Azure - Security (Ranger)

About

domain-joined cluster

Hadoop

• Ranger - domain parameters

Parameters

Create an Active Directory

• Simple domain Template

Domain user name

The domain user account that will have admin privileges on the HDInsight cluster.

It will be an admin user

• on Ambari
• as wel as Ranger

This user account should have 3 privileges:.

• i. This user should have privileges to join machines to the domain and place them within the OU.
• ii. This user should have privileges to create service principals within the OU.
• iii. This user should have privileges to create reverse DNS entries.

Example:

• [email protected].

Organisation Unit

The distinguished name of the OU. If this OU does not exist, HDInsight cluster attempts to create this OU.

For example:

OU=HDInsightOU,DC=contoso,DC=onmicrosohift,DC=com. 

Configure Policy

https://docs.microsoft.com/en-us/azure/hdinsight/domain-joined/apache-domain-joined-run-hive

URL

https://<yourdomain-joinedhdiclustername>.azurehdinsight.net:6080
https://<ClusterName>.azurehdinsight.net/Ranger/

Documentation / Reference

• Apache Ranger - Blog