Ranger Auditing on Kerberized Clusters

You can automatically configure Arcadia service based on existing Hive Ranger Auditing settings.

To configure Arcadia service to automatically use existing Hive Ranger Auditing settings, follow these steps:

1. In the Advanced arcadia-analytic-engine section, select the Enable Apache Ranger Support option.

   

2. The installation process automatically generates ranger-arcadia-security.xml and ranger-arcadia-audit.xml files, based on hive configuration.

3. Switch to the Ranger Admin interface.

4. Under Edit Services, in Config Properties, grant additional permissions to the arcadia service user by adding it to the list of users in the Value column of the following configuration Names: tag.download.auth.users, policy.dowload.auth.users, policy.grantrevoke.auth.users, and ambari.service.check.user.

   

Note that Ranger Auditing into Solr logs any authorization access into ArcEngine.