Shulou(Shulou.com)06/01 Report--

Today, I will talk to you about how to integrate RedHat7 OpenLDAP certification for Ranger. Many people may not know much about it. In order to make you understand better, the editor has summarized the following content for you. I hope you can get something according to this article.

In the production environment of enterprises, OpenLDAP is mostly used for user management. The following mainly introduces how to integrate OpenLDAP of RedHat7 for Ranger on CDP DC7.0.3 cluster, and the integration is only for Web UI that uses LDAP users to log in to Ranger.

Test environment

1. Operating system Redhat7.6

two。 Cluster version CDP DC7.0.3

3.OpenLDAP has been deployed on the server where the cluster resides

4. Use root user actions

Configure Ranger Integrated LDAP Authentication

1. Enter the Ranger service, click "configuration" and search for "ldap"

two。 Modify configuration related to integrated LDAP

In this section, the relevant configurations that need to be modified when integrating LDAP are listed and the meaning of the configuration is introduced.

The relevant configurations involving modification in the screenshot below are shown in the following table:

So far, the configuration modification of Ranger has been completed. The link to the official website for configuration modification here is as follows:

Https://docs.cloudera.com/runtime/7.0.3/security-ranger-authentication-unix-ldap-ad/topics/security-ranger-authentication-ldap-settings.html

3. Restart the service after modification is completed

Ranger Integrated LDAP Verification

3.1Log in to Ranger using OS users

1. Create an OS test user on three nodes in the cluster and specify a password of 123456

two。 Use this test user to log in to Ranger

As shown in the figure above, OS users failed to log in to Ranger.

3.2Log in to Ranger using LDAP users

1. Check the LDAP user test_ranger for the test, with a password of 123456

two。 Use this test user to log in to Ranger

As shown in the image above, the LDAP user logged in successfully.

The Ranger integration LDAP in this document is mainly aimed at the Web UI that uses LDAP users to log in to Ranger. After integration, LDAP users log in to Ranger with general permissions and no administrator permissions. LDAP users who log in to Ranger after integration will automatically synchronize to the user list of Ranger, which can be viewed after the administrator logs in, as shown below:

If you integrate LDAP according to the configuration of Ranger in this document, the ranger.ldap.group.searchbase parameter in the configuration list of the official website can be left empty, otherwise it will be mutually exclusive with other parameters.

After reading the above, do you have any further understanding of how to integrate RedHat7 OpenLDAP certification for Ranger? If you want to know more knowledge or related content, please follow the industry information channel, thank you for your support.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.