ranger-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "bensonshih (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (RANGER-812) ranger policies malfunctioned
Date Thu, 14 Jan 2016 06:53:39 GMT

    [ https://issues.apache.org/jira/browse/RANGER-812?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15097722#comment-15097722

bensonshih commented on RANGER-812:

Hi all,
When I disabled "yarn.acl.enable" property in YARN configs, Ranger can works fine!
However in kafka, I tried to execute consume/publish command with disabled all policies of
Ranger, it did not deny both consume/publish behavior. Did I miss any configuration setting
or misunderstanding?

Executing consume/publish steps:

Step1: connect to kafka-broker server

step2: changer user
# su kafka

step3: go to bin folder
# cd /usr/hdp/

step4: create a top
# ./kafka-topics.sh --create --zookeeper {hostname}:2181 --replication-factor 1 --partitions
1 --topic test

step5: execute publish message
# ./kafka-console-producer.sh --broker-list {hostname}:6667--topic test
This is a test message
//it should be denied right?

step6: execute consume message
# ./kafka-console-consumer.sh --zookeeper {hostname}:2181 --topic test --from-beginning
//it also should be denied?

> ranger policies malfunctioned
> -----------------------------
>                 Key: RANGER-812
>                 URL: https://issues.apache.org/jira/browse/RANGER-812
>             Project: Ranger
>          Issue Type: Bug
>          Components: plugins
>    Affects Versions: 0.5.0
>            Reporter: bensonshih
>            Priority: Minor
> After I enable ranger for yarn and kafka, then I disabled all the policies of ranger.
however, I still can execute commands like create topic(kafka) or do some mapreduce job(yarn),it
didn`t show any permission denied message

This message was sent by Atlassian JIRA

View raw message