Shulou(Shulou.com)06/01 Report--

This article introduces you what is Apache Ranger, the content is very detailed, interested friends can use for reference, hope to be helpful to you.

Let's see what Sentry has to offer. According to the official documentation of Sentry, Apache Sentry is a fine-grained role-based authorization module on top of Hadoop. It provides data access authorization for authenticated users and applications running on Hadoop clusters, especially CDH. Currently, Sentry supports Apache Hive,Apache Solr,Apache Kafka,Apache Impala and HDFS (limited to HDFS data permission synchronization for Hive tables).

Sentry is role-based, so when you use Sentry, you need to create a Role, then map it to OS or Group in AD through Role, and then map to the end user who accesses Hadoop. You can use Sentry to restrict user access to DB,TABLE,COLUMN or URI, and permissions can be set through the command line interface of Hive or Impala to execute Sentry-related commands.

Now, let's take a look at the functionality of Ranger. Similarly, according to Apache Ranger's official documentation, Apache Ranger is a framework for enabling, monitoring, and managing comprehensive data security on the Hadoop platform. Apache Ranger has the following goals:

Centralized security management that can be interfaced or use REST API to manage all security-related tasks.

Fine-grained authorization for the operation of Hadoop components / tools through a unified management tool.

Standardize authorization methods across all Hadoop components.

Enhanced support for different authorization methods-role-based access control, attribute-based access control, etc.

Conduct a centralized audit of user access and management operations (security-related) for all components of Hadoop.

As you can see, in addition to security authorization, Apache Ranger also supports human Web UI,REST API and Auditing, which Sentry lacks. Let's take a look at the specific differences between Sentry and Ranger to see why Ranger is the future choice of CDH, namely CDP.

On what is Apache Ranger to share here, I hope that the above content can be of some help to you, can learn more knowledge. If you think the article is good, you can share it for more people to see.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.