1. ranger-hdfs plugin安装
1.1 安装ranger hdfs plugin软件包
# pwd
/opt/app/ranger-release-ranger-1.2.0/target
#tar -zxvf ranger-1.2.0-hdfs-plugin.tar.gz
1.2 修改install.properties文件
# pwd
/home/redpeak/app/ranger-release-ranger-1.2.0/target/ranger-1.2.0-hdfs-plugin
# viminstall.properties
配置ranger admin的地址
POLICY_MGR_URL= http://localhost:6080
配置hdfs的仓库名
REPOSITORY_NAME=hadoopdev
配置hadoop组件的HADOOP_HOME
COMPONENT_INSTALL_DIR_NAME=/opt/app/hadoop-2.7.3配置hdfs的审计日志
XAAUDIT.SOLR.ENABLE=trueXAAUDIT.SOLR.URL=http://node1:6083/solr/ranger_audits
XAAUDIT.SOLR.USER=NONE
XAAUDIT.SOLR.PASSWORD=NONE
XAAUDIT.SOLR.ZOOKEEPER=node1:2181,node2:2181,node3:2181/ranger_audits
XAAUDIT.SOLR.FILE_SPOOL_DIR=/var/log/hadoop/hdfs/audit/solr/spool
配置ranger-hdfs-plugin的所属用户、用户组
CUSTOM_USER=hdfs
CUSTOM_GROUP=hadoop
1.3 使hdfs-plugin生效
# pwd
/opt/app/apache-ranger-2.0.0/target/ranger-2.0.0-hdfs-plugin
# ./enable-hdfs-plugin.sh
结果如下:
1.4 启动hdfs
注:这里是ha高可用模式下的hdfs,
bridge1上启动hdfs和zkfc[root@bridge1 ranger-2.0.0-hdfs-plugin]# start-dfs.sh[root@bridge1 ranger-2.0.0-hdfs-plugin]# hadoop-daemon.shstart zkfc
bridge2上启动zkfc
(base) [root@bridge2 scripts]# hadoop-daemon.sh start zkfc
若hdfs已启动,则需要重启
[root@bridge1 ranger-2.0.0-hdfs-plugin]# stop-dfs.sh[root