Details
-
Bug
-
Status: Resolved
-
Major
-
Resolution: Fixed
-
2.2.0
-
None
Description
STR:
- Was deployed cluster with HDFS, MapReduce2, YARN, Tez, Pig, ZooKeeper, Ambari Metrics, Knox, Ranger via blueprint.
- Was enabled plugin for HDFS.
- Go to add service wizard.
- Choose HBase to install.
- Go to customize services step. Following properties are noticed with the values as stated:
hbase.coprocessor.regionserver.classes = deleted
hbase.coprocessor.master.classes = ""
hbase.coprocessor.region.classes = "org.apache.hadoop.hbase.security.access.SecureBulkLoadEndpoint" - On "Ranger Plugin" panel of Ranger service enable plugin for HBase. Following properties are noticed with the values as stated:
hbase.coprocessor.regionserver.classes = "org.apache.ranger.authorization.hbase.RangerAuthorizationCoprocessor"
hbase.coprocessor.master.classes" = "org.apache.ranger.authorization.hbase.RangerAuthorizationCoprocessor"
hbase.coprocessor.region.classes" = "org.apache.hadoop.hbase.security.access.SecureBulkLoadEndpoint,org.apache.ranger.authorization.hbase.RangerAuthorizationCoprocessor" - Disable plugin for HBase. Recommendation popup shows following properties with the values stated:
Property | Current value | Recommended value |
---|---|---|
hbase.coprocessor.regionserver.classes | org.apache.ranger.authorization.hbase.RangerAuthorizationCoprocessor | org.apache.hadoop.hbase.security.access.AccessController |
hbase.coprocessor.master.classes | org.apache.hadoop.hbase.security.access.AccessController | |
hbase.coprocessor.region.classes | org.apache.hadoop.hbase.security.access.SecureBulkLoadEndpoint | org.apache.hadoop.hbase.security.access.AccessController,org.apache.hadoop.hbase.security.access.SecureBulkLoadEndpoint |
Expected behavior:
Property | Current value | Recommended value |
---|---|---|
hbase.coprocessor.regionserver.classes | deleted(absent) | org.apache.hadoop.hbase.security.access.AccessController |
hbase.coprocessor.master.classes | org.apache.hadoop.hbase.security.access.AccessController | |
hbase.coprocessor.region.classes | org.apache.hadoop.hbase.security.access.SecureBulkLoadEndpoint | org.apache.hadoop.hbase.security.access.AccessController,org.apache.hadoop.hbase.security.access.SecureBulkLoadEndpoint |