HAWQ-1493
Integrate Ranger lookup JAAS configuration in ranger-admin plugin jar
Use user/password instead of credentials cache in Ranger lookup for HAWQ with Kerberos enabled.
Ranger-plugin connect to Ranger admin under kerberos security.
Augment enable-ranger-plugin.sh to support kerberos.
Don't expose RPS warning messages to command line
Copy RPS configuration files to standby in specific scenarios
Remove hawq_rps_address_suffix and hawq_rps_address_host in hawq-site.xml to simplify configuration for RPS High Availability
HAWQ state should be able to report the status of both RPS and standby RPS
HAWQ start/stop cluster should be able to start/stop RPS on standby node
Implement Ranger lookup for HAWQ with Kerberos enabled.
Implement SSL Access from RPS to Ranger
Implement RPS High availability on HAWQ
Provide user-group membership in RPS when requesting access
RPS test RangerHawqAuthorizerServiceNameTest fails sometimes
Set JAVA_HOME / JRE_HOME for RPS in the scripts
Add basic test case for hcatalog with ranger
HAWQ Sends Wrong Request to RPS for PXF Hcatalog
Keep hawq_toolkit schema check in HAWQ native side
Add RPS start/stop script in HAWQ start/stop script
Add policy test for HAWQ with Ranger enabled.
Externalize JVM params from rps.sh into rps.properties
Provide template for Ranger access audit to Solr from RPS
Add --enable-rps option to build ranger-plugin when build hawq.
pg_catalog view fallback failed
Add deny and exclude policy template for hawq service in ranger.
Allow queries related to pg_temp if ranger is enable
Change RPM name for RPS to hawq-ranger-plugin
Forbid grant/revoke command in HAWQ side once Ranger is configured.
Optimize the performance of hawq with ranger enabled.
Package all configuration files for RPS and Tomcat into hawq-ranger-plugin.rpm
Remove ALL privilege for HAWQ service in Ranger
Change GUC enable_ranger(bool) to a text GUC(hawq_acl_type), which can allow other kinds of ACL.
Reduce unnecessary calls of namespace check when run \d
Add integration tests to Ranger Plugin Service project
Force to recompute namespace_path when enable_ranger
The error message is not friendly when ranger plugin service is unavailable.
Check build-in catalogs, tables and functions in native aclcheck.
If user doesn't have privileges on certain objects, need return user which specific table he doesn't have right.
Enhance libcurl connection to RPS(Ranger Plugin Service), keep it as a long-live connection in session level
Don't do ACL checks on segments
Add generation of RequestID, ClientIP, queryContext(SQL Statement) in HAWQ , and encapsulate these contents to JSON request to RPS
Support ranger plugin server HA in hawq side.
Gpadmin super user processing on ACL
Process catalog table ACL on Ranger.
Change hawq start script once finding enable_ranger GUC is on.
Add one option in Ambari to enable user to specify whether they want enable Ranger for ACL check
Implement Ranger Plugin Service which holds HAWQ Ranger Plugin and provide REST Service
HAWQ sync user information from LDAP
Implement calling Ranger REST Service using libcurl.
Implement batched ACL check through Ranger.