Amithsa > Still,I have a doubt on creating DB that while enabling the hadoop,hive etc > scripts we need to provide information like db name and user authentications > where if i am providing separate servers i.e., Ranger server, Hadoop, Hive > etc.At that point i need to provide a db informations for each server > (jdbc:localhost) or a common db (jdbc:RANGER SERVER IP).
I am not sure what you mean by create DB while enabling the plugins. The database detail we provide during enabling the component is only used to connect the DB. The DB and tables are only created during the Ranger Admin setup. From the design perspective, each plugin writes directly to the DB or to HDFS (if setup) with the audit logs. This helps removing the Ranger Admin server as the bottle neck for doing audit logging. The Ranger Admin host information is needed in the plugin, so that the plugin can pull the policies from the Ranger Admin. Regarding your Knox question, you have to set the URL as per your deployment. E.g. https://knox_host:8443/gateway/admin/api/v1/topologies (Replace the knox_host with your fully qualified host name) Thanks Bosco > On Dec 19, 2014, at 1:33 AM, Amith sha <amithsh...@gmail.com> wrote: > > Hi All. > > Thanks Bosco,Selva and Muthu for your suggestion and feedback towards Ranger > by which i am able to build and work successfully even with Hadoop,Hive lower > Versions .Still,I have a doubt on creating DB that while enabling the > hadoop,hive etc scripts we need to provide information like db name and user > authentications where if i am providing separate servers i.e., Ranger server, > Hadoop, Hive etc.At that point i need to provide a db informations for each > server (jdbc:localhost) or a common db (jdbc:RANGER SERVER IP). > And i am requesting you to provide the Knox Repo creating example. Because > where i dont know what to provide in Knox url > > Thanks all > With regards > Amithsha > > > On Fri, Dec 19, 2014 at 11:22 AM, Don Bosco Durai <bo...@apache.org > <mailto:bo...@apache.org>> wrote: > Hi Muthupandi > > Glad to know it worked for you. Please continue to provide your feedback and > also if you have any suggestions to add new features. > > Thanks > > Bosco > >> On Dec 18, 2014, at 3:13 AM, Muthu Pandi <muthu1...@gmail.com >> <mailto:muthu1...@gmail.com>> wrote: >> >> Yes you are right i had done mistake by not configuring hive repository >> correctly, after configuring hive repository and its name it use the ranger >> authorization. >> >> >> Great work Guys, Authorization look simple and effective. >> >> Regards >> Muthupandi.K >> >> Think before you print. >> >> >> >> >> >> >> >> On Wed, Dec 17, 2014 at 2:43 AM, Don Bosco Durai <bo...@apache.org >> <mailto:bo...@apache.org>> wrote: >> Hi Muthupandi >> >> At an high level, it seems Hive is still using it’s native authorization. >> Can you check the Audit in Ranger to see whether Ranger is auditing it? >> >> Thanks >> >> Bosco >> >> >> >>> On Dec 15, 2014, at 9:19 PM, Muthu Pandi <muthu1...@gmail.com >>> <mailto:muthu1...@gmail.com>> wrote: >>> >>> Hi All >>> >>> I have configured Ranger on Hadoop 2.6.0 and Hive 0.14 and set up >>> users and policies. >>> >>> When i try to test the scenario using the ODBC i got exception as >>> >>> Driver Version: V1.1.0.0 >>> >>> Running connectivity tests... >>> >>> Attempting connection >>> Failed to establish connection >>> SQLSTATE: HY000[Microsoft][HiveODBC] (68) Error returned trying to set >>> default as the initial database: Error while compiling statement: FAILED: >>> HiveAccessControlException Permission denied: user [ami] does not have >>> [USE] privilege on [default]; Also tried quoting the database name >>> `default` but the query failed with the following error: Error while >>> compiling statement: FAILED: HiveAccessControlException Permission denied: >>> user [ami] does not have [USE] privilege on [default] >>> >>> TESTS COMPLETED WITH ERROR. >>> >>> >>> It clearly states that the user doesn't have privilege for USE command in >>> hive. While configuring user permission i can able to see different >>> permissions like select,update,create,drop etc., but not USE. >>> >>> Kindly point me in direction where am missing. >>> >>> Regards >>> Muthupandi.K >>> >>> Think before you print. >>> >>> >>> >>> >>> >>> >> > >
