Help Center/ MapReduce Service/ Component Operation Guide (LTS) (Ankara Region)/ Using HetuEngine/ HetuEngine Permission Management/ HetuEngine Ranger-based Permission Control
Updated on 2024-11-29 GMT+08:00
View PDF
Share

HetuEngine Ranger-based Permission Control

By default, Ranger authentication is used for newly installed clusters. For clusters upgraded from earlier versions or clusters where Ranger authentication is manually disabled, you can enable Ranger authentication again by referring to Enabling Ranger Authentication. For a cluster with Ranger authentication enabled, cluster administrators can use Ranger to configure the permissions to manage databases, tables, and columns of data sources for HetuEngine users. For details, see Adding a Ranger Access Permission Policy for HetuEngine.

Enabling Ranger Authentication

  1. Log in to FusionInsight Manager.
  2. If Kerberos authentication is disabled for the cluster (the cluster is in normal mode), add the ranger.usersync.sync.source parameter. If Kerberos authentication is enabled for the cluster (the cluster is in security mode), skip this step.

    1. Choose Cluster > Services > Ranger. Click Configurations then All Configurations.
    2. Search for the ranger.usersync.config.expandor parameter, set its name to ranger.usersync.sync.source, set its value to ldap, and save the settings.
    3. On the Dashboard page, click More > Restart Service in the upper right corner, enter the password, and restart Ranger.

  3. Choose Cluster > Services > HetuEngine > More > Enable Ranger.
  4. Choose Cluster > Services > HetuEngine > More > Restart Service.
  5. Restart the compute instance on HSConsole. For details, see Managing HetuEngine Compute Instances.