[AMBARI-13177] For HDP 2.2: Ranger setup does not respect custom service users

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.1.0
• Fix Version/s: 2.2.0
• Component/s: ambari-server
• Assignee: Gautam Borad
• Reporter: Gautam Borad
• Created: 22/Sep/15 08:18
• Updated: 24/Sep/15 18:55
• Resolved: 24/Sep/15 15:15

Description

PROBLEM: In an Ambari install it's possible to use different user accounts for service users, such as the hive user and the hdfs user.

The plugin enable scripts set the owner of various component specific files such as the jceks files. When the services use custom users, the ranger scripts still set the owner of the files to the "standard user", resulting in permissions problems.

For example if I make my hive user "special-hive-user", the ranger scripts still will set the owner to "hive".
The ranger scripts need to use the information in Ambari for the custom service users and propagate this to the setup scripts.

Issue Links

• links to: Review request link