (updated)
-

  security-admin/src/main/java/org/apache/ranger/rest/XUserREST.java 5a58346 
  security-admin/src/main/webapp/scripts/model_bases/VXGroupBase.js b86120b 
  security-admin/src/main/webapp/scripts/model_bases/VXUserBase.js c4a0d6c 
  security-admin/src/main/webapp/scripts/views/users/UserTableLayout.js 65a1d18 
  
unixauthservice/src/main/java/org/apache/ranger/authentication/PasswordValidator.java
 d3e25fe 


Diff: https://reviews.apache.org/r/62714/diff/2/

Changes: https://reviews.apache.org/r/62714/diff/1-2/


Testing
---

Testing :

1. Verified CRUD for users and groups.
2. Verified delete for users and groups with/without special characters 
including `#`.


Thanks,

Nitin Galave



[jira] [Commented] (RANGER-1819) Not able to delete group that is having special character(ampersand) from ranger admin

2017-10-04 Thread Nitin Galave (JIRA)

[ 
https://issues.apache.org/jira/browse/RANGER-1819?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16191158#comment-16191158
 ] 

Nitin Galave commented on RANGER-1819:
--

Committed to 
[master|https://github.com/apache/ranger/commit/23046e9e81941060df0faa76984a64832a42f516]
 and 
[ranger-0.7|https://github.com/apache/ranger/commit/2ce742cf5e82d0c76023d0cac8cae0db34c24d33]
 branch.

> Not able to delete group that is having special character(ampersand) from 
> ranger admin
> --
>
> Key: RANGER-1819
> URL: https://issues.apache.org/jira/browse/RANGER-1819
> Project: Ranger
>  Issue Type: Bug
>  Components: Ranger
>Affects Versions: 1.0.0
>Reporter: Deepak Sharma
>Assignee: Nitin Galave
> Fix For: 1.0.0, 0.7.2
>
> Attachments: RANGER-1819.1.patch
>
>
> Trying to delete some of the group with special character from the ranger 
> admin, but not able to delete.
> This issue happens only if there is & in the username:
> groupspecial#$@&
> i see this error saying this user is not found, user does not seems to be 
> parsed correctly at the time of deletion, groupspecial#$@& is the username 
> whereas ranger tries to delete "groupspecial":
> {code}
> 2017-09-27 13:08:49,214 [http-bio-6182-exec-22] INFO  
> org.apache.ranger.biz.SessionMgr (SessionMgr.java:232) - UserSession Updated 
> to set new Permissions to User: hive
> 2017-09-27 13:08:49,214 [http-bio-6182-exec-22] INFO  
> org.apache.ranger.biz.SessionMgr (SessionMgr.java:184) - Login Success: 
> loginId=hive, sessionId=null, sessionId=8E3EF64186DAFB35987287CFB30A0B9B, 
> requestId=172.27.68.207, epoch=1506517729214
> 2017-09-27 13:08:52,333 [http-bio-6182-exec-21] INFO  
> org.apache.ranger.common.RESTErrorUtil (RESTErrorUtil.java:63) - Request 
> failed. loginId=admin, logMessage=groupspecial is Not Found
> javax.ws.rs.WebApplicationException
>   at 
> org.apache.ranger.common.RESTErrorUtil.createRESTException(RESTErrorUtil.java:56)
>   at 
> org.apache.ranger.common.RESTErrorUtil.createRESTException(RESTErrorUtil.java:325)
>   at 
> org.apache.ranger.service.XGroupService.getGroupByGroupName(XGroupService.java:104)
>   at 
> org.apache.ranger.rest.XUserREST.deleteSingleGroupByGroupName(XUserREST.java:1100)
>   at 
> org.apache.ranger.rest.XUserREST$$FastClassBySpringCGLIB$$b2a65360.invoke()
>   at 
> org.springframework.cglib.proxy.MethodProxy.invoke(MethodProxy.java:204)
>   at 
> org.springframework.aop.framework.CglibAopProxy$CglibMethodInvocation.invokeJoinpoint(CglibAopProxy.java:700)
>   at 
> org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:150)
>   at 
> org.springframework.security.access.intercept.aopalliance.MethodSecurityInterceptor.invoke(MethodSecurityInterceptor.java:64)
>   at 
> org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:172)
>   at 
> org.springframework.transaction.interceptor.TransactionInterceptor$1.proceedWithInvocation(TransactionInterceptor.java:96)
>   at 
> org.springframework.transaction.interceptor.TransactionAspectSupport.invokeWithinTransaction(TransactionAspectSupport.java:260)
> {code}
> *Same issue present in case of the users*
> Expected Result: It should delete the user/groups.



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)


Re: Review Request 62495: RANGER-1797:Tomcat Security Vulnerability Alert. The version of the tomcat for ranger should upgrade to 7.0.81.

2017-10-04 Thread Velmurugan Periasamy

---
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/62495/#review187093
---




pom.xml
Line 212 (original), 212 (patched)


See https://tomcat.apache.org/security-7.html#Fixed_in_Apache_Tomcat_7.0.82 
for additional CVE fixed, hence it is better to upgrade to 7.0.82 with this 
effort. 

+1 to Bhavik's suggestions to cover SSL/Kerberos/Knox tests for Ranger 
Admin and SSL/Kerberos for Ranger KMS


- Velmurugan Periasamy


On Sept. 22, 2017, 8:35 a.m., pengjianhua wrote:
> 
> ---
> This is an automatically generated e-mail. To reply, visit:
> https://reviews.apache.org/r/62495/
> ---
> 
> (Updated Sept. 22, 2017, 8:35 a.m.)
> 
> 
> Review request for ranger, Alok Lal, Ankita Sinha, Don Bosco Durai, Colm O 
> hEigeartaigh, Gautam Borad, Madhan Neethiraj, Ramesh Mani, Selvamohan 
> Neethiraj, Velmurugan Periasamy, and Qiang Zhang.
> 
> 
> Bugs: RANGER-1797
> https://issues.apache.org/jira/browse/RANGER-1797
> 
> 
> Repository: ranger
> 
> 
> Description
> ---
> 
> [Security Vulnerability Alert] Tomcat Information leakage and remote code 
> execution vulnerabilities.
> 
> CVE ID:
> CVE-2017-12615\CVE-2017-12616
> 
> Description
> CVE-2017-12615:When running Apache Tomcat 7.0.0 to 7.0.79 on Windows with 
> HTTP PUTs enabled, it was possible to upload a JSP file to the server via a 
> specially crafted request. This JSP could then be requested and any code it 
> contained would be executed by the server.
> CVE-2017-12616:When using a VirtualDirContext with Apache Tomcat 7.0.0 to 
> 7.0.80, it was possible to use a specially crafted request, bypass security 
> constraints, or get the source code of JSPs for resources served by the 
> VirtualDirContext, thereby cased code disclosure.
> 
> Scope
> CVE-2017-12615:Apache Tomcat 7.0.0 - 7.0.79
> CVE-2017-12616:Apache Tomcat 7.0.0 - 7.0.80
> 
> Solution
> The official release of the Apache Tomcat 7.0.81 version has fixed the two 
> vulnerabilities and recommends upgrading to the latest version.
> 
> Reference
> https://tomcat.apache.org/security-7.html
> http://tomcat.apache.org/security-7.html#Fixed_in_Apache_Tomcat_7.0.81
> 
> 
> Diffs
> -
> 
>   pom.xml 3958014c 
> 
> 
> Diff: https://reviews.apache.org/r/62495/diff/1/
> 
> 
> Testing
> ---
> 
> 
> Thanks,
> 
> pengjianhua
> 
>



Re: Adding new plugin to ranger

2017-10-04 Thread Don Bosco Durai
There is a nice blog written by Bryan Bende  
https://cwiki.apache.org/confluence/pages/viewpage.action?pageId=53741207

You can also refer to 
https://cwiki.apache.org/confluence/pages/viewpage.action?pageId=53741207

There is a sample project by Madhan to bootstrap your plugin. 
https://github.com/apache/ranger/tree/master/ranger-examples/sampleapp

I couldn’t see the ServiceDef in the project, but you could look into one of 
the existing ones. 

At a high level, Apache Ranger expects the native component to publish an 
interface e.g. 
https://github.com/apache/ranger/blob/master/ranger-examples/sampleapp/src/main/java/org/apache/ranger/examples/sampleapp/IAuthorizer.java
 . Once your interface is defined, then it is pretty straight forward. 

If you are stuck, someone will be able to help you out.

All the best…

Bosco



On 10/3/17, 12:50 AM, "Ronny Hidayat"  wrote:

Hi all,

I want to add new plugin to ranger (glusterfs-agent), so GlusterFS
appears on Ranger-Admin website.
How to do that ?
Do you have any tutorial ?

Thank you.





Re: Review Request 62714: RANGER-1819: Not able to delete group that is having special character(ampersand) from ranger admin.

2017-10-04 Thread Alejandro Fernandez

---
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/62714/#review187111
---


Fix it, then Ship it!





security-admin/src/main/java/org/apache/ranger/rest/XUserREST.java
Line 373 (original), 373 (patched)


Should use StringUtils.isNotBlank(userName)


- Alejandro Fernandez


On Oct. 4, 2017, 10:38 a.m., Nitin Galave wrote:
> 
> ---
> This is an automatically generated e-mail. To reply, visit:
> https://reviews.apache.org/r/62714/
> ---
> 
> (Updated Oct. 4, 2017, 10:38 a.m.)
> 
> 
> Review request for ranger, Gautam Borad, Mehul Parikh, Pradeep Agrawal, and 
> Velmurugan Periasamy.
> 
> 
> Bugs: RANGER-1819
> https://issues.apache.org/jira/browse/RANGER-1819
> 
> 
> Repository: ranger
> 
> 
> Description
> ---
> 
> Trying to delete some of the group with special character from the ranger 
> admin, but not able to delete.
> This issue happens only if there is `&` in the groupname like groupspecial#$@&
> 
> Same issue present in case of users.
> 
> 
> Solution : Replace currently API (i.e delete by name) call with delete by 
> user id API.So we don't have to do extra handling for special charactes and 
> it also includes best practices for REST API.
> 
> 
> Diffs
> -
> 
>   security-admin/src/main/java/org/apache/ranger/rest/XUserREST.java 5a58346 
>   security-admin/src/main/webapp/scripts/model_bases/VXGroupBase.js b86120b 
>   security-admin/src/main/webapp/scripts/model_bases/VXUserBase.js c4a0d6c 
>   security-admin/src/main/webapp/scripts/views/users/UserTableLayout.js 
> 65a1d18 
>   
> unixauthservice/src/main/java/org/apache/ranger/authentication/PasswordValidator.java
>  d3e25fe 
> 
> 
> Diff: https://reviews.apache.org/r/62714/diff/2/
> 
> 
> Testing
> ---
> 
> Testing :
> 
> 1. Verified CRUD for users and groups.
> 2. Verified delete for users and groups with/without special characters 
> including `#`.
> 
> 
> Thanks,
> 
> Nitin Galave
> 
>



Re: Adding new plugin to ranger

2017-10-04 Thread Ronny Hidayat
Ok, Thank you for your help.

2017-10-05 0:37 GMT+07.00, Don Bosco Durai :
> There is a nice blog written by Bryan Bende
> https://cwiki.apache.org/confluence/pages/viewpage.action?pageId=53741207
>
> You can also refer to
> https://cwiki.apache.org/confluence/pages/viewpage.action?pageId=53741207
>
> There is a sample project by Madhan to bootstrap your plugin.
> https://github.com/apache/ranger/tree/master/ranger-examples/sampleapp
>
> I couldn’t see the ServiceDef in the project, but you could look into one of
> the existing ones.
>
> At a high level, Apache Ranger expects the native component to publish an
> interface e.g.
> https://github.com/apache/ranger/blob/master/ranger-examples/sampleapp/src/main/java/org/apache/ranger/examples/sampleapp/IAuthorizer.java
> . Once your interface is defined, then it is pretty straight forward.
>
> If you are stuck, someone will be able to help you out.
>
> All the best…
>
> Bosco
>
>
>
> On 10/3/17, 12:50 AM, "Ronny Hidayat"  wrote:
>
> Hi all,
>
> I want to add new plugin to ranger (glusterfs-agent), so GlusterFS
> appears on Ranger-Admin website.
> How to do that ?
> Do you have any tutorial ?
>
> Thank you.
>
>
>
>


Re: Adding new plugin to ranger

2017-10-04 Thread Don Bosco Durai
Sorry, I didn’t paste the correct URL for Bryan’s blog. Here is the correct one 
https://bryanbende.com/development/2016/04/25/building-a-plugin-for-apache-ranger

You might also want to check HDFS plugin implementation. Take a look at 
checkPermission() method.

https://github.com/apache/ranger/blob/master/hdfs-agent/src/main/java/org/apache/ranger/authorization/hadoop/RangerHdfsAuthorizer.java


Bosco

On 10/4/17, 4:55 PM, "Ronny Hidayat"  wrote:

Ok, Thank you for your help.

2017-10-05 0:37 GMT+07.00, Don Bosco Durai :
> There is a nice blog written by Bryan Bende
> https://cwiki.apache.org/confluence/pages/viewpage.action?pageId=53741207
>
> You can also refer to
> https://cwiki.apache.org/confluence/pages/viewpage.action?pageId=53741207
>
> There is a sample project by Madhan to bootstrap your plugin.
> https://github.com/apache/ranger/tree/master/ranger-examples/sampleapp
>
> I couldn’t see the ServiceDef in the project, but you could look into one 
of
> the existing ones.
>
> At a high level, Apache Ranger expects the native component to publish an
> interface e.g.
> 
https://github.com/apache/ranger/blob/master/ranger-examples/sampleapp/src/main/java/org/apache/ranger/examples/sampleapp/IAuthorizer.java
> . Once your interface is defined, then it is pretty straight forward.
>
> If you are stuck, someone will be able to help you out.
>
> All the best…
>
> Bosco
>
>
>
> On 10/3/17, 12:50 AM, "Ronny Hidayat"  wrote:
>
> Hi all,
>
> I want to add new plugin to ranger (glusterfs-agent), so GlusterFS
> appears on Ranger-Admin website.
> How to do that ?
> Do you have any tutorial ?
>
> Thank you.
>
>
>
>