Return-Path: <commits-return-34234-archive-asf-public=cust-asf.ponee.io@ambari.apache.org>
X-Original-To: archive-asf-public-internal@cust-asf2.ponee.io
Delivered-To: archive-asf-public-internal@cust-asf2.ponee.io
Received: from cust-asf.ponee.io (cust-asf.ponee.io [163.172.22.183])
	by cust-asf2.ponee.io (Postfix) with ESMTP id 14B20200BC3
	for <archive-asf-public-internal@cust-asf2.ponee.io>; Thu,  3 Nov 2016 15:31:31 +0100 (CET)
Received: by cust-asf.ponee.io (Postfix)
	id 101E6160B0C; Thu,  3 Nov 2016 14:31:31 +0000 (UTC)
Delivered-To: archive-asf-public@cust-asf.ponee.io
Received: from mail.apache.org (hermes.apache.org [140.211.11.3])
	by cust-asf.ponee.io (Postfix) with SMTP id D94AA160B0B
	for <archive-asf-public@cust-asf.ponee.io>; Thu,  3 Nov 2016 15:31:28 +0100 (CET)
Received: (qmail 4805 invoked by uid 500); 3 Nov 2016 14:31:28 -0000
Mailing-List: contact commits-help@ambari.apache.org; run by ezmlm
Precedence: bulk
List-Help: <mailto:commits-help@ambari.apache.org>
List-Unsubscribe: <mailto:commits-unsubscribe@ambari.apache.org>
List-Post: <mailto:commits@ambari.apache.org>
List-Id: <commits.ambari.apache.org>
Reply-To: ambari-dev@ambari.apache.org
Delivered-To: mailing list commits@ambari.apache.org
Received: (qmail 4740 invoked by uid 99); 3 Nov 2016 14:31:28 -0000
Received: from git1-us-west.apache.org (HELO git1-us-west.apache.org) (140.211.11.23)
    by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 03 Nov 2016 14:31:28 +0000
Received: by git1-us-west.apache.org (ASF Mail Server at git1-us-west.apache.org, from userid 33)
	id C3AB2DFE93; Thu,  3 Nov 2016 14:31:27 +0000 (UTC)
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
From: dmitriusan@apache.org
To: commits@ambari.apache.org
Date: Thu, 03 Nov 2016 14:31:29 -0000
Message-Id: <34eafe928d974484b8ad3cbbc91928be@git.apache.org>
In-Reply-To: <e96c6f64f8c242b6bbb356cfab58dbed@git.apache.org>
References: <e96c6f64f8c242b6bbb356cfab58dbed@git.apache.org>
X-Mailer: ASF-Git Admin Mailer
Subject: [3/9] ambari git commit: AMBARI-18782. Disable HDP-2.2 stack
 (dgrinenko via dlysnichenko)
archived-at: Thu, 03 Nov 2016 14:31:31 -0000

http://git-wip-us.apache.org/repos/asf/ambari/blob/43a181ab/ambari-server/src/main/resources/stacks/HDP/2.2/upgrades/config-upgrade.xml
----------------------------------------------------------------------
diff --git a/ambari-server/src/main/resources/stacks/HDP/2.2/upgrades/config-upgrade.xml b/ambari-server/src/main/resources/stacks/HDP/2.2/upgrades/config-upgrade.xml
deleted file mode 100644
index 6af8b43..0000000
--- a/ambari-server/src/main/resources/stacks/HDP/2.2/upgrades/config-upgrade.xml
+++ /dev/null
@@ -1,1099 +0,0 @@
-<?xml version="1.0"?>
-<!--
-   Licensed to the Apache Software Foundation (ASF) under one or more
-   contributor license agreements.  See the NOTICE file distributed with
-   this work for additional information regarding copyright ownership.
-   The ASF licenses this file to You under the Apache License, Version 2.0
-   (the "License"); you may not use this file except in compliance with
-   the License.  You may obtain a copy of the License at
-
-       http://www.apache.org/licenses/LICENSE-2.0
-
-   Unless required by applicable law or agreed to in writing, software
-   distributed under the License is distributed on an "AS IS" BASIS,
-   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-   See the License for the specific language governing permissions and
-   limitations under the License.
--->
-
-<upgrade-config-changes xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="upgrade-config.xsd">
-  <services>
-    <service name="HDFS">
-      <component name="NAMENODE">
-        <changes>
-          <definition xsi:type="configure" id="hdp_2_2_0_0_namenode_no_ranger"
-                      summary="NameNode properties without Ranger">
-            <!-- In HDP 2.1, RANGER was not present, so this property must not be added even though it is new in the
-             HDP 2.2 stack. The property is only valid in HDP 2.2 and higher if RANGER is present. -->
-            <type>hdfs-site</type>
-            <transfer operation="delete" delete-key="dfs.namenode.inode.attributes.provider.class"/>
-          </definition>
-
-          <definition xsi:type="configure" id="hdp_2_3_0_0_namenode_ha_adjustments">
-            <type>hdfs-site</type>
-            <transfer operation="delete" delete-key="dfs.namenode.rpc-address" if-type="hdfs-site"
-                      if-key="dfs.nameservices" if-key-state="present"/>
-            <transfer operation="delete" delete-key="dfs.namenode.http-address" if-type="hdfs-site"
-                      if-key="dfs.nameservices" if-key-state="present"/>
-            <transfer operation="delete" delete-key="dfs.namenode.https-address" if-type="hdfs-site"
-                      if-key="dfs.nameservices" if-key-state="present"/>
-          </definition>
-
-          <definition xsi:type="configure" id="hdp_2_3_0_0_modify_hadoop_env" summary="Modify hadoop-env.sh">
-            <type>hadoop-env</type>
-            <replace key="content" find="# Add libraries required by nodemanager" replace-with=""/>
-            <replace key="content" find="MAPREDUCE_LIBS={{mapreduce_libs_path}}" replace-with=""/>
-            <replace key="content" find=":${MAPREDUCE_LIBS}" replace-with=""/>
-            <replace key="content"
-                     find=":/usr/hdp/current/tez-client/*:/usr/hdp/current/tez-client/lib/*:/etc/tez/conf/"
-                     replace-with=""/>
-            <replace key="content"
-                     find=":/usr/hdp/current/tez-client/*:/usr/hdp/current/tez-client/lib/*:/usr/hdp/current/tez-client/conf/"
-                     replace-with=""/>
-          </definition>
-
-          <definition xsi:type="configure" id="hdp_2_3_0_0_hdfs_adjust_ranger_plugin">
-            <type>hdfs-site</type>
-            <set key="dfs.namenode.inode.attributes.provider.class"
-             value="org.apache.ranger.authorization.hadoop.RangerHdfsAuthorizer"
-             if-type="ranger-hdfs-plugin-properties"
-             if-key="ranger-hdfs-plugin-enabled"             
-             if-value="Yes"/>
-          </definition>
-
-          <definition xsi:type="configure" id="hdp_2_3_0_0_hdfs_transition_ranger_hdfs_policy"
-                      summary="Transitioning Ranger HDFS Policy">
-            <type>ranger-hdfs-policymgr-ssl</type>
-            <transfer operation="copy" from-type="ranger-hdfs-plugin-properties" from-key="SSL_KEYSTORE_FILE_PATH"
-                      to-key="xasecure.policymgr.clientssl.keystore"
-                      default-value="/usr/hdp/current/hadoop-client/conf/ranger-plugin-keystore.jks"/>
-            <transfer operation="copy" from-type="ranger-hdfs-plugin-properties" from-key="SSL_KEYSTORE_PASSWORD"
-                      to-key="xasecure.policymgr.clientssl.keystore.password" mask="true"
-                      default-value="myKeyFilePassword"/>
-            <transfer operation="copy" from-type="ranger-hdfs-plugin-properties" from-key="SSL_TRUSTSTORE_FILE_PATH"
-                      to-key="xasecure.policymgr.clientssl.truststore"
-                      default-value="/usr/hdp/current/hadoop-client/conf/ranger-plugin-truststore.jks"/>
-            <transfer operation="copy" from-type="ranger-hdfs-plugin-properties" from-key="SSL_TRUSTSTORE_PASSWORD"
-                      to-key="xasecure.policymgr.clientssl.truststore.password" mask="true" default-value="changeit"/>
-          </definition>
-
-          <definition xsi:type="configure" id="hdp_2_3_0_0_hdfs_transition_ranger_hdfs_audit"
-                      summary="Transitioning Ranger HDFS Audit">
-            <type>ranger-hdfs-audit</type>
-            <transfer operation="copy" from-type="ranger-hdfs-plugin-properties" from-key="XAAUDIT.DB.IS_ENABLED"
-                      to-key="xasecure.audit.destination.db" default-value="false"/>
-            <transfer operation="copy" from-type="ranger-hdfs-plugin-properties"
-                      from-key="XAAUDIT.HDFS.DESTINATION_DIRECTORY" to-key="xasecure.audit.destination.hdfs.dir"
-                      default-value="hdfs://NAMENODE_HOSTNAME:8020/ranger/audit"/>
-            <transfer operation="copy" from-type="ranger-hdfs-plugin-properties" from-key="XAAUDIT.HDFS.IS_ENABLED"
-                      to-key="xasecure.audit.destination.hdfs" default-value="true"/>
-            <transfer operation="copy" from-type="ranger-hdfs-plugin-properties"
-                      from-key="XAAUDIT.HDFS.LOCAL_ARCHIVE_DIRECTORY"
-                      to-key="xasecure.audit.destination.hdfs.batch.filespool.dir"
-                      default-value="/var/log/hadoop/hdfs/audit/hdfs/spool"/>
-            <transfer operation="copy" from-type="ranger-hdfs-plugin-properties" from-key="XAAUDIT.DB.USER_NAME"
-                      to-key="xasecure.audit.destination.db.user" default-value=""/>
-            <transfer operation="copy" from-type="ranger-hdfs-plugin-properties" from-key="XAAUDIT.DB.PASSWORD"
-                      to-key="xasecure.audit.destination.db.password" mask="true" default-value=""/>
-            <set key="xasecure.audit.credential.provider.file" value="jceks://file{{credential_file}}"/>
-            <set key="xasecure.audit.destination.solr" value="false"/>
-            <set key="xasecure.audit.destination.solr.urls" value="{{ranger_audit_solr_urls}}"/>
-            <set key="xasecure.audit.destination.solr.zookeepers" value="none"/>
-            <set key="xasecure.audit.destination.solr.batch.filespool.dir"
-                 value="/var/log/hadoop/hdfs/audit/solr/spool"/>
-            <set key="xasecure.audit.destination.db.jdbc.driver" value="{{jdbc_driver}}"/>
-            <set key="xasecure.audit.destination.db.jdbc.url" value="{{audit_jdbc_url}}"/>
-            <set key="xasecure.audit.provider.summary.enabled" value="false"/>
-          </definition>
-
-          <definition xsi:type="configure" id="hdp_2_3_0_0_hdfs_transition_ranger_hdfs_security"
-                      summary="Transitioning Ranger HDFS Security">
-            <type>ranger-hdfs-security</type>
-            <transfer operation="copy" from-type="ranger-hdfs-plugin-properties" from-key="REPOSITORY_NAME"
-                      to-key="ranger.plugin.hdfs.service.name" default-value="{{repo_name}}"/>
-            <transfer operation="copy" from-type="ranger-hdfs-plugin-properties" from-key="POLICY_MGR_URL"
-                      to-key="ranger.plugin.hdfs.policy.rest.url" default-value="{{policymgr_mgr_url}}"/>
-          </definition>
-
-          <definition xsi:type="configure" id="hdp_2_3_0_0_hdfs_ranger_hdfs_delete_old_properties">
-            <type>ranger-hdfs-plugin-properties</type>
-            <transfer operation="delete" delete-key="XAAUDIT.HDFS.DESTINTATION_FILE"/>
-            <transfer operation="delete" delete-key="XAAUDIT.HDFS.DESTINTATION_FLUSH_INTERVAL_SECONDS"/>
-            <transfer operation="delete" delete-key="XAAUDIT.HDFS.DESTINTATION_OPEN_RETRY_INTERVAL_SECONDS"/>
-            <transfer operation="delete" delete-key="XAAUDIT.HDFS.DESTINTATION_ROLLOVER_INTERVAL_SECONDS"/>
-            <transfer operation="delete" delete-key="XAAUDIT.HDFS.LOCAL_ARCHIVE_MAX_FILE_COUNT"/>
-            <transfer operation="delete" delete-key="XAAUDIT.HDFS.LOCAL_BUFFER_DIRECTORY"/>
-            <transfer operation="delete" delete-key="XAAUDIT.HDFS.LOCAL_BUFFER_FILE"/>
-            <transfer operation="delete" delete-key="XAAUDIT.HDFS.LOCAL_BUFFER_FLUSH_INTERVAL_SECONDS"/>
-            <transfer operation="delete" delete-key="XAAUDIT.HDFS.LOCAL_BUFFER_ROLLOVER_INTERVAL_SECONDS"/>
-            <transfer operation="delete" delete-key="SQL_CONNECTOR_JAR"/>
-            <transfer operation="delete" delete-key="SSL_KEYSTORE_FILE_PATH"/>
-            <transfer operation="delete" delete-key="SSL_KEYSTORE_PASSWORD"/>
-            <transfer operation="delete" delete-key="SSL_TRUSTSTORE_FILE_PATH"/>
-            <transfer operation="delete" delete-key="SSL_TRUSTSTORE_PASSWORD"/>
-            <transfer operation="delete" delete-key="XAAUDIT.DB.IS_ENABLED"/>
-            <transfer operation="delete" delete-key="XAAUDIT.HDFS.DESTINATION_DIRECTORY"/>
-            <transfer operation="delete" delete-key="XAAUDIT.HDFS.IS_ENABLED"/>
-            <transfer operation="delete" delete-key="XAAUDIT.HDFS.LOCAL_ARCHIVE_DIRECTORY"/>
-            <transfer operation="delete" delete-key="XAAUDIT.DB.USER_NAME"/>
-            <transfer operation="delete" delete-key="XAAUDIT.DB.PASSWORD"/>
-            <transfer operation="delete" delete-key="REPOSITORY_NAME"/>
-            <transfer operation="delete" delete-key="POLICY_MGR_URL"/>
-            <transfer operation="delete" delete-key="XAAUDIT.DB.FLAVOUR"/>
-            <transfer operation="delete" delete-key="XAAUDIT.DB.DATABASE_NAME"/>
-            <transfer operation="delete" delete-key="XAAUDIT.DB.HOSTNAME"/>
-          </definition>
-        </changes>
-      </component>
-    </service>
-
-    <service name="MAPREDUCE2">
-      <component name="HISTORYSERVER">
-        <changes>
-          <definition xsi:type="configure" id="hdp_2_3_0_0_mapreduce2_adjust_history_server">
-            <type>mapred-site</type>
-            <transfer operation="move" from-key="mapreduce.job.speculative.speculativecap"
-                      to-key="mapreduce.job.speculative.speculative-cap-running-tasks" default-value="0.1"/>
-            <transfer operation="delete" delete-key="mapreduce.task.tmp.dir"/>
-            <set key="mapreduce.fileoutputcommitter.algorithm.version" value="1"/>
-          </definition>
-        </changes>
-      </component>
-    </service>
-
-    <service name="YARN">
-      <component name="HISTORY_SERVER">
-        <changes>
-          <definition xsi:type="configure" id="hdp_2_2_0_0_historyserver_classpath"
-                      summary="YARN Application Classpath">
-            <type>yarn-site</type>
-            <set key="yarn.application.classpath"
-                 value="$HADOOP_CONF_DIR,/usr/hdp/current/hadoop-client/*,/usr/hdp/current/hadoop-client/lib/*,/usr/hdp/current/hadoop-hdfs-client/*,/usr/hdp/current/hadoop-hdfs-client/lib/*,/usr/hdp/current/hadoop-yarn-client/*,/usr/hdp/current/hadoop-yarn-client/lib/*"/>
-          </definition>
-
-          <definition xsi:type="configure" id="hdp_2_2_0_0_historyserver_no_ranger"
-                      summary="YARN properties without Ranger">
-            <!-- In HDP 2.1, RANGER was not present, so this property must not be added even though it is new in the
-             HDP 2.2 stack. The property is only valid in HDP 2.2 and higher if RANGER is present. -->
-            <type>yarn-site</type>
-            <transfer operation="delete" delete-key="yarn.authorization-provider"/>
-          </definition>
-        </changes>
-      </component>
-      <component name="APP_TIMELINE_SERVER">
-        <changes>
-          <definition xsi:type="configure" id="hdp_2_3_0_0_yarn_ats_enable_recovery">
-            <type>yarn-site</type>
-            <set key="yarn.timeline-service.recovery.enabled" value="true"/>
-            <set key="yarn.timeline-service.state-store-class"
-                 value="org.apache.hadoop.yarn.server.timeline.recovery.LeveldbTimelineStateStore"/>
-            <transfer operation="copy" from-key="yarn.timeline-service.leveldb-timeline-store.path"
-                      to-key="yarn.timeline-service.leveldb-state-store.path" default-value="/hadoop/yarn/timeline"/>
-          </definition>
-
-          <definition xsi:type="configure" id="hdp_2_3_0_0_yarn_keep_ats_v1">
-            <type>yarn-site</type>
-            <set key="yarn.timeline-service.version" value="1.0"/>
-            <set key="yarn.timeline-service.store-class"
-                 value="org.apache.hadoop.yarn.server.timeline.LeveldbTimelineStore"/>
-          </definition>
-        </changes>
-      </component>
-      <component name="RESOURCEMANAGER">
-        <changes>
-          <definition xsi:type="configure" id="hdp_2_3_0_0_yarn_rm_disable_node_labels">
-            <type>yarn-site</type>
-            <set key="yarn.node-labels.enabled" value="false"/>
-          </definition>
-
-          <definition xsi:type="configure" id="hdp_2_3_0_0_yarn_rm_clear_default_node_label_expression">
-            <type>capacity-scheduler</type>
-            <set key="yarn.scheduler.capacity.root.default-node-label-expression" value=""/>
-          </definition>
-
-          <definition xsi:type="configure" id="hdp_2_3_0_0_yarn_rm_check_cs_root_def_capacity"
-                      summary="Deleting the Capacity Scheduler root default capacity">
-            <type>capacity-scheduler</type>
-            <transfer operation="delete"
-                      delete-key="yarn.scheduler.capacity.root.accessible-node-labels.default.capacity"/>
-          </definition>
-
-          <definition xsi:type="configure" id="hdp_2_3_0_0_yarn_rm_check_cs_root_max_capacity"
-                      summary="Deleting the Capacity Scheduler root maximum capacity">
-            <type>capacity-scheduler</type>
-            <transfer operation="delete"
-                      delete-key="yarn.scheduler.capacity.root.accessible-node-labels.default.maximum-capacity"/>
-          </definition>
-        </changes>
-      </component>
-    </service>
-
-    <service name="FALCON">
-      <component name="FALCON_SERVER">
-        <changes>
-          <definition xsi:type="configure" id="hdp_2_2_0_0_falcon_application_services">
-            <type>falcon-startup.properties</type>
-            <set key="*.application.services"
-                 value="org.apache.falcon.security.AuthenticationInitializationService,&#92;&#xA;      org.apache.falcon.workflow.WorkflowJobEndNotificationService,&#92;&#xA;      org.apache.falcon.service.ProcessSubscriberService,&#92;&#xA;      org.apache.falcon.entity.store.ConfigurationStore,&#92;&#xA;      org.apache.falcon.rerun.service.RetryService,&#92;&#xA;      org.apache.falcon.rerun.service.LateRunService,&#92;&#xA;      org.apache.falcon.service.LogCleanupService,&#92;&#xA;      org.apache.falcon.metadata.MetadataMappingService{{atlas_application_class_addition}}"/>
-          </definition>
-        </changes>
-      </component>
-    </service>
-
-    <service name="HIVE">
-      <component name="HIVE_SERVER">
-        <changes>
-          <definition xsi:type="configure" id="hdp_2_2_0_0_hive_server_delegation_token_store_class">
-            <type>hive-site</type>
-            <set key="hive.cluster.delegation.token.store.class"
-                 value="org.apache.hadoop.hive.thrift.ZooKeeperTokenStore"/>
-          </definition>
-
-          <definition xsi:type="configure" id="hdp_2_3_0_0_hive_server_replace_auth_manager"
-                      summary="Update Hive Authentication Manager">
-            <type>hiveserver2-site</type>
-            <replace key="hive.security.authorization.manager"
-                     find="com.xasecure.authorization.hive.authorizer.XaSecureHiveAuthorizerFactory"
-                     replace-with="org.apache.ranger.authorization.hive.authorizer.RangerHiveAuthorizerFactory"/>
-          </definition>
-
-          <definition xsi:type="configure" id="hdp_2_3_0_0_hive_server_configure_authentication"
-                      summary="Removing unused properties for current hive authentication type">
-            <type>hive-site</type>
-            <transfer operation="delete" delete-key="hive.server2.authentication.ldap.url"
-                      if-key="hive.server2.authentication" if-type="hive-site" if-value="NONE"/>
-            <transfer operation="delete" delete-key="hive.server2.authentication.ldap.baseDN"
-                      if-key="hive.server2.authentication" if-type="hive-site" if-value="NONE"/>
-            <transfer operation="delete" delete-key="hive.server2.authentication.pam.services"
-                      if-key="hive.server2.authentication" if-type="hive-site" if-value="NONE"/>
-            <transfer operation="delete" delete-key="hive.server2.custom.authentication.class"
-                      if-key="hive.server2.authentication" if-type="hive-site" if-value="NONE"/>
-            <transfer operation="delete" delete-key="hive.server2.authentication.kerberos.keytab"
-                      if-key="hive.server2.authentication" if-type="hive-site" if-value="NONE"/>
-            <transfer operation="delete" delete-key="hive.server2.authentication.kerberos.principal"
-                      if-key="hive.server2.authentication" if-type="hive-site" if-value="NONE"/>
-
-            <transfer operation="delete" delete-key="hive.server2.authentication.kerberos.keytab"
-                      if-key="hive.server2.authentication" if-type="hive-site" if-value="ldap"/>
-            <transfer operation="delete" delete-key="hive.server2.authentication.kerberos.principal"
-                      if-key="hive.server2.authentication" if-type="hive-site" if-value="ldap"/>
-            <transfer operation="delete" delete-key="hive.server2.authentication.pam.services"
-                      if-key="hive.server2.authentication" if-type="hive-site" if-value="ldap"/>
-            <transfer operation="delete" delete-key="hive.server2.custom.authentication.class"
-                      if-key="hive.server2.authentication" if-type="hive-site" if-value="ldap"/>
-
-            <transfer operation="delete" delete-key="hive.server2.authentication.ldap.url"
-                      if-key="hive.server2.authentication" if-type="hive-site" if-value="kerberos"/>
-            <transfer operation="delete" delete-key="hive.server2.authentication.ldap.baseDN"
-                      if-key="hive.server2.authentication" if-type="hive-site" if-value="kerberos"/>
-            <transfer operation="delete" delete-key="hive.server2.authentication.pam.services"
-                      if-key="hive.server2.authentication" if-type="hive-site" if-value="kerberos"/>
-            <transfer operation="delete" delete-key="hive.server2.custom.authentication.class"
-                      if-key="hive.server2.authentication" if-type="hive-site" if-value="kerberos"/>
-
-            <transfer operation="delete" delete-key="hive.server2.authentication.ldap.url"
-                      if-key="hive.server2.authentication" if-type="hive-site" if-value="pam"/>
-            <transfer operation="delete" delete-key="hive.server2.authentication.ldap.baseDN"
-                      if-key="hive.server2.authentication" if-type="hive-site" if-value="pam"/>
-            <transfer operation="delete" delete-key="hive.server2.custom.authentication.class"
-                      if-key="hive.server2.authentication" if-type="hive-site" if-value="pam"/>
-            <transfer operation="delete" delete-key="hive.server2.authentication.kerberos.keytab"
-                      if-key="hive.server2.authentication" if-type="hive-site" if-value="pam"/>
-            <transfer operation="delete" delete-key="hive.server2.authentication.kerberos.principal"
-                      if-key="hive.server2.authentication" if-type="hive-site" if-value="pam"/>
-
-            <transfer operation="delete" delete-key="hive.server2.authentication.ldap.url"
-                      if-key="hive.server2.authentication" if-type="hive-site" if-value="custom"/>
-            <transfer operation="delete" delete-key="hive.server2.authentication.ldap.baseDN"
-                      if-key="hive.server2.authentication" if-type="hive-site" if-value="custom"/>
-            <transfer operation="delete" delete-key="hive.server2.authentication.pam.services"
-                      if-key="hive.server2.authentication" if-type="hive-site" if-value="custom"/>
-            <transfer operation="delete" delete-key="hive.server2.authentication.kerberos.keytab"
-                      if-key="hive.server2.authentication" if-type="hive-site" if-value="custom"/>
-            <transfer operation="delete" delete-key="hive.server2.authentication.kerberos.principal"
-                      if-key="hive.server2.authentication" if-type="hive-site" if-value="custom"/>
-          </definition>
-
-          <definition xsi:type="configure" id="hdp_2_3_0_0_hive_server_configure_ranger_policy"
-                      summary="Configuring Ranger Hive Policy">
-            <type>ranger-hive-policymgr-ssl</type>
-            <transfer operation="copy" from-type="ranger-hive-plugin-properties" from-key="SSL_KEYSTORE_FILE_PATH"
-                      to-key="xasecure.policymgr.clientssl.keystore"
-                      default-value="/usr/hdp/current/hive-server2/conf/ranger-plugin-keystore.jks"/>
-            <transfer operation="copy" from-type="ranger-hive-plugin-properties" from-key="SSL_KEYSTORE_PASSWORD"
-                      to-key="xasecure.policymgr.clientssl.keystore.password" default-value="myKeyFilePassword"
-                      mask="true"/>
-            <transfer operation="copy" from-type="ranger-hive-plugin-properties" from-key="SSL_TRUSTSTORE_FILE_PATH"
-                      to-key="xasecure.policymgr.clientssl.truststore"
-                      default-value="/usr/hdp/current/hive-server2/conf/ranger-plugin-truststore.jks"/>
-            <transfer operation="copy" from-type="ranger-hive-plugin-properties" from-key="SSL_TRUSTSTORE_PASSWORD"
-                      to-key="xasecure.policymgr.clientssl.truststore.password" default-value="changeit" mask="true"/>
-          </definition>
-
-          <definition xsi:type="configure" id="hdp_2_3_0_0_hive_server_configure_ranger_security"
-                      summary="Configuring Ranger Hive Security">
-            <type>ranger-hive-security</type>
-            <transfer operation="copy" from-type="ranger-hive-plugin-properties"
-                      from-key="UPDATE_XAPOLICIES_ON_GRANT_REVOKE"
-                      to-key="xasecure.hive.update.xapolicies.on.grant.revoke" default-value="true"/>
-            <transfer operation="copy" from-type="ranger-hive-plugin-properties" from-key="POLICY_MGR_URL"
-                      to-key="ranger.plugin.hive.policy.rest.url" default-value="{{policymgr_mgr_url}}"/>
-            <transfer operation="copy" from-type="ranger-hive-plugin-properties" from-key="REPOSITORY_NAME"
-                      to-key="ranger.plugin.hive.service.name" default-value="{{repo_name}}"/>
-          </definition>
-
-          <definition xsi:type="configure" id="hdp_2_3_0_0_hive_server_configure_ranger_audit"
-                      summary="Configuring Ranger Hive Audit">
-            <type>ranger-hive-audit</type>
-            <transfer operation="copy" from-type="ranger-hive-plugin-properties" from-key="XAAUDIT.DB.IS_ENABLED"
-                      to-key="xasecure.audit.destination.db" default-value="true"/>
-            <transfer operation="copy" from-type="ranger-hive-plugin-properties"
-                      from-key="XAAUDIT.HDFS.DESTINATION_DIRECTORY" to-key="xasecure.audit.destination.hdfs.dir"
-                      default-value="hdfs://NAMENODE_HOSTNAME:8020/ranger/audit"/>
-            <transfer operation="copy" from-type="ranger-hive-plugin-properties" from-key="XAAUDIT.HDFS.IS_ENABLED"
-                      to-key="xasecure.audit.destination.hdfs" default-value="true"/>
-            <transfer operation="copy" from-type="ranger-hive-plugin-properties"
-                      from-key="XAAUDIT.HDFS.LOCAL_ARCHIVE_DIRECTORY"
-                      to-key="xasecure.audit.destination.hdfs.batch.filespool.dir"
-                      default-value="/var/log/hive/audit/hdfs/spool"/>
-            <transfer operation="copy" from-type="ranger-hive-plugin-properties" from-key="XAAUDIT.DB.USER_NAME"
-                      to-key="xasecure.audit.destination.db.user" default-value=""/>
-            <transfer operation="copy" from-type="ranger-hive-plugin-properties" from-key="XAAUDIT.DB.PASSWORD"
-                      to-key="xasecure.audit.destination.db.password" default-value="" mask="true"/>
-            <set key="xasecure.audit.credential.provider.file" value="jceks://file{{credential_file}}"/>
-            <set key="xasecure.audit.destination.solr" value="false"/>
-            <set key="xasecure.audit.destination.solr.urls" value="{{ranger_audit_solr_urls}}"/>
-            <set key="xasecure.audit.destination.solr.zookeepers" value="none"/>
-            <set key="xasecure.audit.destination.solr.batch.filespool.dir" value="/var/log/hive/audit/solr/spool"/>
-            <set key="xasecure.audit.destination.db.jdbc.driver" value="{{jdbc_driver}}"/>
-            <set key="xasecure.audit.destination.db.jdbc.url" value="{{audit_jdbc_url}}"/>
-            <set key="xasecure.audit.provider.summary.enabled" value="false"/>
-          </definition>
-
-          <definition xsi:type="configure" id="hdp_2_3_0_0_hive_server_remove_deprecated_ranger_properties"
-                      summary="Removing Deprecated Ranger Hive Plugin Configurations">
-            <type>ranger-hive-plugin-properties</type>
-            <transfer operation="delete" delete-key="SSL_KEYSTORE_FILE_PATH"/>
-            <transfer operation="delete" delete-key="SSL_KEYSTORE_PASSWORD"/>
-            <transfer operation="delete" delete-key="SSL_TRUSTSTORE_FILE_PATH"/>
-            <transfer operation="delete" delete-key="SSL_TRUSTSTORE_PASSWORD"/>
-            <transfer operation="delete" delete-key="POLICY_MGR_URL"/>
-            <transfer operation="delete" delete-key="REPOSITORY_NAME"/>
-            <transfer operation="delete" delete-key="UPDATE_XAPOLICIES_ON_GRANT_REVOKE"/>
-            <transfer operation="delete" delete-key="XAAUDIT.DB.IS_ENABLED"/>
-            <transfer operation="delete" delete-key="XAAUDIT.HDFS.DESTINATION_DIRECTORY"/>
-            <transfer operation="delete" delete-key="XAAUDIT.HDFS.IS_ENABLED"/>
-            <transfer operation="delete" delete-key="XAAUDIT.HDFS.LOCAL_ARCHIVE_DIRECTORY"/>
-            <transfer operation="delete" delete-key="XAAUDIT.DB.USER_NAME"/>
-            <transfer operation="delete" delete-key="XAAUDIT.DB.PASSWORD"/>
-            <transfer operation="delete" delete-key="XAAUDIT.HDFS.DESTINTATION_FILE"/>
-            <transfer operation="delete" delete-key="XAAUDIT.HDFS.DESTINTATION_FLUSH_INTERVAL_SECONDS"/>
-            <transfer operation="delete" delete-key="XAAUDIT.HDFS.DESTINTATION_OPEN_RETRY_INTERVAL_SECONDS"/>
-            <transfer operation="delete" delete-key="XAAUDIT.HDFS.DESTINTATION_ROLLOVER_INTERVAL_SECONDS"/>
-            <transfer operation="delete" delete-key="XAAUDIT.HDFS.LOCAL_ARCHIVE_MAX_FILE_COUNT"/>
-            <transfer operation="delete" delete-key="XAAUDIT.HDFS.LOCAL_BUFFER_DIRECTORY"/>
-            <transfer operation="delete" delete-key="XAAUDIT.HDFS.LOCAL_BUFFER_FILE"/>
-            <transfer operation="delete" delete-key="XAAUDIT.HDFS.LOCAL_BUFFER_FLUSH_INTERVAL_SECONDS"/>
-            <transfer operation="delete" delete-key="XAAUDIT.HDFS.LOCAL_BUFFER_ROLLOVER_INTERVAL_SECONDS"/>
-            <transfer operation="delete" delete-key="SQL_CONNECTOR_JAR"/>
-            <transfer operation="delete" delete-key="XAAUDIT.DB.FLAVOUR"/>
-            <transfer operation="delete" delete-key="XAAUDIT.DB.DATABASE_NAME"/>
-            <transfer operation="delete" delete-key="XAAUDIT.DB.HOSTNAME"/>
-          </definition>
-
-          <definition xsi:type="configure" id="hdp_2_3_0_0_hive_server_remove_datastore_classname">
-            <type>hive-site</type>
-            <transfer operation="delete" delete-key="datanucleus.rdbms.datastoreAdapterClassName"/>
-          </definition>
-        </changes>
-      </component>
-
-      <component name="WEBHCAT_SERVER">
-        <changes>
-          <definition xsi:type="configure" id="hdp_2_3_0_0_webhcat_server_update_env">
-            <type>webhcat-env</type>
-            <replace key="content" find="export HADOOP_HOME={{hadoop_home}}"
-                     replace-with="export HADOOP_HOME=${HADOOP_HOME:-{{hadoop_home}}}"/>
-          </definition>
-
-          <definition xsi:type="configure" id="hdp_2_3_0_0_webhcat_server_update_configuration_paths"
-                      summary="Updating Configuration Paths">
-            <type>webhcat-site</type>
-            <replace key="templeton.jar" find="/usr/hdp/current/hive-webhcat"
-                     replace-with="/usr/hdp/${hdp.version}/hive"/>
-            <replace key="templeton.libjars" find="/usr/hdp/current/zookeeper-client"
-                     replace-with="/usr/hdp/${hdp.version}/zookeeper,/usr/hdp/${hdp.version}/hive/lib/hive-common.jar"/>
-            <replace key="templeton.hadoop" find="/usr/hdp/current/hadoop-client"
-                     replace-with="/usr/hdp/${hdp.version}/hadoop"/>
-            <replace key="templeton.hcat" find="/usr/hdp/current/hive-client"
-                     replace-with="/usr/hdp/${hdp.version}/hive"/>
-            <set key="templeton.hive.extra.files"
-                 value="/usr/hdp/${hdp.version}/tez/conf/tez-site.xml,/usr/hdp/${hdp.version}/tez,/usr/hdp/${hdp.version}/tez/lib"/>
-          </definition>
-        </changes>
-      </component>
-
-
-    </service>
-
-    <service name="TEZ">
-      <component name="TEZ_CLIENT">
-        <changes>
-          <definition xsi:type="configure"
-                      id="hdp_2_2_0_0_tez_client_adjust_tez_lib_uris_property">
-            <type>tez-site</type>
-            <set key="tez.lib.uris" value="/hdp/apps/${hdp.version}/tez/tez.tar.gz"/>
-          </definition>
-
-          <definition xsi:type="configure" id="hdp_2_2_0_0_tez_client_adjust_tez_counters_properties">
-            <type>tez-site</type>
-            <set key="tez.counters.max" value="10000" if-type="tez-site" if-key="tez.counters.max" if-value="2000"/>
-            <set key="tez.counters.max.groups" value="3000" if-type="tez-site" if-key="tez.counters.max.groups" if-value="1000"/>
-          </definition>
-
-          <definition xsi:type="configure" id="hdp_2_3_0_0_tez_client_adjust_properties">
-            <type>tez-site</type>
-            <set key="tez.am.view-acls" value="*"/>
-            <set key="tez.task.generate.counters.per.io" value="true"/>
-          </definition>
-
-          <definition xsi:type="configure" id="hdp_2_3_0_0_tez_client_adjust_tez_lib_uris_property">
-            <type>tez-site</type>
-            <set key="tez.lib.uris" value="/hdp/apps/${hdp.version}/tez/tez.tar.gz"/>
-          </definition>
-
-          <definition xsi:type="configure" id="hdp_2_3_0_0_tez_keep_ats_v1">
-            <type>tez-site</type>
-            <set key="tez.history.logging.service.class"
-                 value="org.apache.tez.dag.history.logging.ats.ATSHistoryLoggingService"/>
-          </definition>
-        </changes>
-      </component>
-    </service>
-
-    <service name="STORM">
-      <component name="NIMBUS">
-        <changes>
-          <definition xsi:type="configure" id="hdp_2_2_0_0_nimbus_no_ranger" summary="Nimbus properties without Ranger">
-            <!-- In HDP 2.1, RANGER was not present, so this property must not be added even though it is new in the
-             HDP 2.2 stack. The property is only valid in HDP 2.2 and higher if RANGER is present. -->
-            <type>storm-site</type>
-            <transfer operation="delete" delete-key="nimbus.authorizer"/>
-          </definition>
-          <definition id="hdp_2_3_0_0_update_storm_env">
-            <type>storm-env</type>
-            <set key="storm_logs_supported" value="true"/>
-          </definition>
-
-          <definition xsi:type="configure" id="hdp_2_3_0_0_nimbus_monitor_freq_adjustment">
-            <type>storm-site</type>
-            <set key="nimbus.monitor.freq.secs" value="120" if-type="storm-site" if-key="nimbus.monitor.freq.secs" if-value="10"/>
-          </definition>
-
-          <definition xsi:type="configure" id="hdp_2_3_0_0_nimbus_convert_nimbus_host_to_seeds"
-                      summary="Converting nimbus.host into nimbus.seeds">
-            <type>storm-site</type>
-            <transfer operation="copy" from-key="nimbus.host" to-key="nimbus.seeds" coerce-to="yaml-array"/>
-            <transfer operation="delete" delete-key="nimbus.host"/>
-            <replace key="nimbus.authorizer" find="com.xasecure.authorization.storm.authorizer.XaSecureStormAuthorizer"
-                     replace-with="org.apache.ranger.authorization.storm.authorizer.RangerStormAuthorizer"/>
-          </definition>
-
-          <definition xsi:type="configure" id="hdp_2_3_0_0_nimbus_update_env_vars"
-                      summary="Updating Storm home and configuration environment variables">
-            <type>storm-env</type>
-            <replace key="content" find="# export STORM_CONF_DIR=&quot;&quot;"
-                     replace-with="export STORM_CONF_DIR={{conf_dir}}"/>
-            <replace key="content" find="export STORM_HOME=/usr/hdp/current/storm-client"
-                     replace-with="export STORM_HOME={{storm_component_home_dir}}"/>
-          </definition>
-
-          <definition xsi:type="configure" id="hdp_2_3_0_0_nimbus_configure_ranger_policy"
-                      summary="Configuring Ranger Storm Policy">
-            <type>ranger-storm-policymgr-ssl</type>
-            <transfer operation="copy" from-type="ranger-storm-plugin-properties" from-key="SSL_KEYSTORE_FILE_PATH"
-                      to-key="xasecure.policymgr.clientssl.keystore"
-                      default-value="/usr/hdp/current/storm-client/conf/ranger-plugin-keystore.jks"/>
-            <transfer operation="copy" from-type="ranger-storm-plugin-properties" from-key="SSL_KEYSTORE_PASSWORD"
-                      to-key="xasecure.policymgr.clientssl.keystore.password" default-value="myKeyFilePassword"
-                      mask="true"/>
-            <transfer operation="copy" from-type="ranger-storm-plugin-properties" from-key="SSL_TRUSTSTORE_FILE_PATH"
-                      to-key="xasecure.policymgr.clientssl.truststore"
-                      default-value="/usr/hdp/current/storm-client/conf/ranger-plugin-truststore.jks"/>
-            <transfer operation="copy" from-type="ranger-storm-plugin-properties" from-key="SSL_TRUSTSTORE_PASSWORD"
-                      to-key="xasecure.policymgr.clientssl.truststore.password" default-value="changeit" mask="true"/>
-          </definition>
-
-          <definition xsi:type="configure" id="hdp_2_3_0_0_nimbus_configure_ranger_audit"
-                      summary="Configuring Ranger Storm Audit">
-            <type>ranger-storm-audit</type>
-            <transfer operation="copy" from-type="ranger-storm-plugin-properties" from-key="XAAUDIT.DB.IS_ENABLED"
-                      to-key="xasecure.audit.destination.db" default-value="true"/>
-            <transfer operation="copy" from-type="ranger-storm-plugin-properties"
-                      from-key="XAAUDIT.HDFS.DESTINATION_DIRECTORY" to-key="xasecure.audit.destination.hdfs.dir"
-                      default-value="hdfs://NAMENODE_HOSTNAME:8020/ranger/audit"/>
-            <transfer operation="copy" from-type="ranger-storm-plugin-properties" from-key="XAAUDIT.HDFS.IS_ENABLED"
-                      to-key="xasecure.audit.destination.hdfs" default-value="true"/>
-            <transfer operation="copy" from-type="ranger-storm-plugin-properties"
-                      from-key="XAAUDIT.HDFS.LOCAL_ARCHIVE_DIRECTORY"
-                      to-key="xasecure.audit.destination.hdfs.batch.filespool.dir"
-                      default-value="/var/log/storm/audit/hdfs/spool"/>
-            <transfer operation="copy" from-type="ranger-storm-plugin-properties" from-key="XAAUDIT.DB.USER_NAME"
-                      to-key="xasecure.audit.destination.db.user" default-value=""/>
-            <transfer operation="copy" from-type="ranger-storm-plugin-properties" from-key="XAAUDIT.DB.PASSWORD"
-                      to-key="xasecure.audit.destination.db.password" default-value="" mask="true"/>
-            <set key="xasecure.audit.credential.provider.file" value="jceks://file{{credential_file}}"/>
-            <set key="xasecure.audit.destination.solr" value="false"/>
-            <set key="xasecure.audit.destination.solr.urls" value="{{ranger_audit_solr_urls}}"/>
-            <set key="xasecure.audit.destination.solr.zookeepers" value="none"/>
-            <set key="xasecure.audit.destination.solr.batch.filespool.dir" value="/var/log/storm/audit/solr/spool"/>
-            <set key="xasecure.audit.destination.db.jdbc.driver" value="{{jdbc_driver}}"/>
-            <set key="xasecure.audit.destination.db.jdbc.url" value="{{audit_jdbc_url}}"/>
-            <set key="xasecure.audit.provider.summary.enabled" value="false"/>
-          </definition>
-
-          <definition xsi:type="configure" id="hdp_2_3_0_0_nimbus_remove_deprecated_ranger_properties"
-                      summary="Removing Deprecated Ranger Storm Plugin Configurations">
-            <type>ranger-storm-plugin-properties</type>
-            <transfer operation="delete" delete-key="SSL_KEYSTORE_FILE_PATH"/>
-            <transfer operation="delete" delete-key="SSL_KEYSTORE_PASSWORD"/>
-            <transfer operation="delete" delete-key="SSL_TRUSTSTORE_FILE_PATH"/>
-            <transfer operation="delete" delete-key="SSL_TRUSTSTORE_PASSWORD"/>
-            <transfer operation="delete" delete-key="XAAUDIT.DB.IS_ENABLED"/>
-            <transfer operation="delete" delete-key="XAAUDIT.HDFS.DESTINATION_DIRECTORY"/>
-            <transfer operation="delete" delete-key="XAAUDIT.HDFS.IS_ENABLED"/>
-            <transfer operation="delete" delete-key="XAAUDIT.HDFS.LOCAL_ARCHIVE_DIRECTORY"/>
-            <transfer operation="delete" delete-key="XAAUDIT.DB.USER_NAME"/>
-            <transfer operation="delete" delete-key="XAAUDIT.DB.PASSWORD"/>
-            <transfer operation="delete" delete-key="XAAUDIT.HDFS.DESTINTATION_FILE"/>
-            <transfer operation="delete" delete-key="XAAUDIT.HDFS.DESTINTATION_FLUSH_INTERVAL_SECONDS"/>
-            <transfer operation="delete" delete-key="XAAUDIT.HDFS.DESTINTATION_OPEN_RETRY_INTERVAL_SECONDS"/>
-            <transfer operation="delete" delete-key="XAAUDIT.HDFS.DESTINTATION_ROLLOVER_INTERVAL_SECONDS"/>
-            <transfer operation="delete" delete-key="XAAUDIT.HDFS.LOCAL_ARCHIVE_MAX_FILE_COUNT"/>
-            <transfer operation="delete" delete-key="XAAUDIT.HDFS.LOCAL_BUFFER_DIRECTORY"/>
-            <transfer operation="delete" delete-key="XAAUDIT.HDFS.LOCAL_BUFFER_FILE"/>
-            <transfer operation="delete" delete-key="XAAUDIT.HDFS.LOCAL_BUFFER_FLUSH_INTERVAL_SECONDS"/>
-            <transfer operation="delete" delete-key="XAAUDIT.HDFS.LOCAL_BUFFER_ROLLOVER_INTERVAL_SECONDS"/>
-            <transfer operation="delete" delete-key="SQL_CONNECTOR_JAR"/>
-            <transfer operation="delete" delete-key="XAAUDIT.DB.FLAVOUR"/>
-            <transfer operation="delete" delete-key="XAAUDIT.DB.DATABASE_NAME"/>
-            <transfer operation="delete" delete-key="XAAUDIT.DB.HOSTNAME"/>
-            <transfer operation="delete" delete-key="REPOSITORY_NAME"/>
-            <transfer operation="delete" delete-key="POLICY_MGR_URL"/>
-          </definition>
-
-          <definition xsi:type="configure" id="hdp_2_3_0_0_remove_empty_storm_topology_submission_notifier_plugin_class"
-                      summary="Removing empty storm.topology.submission.notifier.plugin.class property">
-            <type>storm-site</type>
-            <transfer operation="delete" delete-key="storm.topology.submission.notifier.plugin.class" if-key="storm.topology.submission.notifier.plugin.class"
-                      if-type="storm-site" if-value=" "/>
-          </definition>
-          <definition xsi:type="configure" id="increase_storm_zookeeper_timeouts"
-                      summary="Increase storm.zookeeper.session.timeout and storm.zookeeper.connection.timeout property">
-            <type>storm-site</type>
-            <set key="storm.zookeeper.session.timeout"
-                 value="30000"
-                 if-key="storm.zookeeper.session.timeout"
-                 if-type="storm-site"
-                 if-value="20000" />
-            <set key="storm.zookeeper.connection.timeout"
-                 value="30000"
-                 if-key="storm.zookeeper.connection.timeout"
-                 if-type="storm-site"
-                 if-value="15000" />
-          </definition>
-        </changes>
-      </component>
-    </service>
-
-    <service name="RANGER">
-      <component name="RANGER_ADMIN">
-        <changes>
-          <definition xsi:type="configure" id="hdp_2_3_0_0_update_ranger_env">
-            <type>ranger-env</type>
-            <set key="xml_configurations_supported" value="true"/>
-            <set key="xasecure.audit.destination.solr" value="false"/>
-          </definition>
-
-           <definition xsi:type="configure" id="hdp_2_3_0_0_set_ranger_admin_ssl_flag">
-            <type>ranger-admin-site</type>
-            <set key="ranger.service.https.attrib.ssl.enabled" value="true" if-type="ranger-site" if-key="http.enabled" if-value="false" />
-          </definition>
-
-          <definition xsi:type="configure" id="hdp_2_3_0_0_update_ranger_admin" summary="Updating Ranger Admin">
-            <type>ranger-admin-site</type>
-            <transfer operation="copy" from-type="ranger-site" from-key="https.attrib.clientAuth"
-                      to-key="ranger.service.https.attrib.clientAuth" default-value=""/>
-            <transfer operation="copy" from-type="ranger-site" from-key="https.attrib.keystoreFile"
-                      to-key="ranger.https.attrib.keystore.file" default-value=""/>
-            <transfer operation="copy" from-type="ranger-site" from-key="https.attrib.keystorePass"
-                      to-key="ranger.service.https.attrib.keystore.pass" default-value="" mask="true"/>
-            <transfer operation="copy" from-type="ranger-site" from-key="https.attrib.keyAlias"
-                      to-key="ranger.service.https.attrib.keystore.keyalias" default-value=""/>
-            <transfer operation="copy" from-type="ranger-site" from-key="https.service.port"
-                      to-key="ranger.service.https.port" default-value=""/>
-            <transfer operation="copy" from-type="ranger-site" from-key="http.enabled"
-                      to-key="ranger.service.http.enabled" default-value=""/>
-            <transfer operation="copy" from-type="ranger-site" from-key="http.service.port"
-                      to-key="ranger.service.http.port" default-value=""/>
-
-            <transfer operation="copy" from-type="admin-properties" from-key="authServiceHostName"
-                      to-key="ranger.unixauth.service.hostname" default-value=""/>
-            <transfer operation="copy" from-type="admin-properties" from-key="authServicePort"
-                      to-key="ranger.unixauth.service.port" default-value=""/>
-            <transfer operation="copy" from-type="admin-properties" from-key="authentication_method"
-                      to-key="ranger.authentication.method" default-value=""/>
-            <transfer operation="copy" from-type="admin-properties" from-key="remoteLoginEnabled"
-                      to-key="ranger.unixauth.remote.login.enabled" default-value=""/>
-            <transfer operation="copy" from-type="admin-properties" from-key="xa_ldap_url" to-key="ranger.ldap.url"
-                      default-value=""/>
-            <transfer operation="copy" from-type="admin-properties" from-key="xa_ldap_userDNpattern"
-                      to-key="ranger.ldap.user.dnpattern" default-value=""/>
-            <transfer operation="copy" from-type="admin-properties" from-key="xa_ldap_groupSearchBase"
-                      to-key="ranger.ldap.group.searchbase" default-value=""/>
-            <transfer operation="copy" from-type="admin-properties" from-key="xa_ldap_groupSearchFilter"
-                      to-key="ranger.ldap.group.searchfilter" default-value=""/>
-            <transfer operation="copy" from-type="admin-properties" from-key="xa_ldap_groupRoleAttribute"
-                      to-key="ranger.ldap.group.roleattribute" default-value=""/>
-            <transfer operation="copy" from-type="admin-properties" from-key="xa_ldap_ad_domain"
-                      to-key="ranger.ldap.ad.domain" default-value=""/>
-            <transfer operation="copy" from-type="admin-properties" from-key="xa_ldap_ad_url" to-key="ranger.ldap.ad.url"
-                      default-value=""/>
-            <transfer operation="copy" from-type="admin-properties" from-key="db_user" to-key="ranger.jpa.jdbc.user"
-                      default-value=""/>
-            <transfer operation="copy" from-type="admin-properties" from-key="db_password"
-                      to-key="ranger.jpa.jdbc.password" default-value="" mask="true"/>
-            <transfer operation="copy" from-type="admin-properties" from-key="audit_db_user"
-                      to-key="ranger.jpa.audit.jdbc.user" default-value=""/>
-            <transfer operation="copy" from-type="admin-properties" from-key="audit_db_password"
-                      to-key="ranger.jpa.audit.jdbc.password" default-value="" mask="true"/>
-
-            <set key="ranger.externalurl" value="{{ranger_external_url}}"/>
-            <set key="ranger.audit.source.type" value="db"/>
-          </definition>
-
-          <definition xsi:type="configure" id="hdp_2_3_0_0_update_ranger_site">
-            <type>ranger-site</type>
-            <transfer operation="delete" delete-key="HTTPS_CLIENT_AUTH"/>
-            <transfer operation="delete" delete-key="HTTPS_KEYSTORE_FILE"/>
-            <transfer operation="delete" delete-key="HTTPS_KEYSTORE_PASS"/>
-            <transfer operation="delete" delete-key="HTTPS_KEY_ALIAS"/>
-            <transfer operation="delete" delete-key="HTTPS_SERVICE_PORT"/>
-            <transfer operation="delete" delete-key="HTTP_ENABLED"/>
-            <transfer operation="delete" delete-key="HTTP_SERVICE_PORT"/>
-          </definition>
-
-          <definition xsi:type="configure" id="hdp_2_3_0_0_update_ranger_delete_oracle_home">
-            <type>ranger-env</type>
-            <transfer operation="delete" delete-key="oracle_home"/>
-          </definition>
-
-          <definition xsi:type="configure" id="hdp_2_3_0_0_update_ranger_admin_hdfs_audit">
-            <type>ranger-env</type>
-            <set key="xasecure.audit.destination.hdfs" value="false" if-type="ranger-env" if-key="xasecure.audit.destination.hdfs" if-value="false"/>
-          </definition>
-
-          <definition xsi:type="configure" id="hdp_2_3_0_0_update_ranger_admin_db_audit">
-            <type>ranger-env</type>
-            <set key="xasecure.audit.destination.db" value="true" if-type="ranger-env" if-key="xasecure.audit.destination.db" if-value="true"/>
-          </definition>
-
-          <definition xsi:type="configure" id="hdp_2_3_0_0_update_ranger_usersync" summary="Updating Ranger Usersync">
-            <type>ranger-ugsync-site</type>
-            <transfer operation="copy" from-type="usersync-properties" from-key="CRED_KEYSTORE_FILENAME"
-                      to-key="ranger.usersync.credstore.filename" default-value="/etc/ranger/usersync/ugsync.jceks"/>
-            <transfer operation="copy" from-type="usersync-properties" from-key="MIN_UNIX_USER_ID_TO_SYNC"
-                      to-key="ranger.usersync.unix.minUserId" default-value=""/>
-            <transfer operation="copy" from-type="usersync-properties" from-key="SYNC_LDAP_BIND_DN"
-                      to-key="ranger.usersync.ldap.binddn" default-value=""/>
-            <transfer operation="copy" from-type="usersync-properties" from-key="SYNC_LDAP_BIND_PASSWORD"
-                      to-key="ranger.usersync.ldap.ldapbindpassword" default-value="" mask="true"/>
-            <transfer operation="copy" from-type="usersync-properties" from-key="SYNC_LDAP_GROUPNAME_CASE_CONVERSION"
-                      to-key="ranger.usersync.ldap.groupname.caseconversion" default-value=""/>
-            <transfer operation="copy" from-type="usersync-properties" from-key="SYNC_LDAP_URL"
-                      to-key="ranger.usersync.ldap.url" default-value=""/>
-            <transfer operation="copy" from-type="usersync-properties" from-key="SYNC_LDAP_USERNAME_CASE_CONVERSION"
-                      to-key="ranger.usersync.ldap.username.caseconversion" default-value=""/>
-            <transfer operation="copy" from-type="usersync-properties" from-key="SYNC_LDAP_USER_GROUP_NAME_ATTRIBUTE"
-                      to-key="ranger.usersync.ldap.user.groupnameattribute" default-value=""/>
-            <transfer operation="copy" from-type="usersync-properties" from-key="SYNC_LDAP_USER_NAME_ATTRIBUTE"
-                      to-key="ranger.usersync.ldap.user.nameattribute" default-value=""/>
-            <transfer operation="copy" from-type="usersync-properties" from-key="SYNC_LDAP_USER_OBJECT_CLASS"
-                      to-key="ranger.usersync.ldap.user.objectclass" default-value=""/>
-            <transfer operation="copy" from-type="usersync-properties" from-key="SYNC_LDAP_USER_SEARCH_BASE"
-                      to-key="ranger.usersync.ldap.user.searchbase" default-value=""/>
-            <transfer operation="copy" from-type="usersync-properties" from-key="SYNC_LDAP_USER_SEARCH_FILTER"
-                      to-key="ranger.usersync.ldap.user.searchfilter" default-value=""/>
-            <transfer operation="copy" from-type="usersync-properties" from-key="SYNC_LDAP_USER_SEARCH_SCOPE"
-                      to-key="ranger.usersync.ldap.user.searchscope" default-value=""/>
-            <transfer operation="copy" from-type="usersync-properties" from-key="logdir" to-key="ranger.usersync.logdir"
-                      default-value=""/>
-            <transfer operation="copy" from-type="usersync-properties" from-key="SYNC_SOURCE"
-                      to-key="ranger.usersync.sync.source" default-value="unix"/>
-            <transfer operation="copy" from-type="usersync-properties" from-key="POLICY_MGR_URL"
-                      to-key="ranger.usersync.policymanager.baseURL" default-value="{{ranger_external_url}}"/>
-
-            <set key="ranger.usersync.sleeptimeinmillisbetweensynccycle" value="60000"/>
-          </definition>
-
-          <definition xsi:type="configure" id="hdp_2_3_0_0_update_ranger_usersync_sync_source">
-            <type>ranger-ugsync-site</type>
-            <set key="ranger.usersync.source.impl.class" 
-              value="org.apache.ranger.unixusersync.process.UnixUserGroupBuilder" 
-              if-type="usersync-properties" if-key="SYNC_SOURCE" if-value="unix"/>
-
-            <set key="ranger.usersync.source.impl.class" 
-              value="org.apache.ranger.ldapusersync.process.LdapUserGroupBuilder" 
-              if-type="usersync-properties" if-key="SYNC_SOURCE" if-value="ldap"/>
-          </definition>
-
-          <definition xsi:type="configure" id="hdp_2_3_0_0_update_ranger_usersync_properties">
-            <type>usersync-properties</type>
-            <transfer operation="delete" delete-key="CRED_KEYSTORE_FILENAME"/>
-            <transfer operation="delete" delete-key="MIN_UNIX_USER_ID_TO_SYNC"/>
-            <transfer operation="delete" delete-key="SYNC_INTERVAL"/>
-            <transfer operation="delete" delete-key="SYNC_LDAP_BIND_DN"/>
-            <transfer operation="delete" delete-key="SYNC_LDAP_BIND_PASSWORD"/>
-            <transfer operation="delete" delete-key="SYNC_LDAP_GROUPNAME_CASE_CONVERSION"/>
-            <transfer operation="delete" delete-key="SYNC_LDAP_URL"/>
-            <transfer operation="delete" delete-key="SYNC_LDAP_USERNAME_CASE_CONVERSION"/>
-            <transfer operation="delete" delete-key="SYNC_LDAP_USER_GROUP_NAME_ATTRIBUTE"/>
-            <transfer operation="delete" delete-key="SYNC_LDAP_USER_NAME_ATTRIBUTE"/>
-            <transfer operation="delete" delete-key="SYNC_LDAP_USER_OBJECT_CLASS"/>
-            <transfer operation="delete" delete-key="SYNC_LDAP_USER_SEARCH_BASE"/>
-            <transfer operation="delete" delete-key="SYNC_LDAP_USER_SEARCH_FILTER"/>
-            <transfer operation="delete" delete-key="SYNC_LDAP_USER_SEARCH_SCOPE"/>
-            <transfer operation="delete" delete-key="logdir"/>
-            <transfer operation="delete" delete-key="SYNC_SOURCE"/>
-            <transfer operation="delete" delete-key="POLICY_MGR_URL"/>
-          </definition>
-        </changes>
-      </component>
-    </service>
-
-    <service name="HBASE">
-      <component name="HBASE_MASTER">
-        <changes>
-          <definition xsi:type="configure" id="hdp_2_3_0_0_hbase_master_adjust_phoenix_scheduler_factory">
-            <type>hbase-site</type>
-            <set key="hbase.region.server.rpc.scheduler.factory.class" 
-              value="org.apache.hadoop.hbase.ipc.PhoenixRpcSchedulerFactory" 
-              if-type="hbase-env" if-key="phoenix_sql_enabled" if-value="true"/>          
-          </definition>
-
-          <definition xsi:type="configure" id="hdp_2_3_0_0_hbase_master_adjust_phoenix_rpc_controller_factory">
-            <type>hbase-site</type>
-            <set key="hbase.rpc.controllerfactory.class" 
-              value="org.apache.hadoop.hbase.ipc.controller.ServerRpcControllerFactory" 
-              if-type="hbase-env" if-key="phoenix_sql_enabled" if-value="true"/>          
-          </definition>
-
-          <definition xsi:type="configure"
-                      id="hdp_2_3_0_0_hbase_master_set_global_memstore_size">
-            <type>hbase-site</type>
-            <transfer operation="copy" from-type="hbase-site"
-                      from-key="hbase.regionserver.global.memstore.upperLimit"
-                      to-key="hbase.regionserver.global.memstore.size"
-                      default-value="0.4"/>
-          </definition>
-
-          <definition xsi:type="configure" id="hdp_2_3_0_0_hbase_master_adjust_phoenix_indexed_wal_edit_codec">
-            <type>hbase-site</type>
-            <set key="hbase.regionserver.wal.codec" 
-              value="org.apache.hadoop.hbase.regionserver.wal.IndexedWALEditCodec" 
-              if-type="hbase-env" if-key="phoenix_sql_enabled" if-value="true"/>
-          </definition>
-
-          <definition xsi:type="configure"
-                      id="hdp_2_3_0_0_hbase_master_adjust_authorization_coprocessors"
-                      summary="Updating Authorization Coprocessors">
-            <type>hbase-site</type>
-            <replace key="hbase.coprocessor.master.classes"
-                     find="com.xasecure.authorization.hbase.XaSecureAuthorizationCoprocessor"
-                     replace-with="org.apache.ranger.authorization.hbase.RangerAuthorizationCoprocessor"/>
-            <replace key="hbase.coprocessor.region.classes"
-                     find="com.xasecure.authorization.hbase.XaSecureAuthorizationCoprocessor"
-                     replace-with="org.apache.ranger.authorization.hbase.RangerAuthorizationCoprocessor"/>
-          </definition>
-
-          <definition xsi:type="configure"
-                      id="hdp_2_3_0_0_hbase_master_transition_ranger_hbase_policy"
-                      summary="Transitioning Ranger HBase Policy">
-            <type>ranger-hbase-policymgr-ssl</type>
-            <transfer operation="copy"
-                      from-type="ranger-hbase-plugin-properties"
-                      from-key="SSL_KEYSTORE_FILE_PATH"
-                      to-key="xasecure.policymgr.clientssl.keystore"
-                      default-value="/usr/hdp/current/hbase-client/conf/ranger-plugin-keystore.jks"/>
-            <transfer operation="copy"
-                      from-type="ranger-hbase-plugin-properties"
-                      from-key="SSL_KEYSTORE_PASSWORD"
-                      to-key="xasecure.policymgr.clientssl.keystore.password"
-                      mask="true" default-value="myKeyFilePassword"/>
-            <transfer operation="copy"
-                      from-type="ranger-hbase-plugin-properties"
-                      from-key="SSL_TRUSTSTORE_FILE_PATH"
-                      to-key="xasecure.policymgr.clientssl.truststore"
-                      default-value="/usr/hdp/current/hbase-client/conf/ranger-plugin-truststore.jks"/>
-            <transfer operation="copy"
-                      from-type="ranger-hbase-plugin-properties"
-                      from-key="SSL_TRUSTSTORE_PASSWORD"
-                      to-key="xasecure.policymgr.clientssl.truststore.password"
-                      mask="true" default-value="changeit"/>
-          </definition>
-
-          <definition xsi:type="configure"
-                      id="hdp_2_3_0_0_hbase_master_transition_ranger_hbase_audit"
-                      summary="Transitioning Ranger HBase Audit">
-            <type>ranger-hbase-audit</type>
-            <transfer operation="copy"
-                      from-type="ranger-hbase-plugin-properties"
-                      from-key="XAAUDIT.DB.IS_ENABLED"
-                      to-key="xasecure.audit.destination.db"
-                      default-value="false"/>
-            <transfer operation="copy"
-                      from-type="ranger-hbase-plugin-properties"
-                      from-key="XAAUDIT.HDFS.DESTINATION_DIRECTORY"
-                      to-key="xasecure.audit.destination.hdfs.dir"
-                      default-value="hdfs://NAMENODE_HOSTNAME:8020/ranger/audit"/>
-            <transfer operation="copy"
-                      from-type="ranger-hbase-plugin-properties"
-                      from-key="XAAUDIT.HDFS.IS_ENABLED"
-                      to-key="xasecure.audit.destination.hdfs"
-                      default-value="true"/>
-            <transfer operation="copy"
-                      from-type="ranger-hbase-plugin-properties"
-                      from-key="XAAUDIT.HDFS.LOCAL_ARCHIVE_DIRECTORY"
-                      to-key="xasecure.audit.destination.hdfs.batch.filespool.dir"
-                      default-value="/var/log/hbase/audit/hdfs/spool"/>
-            <transfer operation="copy"
-                      from-type="ranger-hbase-plugin-properties"
-                      from-key="XAAUDIT.DB.USER_NAME"
-                      to-key="xasecure.audit.destination.db.user"
-                      default-value=""/>
-            <transfer operation="copy"
-                      from-type="ranger-hbase-plugin-properties"
-                      from-key="XAAUDIT.DB.PASSWORD"
-                      to-key="xasecure.audit.destination.db.password"
-                      mask="true" default-value=""/>
-            <set key="xasecure.audit.credential.provider.file"
-                 value="jceks://file{{credential_file}}"/>
-            <set key="xasecure.audit.destination.solr" value="false"/>
-            <set key="xasecure.audit.destination.solr.urls"
-                 value="{{ranger_audit_solr_urls}}"/>
-            <set key="xasecure.audit.destination.solr.zookeepers" value="none"/>
-            <set key="xasecure.audit.destination.solr.batch.filespool.dir"
-                 value="/var/log/hbase/audit/solr/spool"/>
-            <set key="xasecure.audit.destination.db.jdbc.driver"
-                 value="{{jdbc_driver}}"/>
-            <set key="xasecure.audit.destination.db.jdbc.url"
-                 value="{{audit_jdbc_url}}"/>
-            <set key="xasecure.audit.provider.summary.enabled" value="true"/>
-          </definition>
-
-          <definition xsi:type="configure"
-                      id="hdp_2_3_0_0_hbase_master_copy_ranger_policies">
-            <type>ranger-hbase-security</type>
-            <transfer operation="copy"
-                      from-type="ranger-hbase-plugin-properties"
-                      from-key="UPDATE_XAPOLICIES_ON_GRANT_REVOKE"
-                      to-key="xasecure.hbase.update.xapolicies.on.grant.revoke"
-                      default-value="true"/>
-            <transfer operation="copy"
-                      from-type="ranger-hbase-plugin-properties"
-                      from-key="POLICY_MGR_URL"
-                      to-key="ranger.plugin.hbase.policy.rest.url"
-                      default-value="{{policymgr_mgr_url}}"/>
-            <transfer operation="copy"
-                      from-type="ranger-hbase-plugin-properties"
-                      from-key="REPOSITORY_NAME"
-                      to-key="ranger.plugin.hbase.service.name"
-                      default-value="{{repo_name}}"/>
-          </definition>
-
-          <definition xsi:type="configure"
-                      id="hdp_2_3_0_0_hbase_master_delete_old_ranger_properties">
-            <type>ranger-hbase-plugin-properties</type>
-            <transfer operation="delete"
-                      delete-key="XAAUDIT.HDFS.DESTINTATION_FILE"/>
-            <transfer operation="delete"
-                      delete-key="XAAUDIT.HDFS.DESTINTATION_FLUSH_INTERVAL_SECONDS"/>
-            <transfer operation="delete"
-                      delete-key="XAAUDIT.HDFS.DESTINTATION_OPEN_RETRY_INTERVAL_SECONDS"/>
-            <transfer operation="delete"
-                      delete-key="XAAUDIT.HDFS.DESTINTATION_ROLLOVER_INTERVAL_SECONDS"/>
-            <transfer operation="delete"
-                      delete-key="XAAUDIT.HDFS.LOCAL_ARCHIVE_MAX_FILE_COUNT"/>
-            <transfer operation="delete"
-                      delete-key="XAAUDIT.HDFS.LOCAL_BUFFER_DIRECTORY"/>
-            <transfer operation="delete"
-                      delete-key="XAAUDIT.HDFS.LOCAL_BUFFER_FILE"/>
-            <transfer operation="delete"
-                      delete-key="XAAUDIT.HDFS.LOCAL_BUFFER_FLUSH_INTERVAL_SECONDS"/>
-            <transfer operation="delete"
-                      delete-key="XAAUDIT.HDFS.LOCAL_BUFFER_ROLLOVER_INTERVAL_SECONDS"/>
-            <transfer operation="delete" delete-key="SQL_CONNECTOR_JAR"/>
-            <transfer operation="delete" delete-key="REPOSITORY_NAME"/>
-            <transfer operation="delete" delete-key="POLICY_MGR_URL"/>
-            <transfer operation="delete"
-                      delete-key="UPDATE_XAPOLICIES_ON_GRANT_REVOKE"/>
-            <transfer operation="delete" delete-key="SSL_KEYSTORE_FILE_PATH"/>
-            <transfer operation="delete" delete-key="SSL_KEYSTORE_PASSWORD"/>
-            <transfer operation="delete" delete-key="SSL_TRUSTSTORE_FILE_PATH"/>
-            <transfer operation="delete" delete-key="SSL_TRUSTSTORE_PASSWORD"/>
-            <transfer operation="delete" delete-key="XAAUDIT.DB.IS_ENABLED"/>
-            <transfer operation="delete"
-                      delete-key="XAAUDIT.HDFS.DESTINATION_DIRECTORY"/>
-            <transfer operation="delete" delete-key="XAAUDIT.HDFS.IS_ENABLED"/>
-            <transfer operation="delete"
-                      delete-key="XAAUDIT.HDFS.LOCAL_ARCHIVE_DIRECTORY"/>
-            <transfer operation="delete" delete-key="XAAUDIT.DB.USER_NAME"/>
-            <transfer operation="delete" delete-key="XAAUDIT.DB.PASSWORD"/>
-            <transfer operation="delete" delete-key="XAAUDIT.DB.FLAVOUR"/>
-            <transfer operation="delete" delete-key="XAAUDIT.DB.DATABASE_NAME"/>
-            <transfer operation="delete" delete-key="XAAUDIT.DB.HOSTNAME"/>
-          </definition>
-
-          <!-- These HBASE configs changed in HDP 2.3.4.0, so upgrades like HDP 2.2 to 2.3.4.0+ still need them. -->
-          <definition xsi:type="configure" id="hdp_2_3_4_0_hbase_remove_local_indexing">
-            <type>hbase-site</type>
-            <set key="phoenix.functions.allowUserDefinedFunctions" value="true"/>
-            <transfer operation="delete" delete-key="hbase.master.loadbalancer.class"
-                      if-key="hbase.master.loadbalancer.class"
-                      if-type="hbase-site"
-                      if-value="org.apache.phoenix.hbase.index.balancer.IndexLoadBalancer"/>
-            <replace key="hbase.coprocessor.master.classes"
-                     find="org.apache.phoenix.hbase.index.master.IndexMasterObserver"
-                     replace-with=""/>
-            <replace key="hbase.coprocessor.regionserver.classes"
-                     find="org.apache.hadoop.hbase.regionserver.LocalIndexMerger"
-                     replace-with=""/>
-
-          </definition>
-        </changes>
-      </component>
-    </service>
-
-    <service name="OOZIE">
-      <component name="OOZIE_SERVER">
-        <changes>
-          <definition xsi:type="configure" id="hdp_2_3_0_0_oozie_remove_redundant_configurations" summary="Updating oozie-site to remove redundant configurations">
-            <type>oozie-site</type>
-            <transfer operation="delete" delete-key="*" preserve-edits="true">
-              <keep-key>oozie.base.url</keep-key>
-              <keep-key>oozie.services.ext</keep-key>
-              <keep-key>oozie.db.schema.name</keep-key>
-              <keep-key>oozie.service.JPAService.jdbc.username</keep-key>
-              <keep-key>oozie.service.JPAService.jdbc.password</keep-key>
-              <keep-key>oozie.service.JPAService.jdbc.driver</keep-key>
-              <keep-key>oozie.service.JPAService.jdbc.url</keep-key>
-              <keep-key>oozie.service.AuthorizationService.security.enabled</keep-key>
-              <keep-key>oozie.authentication.type</keep-key>
-              <keep-key>oozie.authentication.simple.anonymous.allowed</keep-key>
-              <keep-key>oozie.authentication.kerberos.name.rules</keep-key>
-              <keep-key>oozie.service.HadoopAccessorService.hadoop.configurations</keep-key>
-              <keep-key>oozie.service.HadoopAccessorService.kerberos.enabled</keep-key>
-              <keep-key>oozie.service.URIHandlerService.uri.handlers</keep-key>
-
-              <!-- required by Falcon and should be preserved -->
-              <keep-key>oozie.service.ELService.ext.functions.coord-job-submit-instances</keep-key>
-              <keep-key>oozie.service.ELService.ext.functions.coord-action-create-inst</keep-key>
-              <keep-key>oozie.service.ELService.ext.functions.coord-action-create</keep-key>
-              <keep-key>oozie.service.ELService.ext.functions.coord-job-submit-data</keep-key>
-              <keep-key>oozie.service.ELService.ext.functions.coord-action-start</keep-key>
-              <keep-key>oozie.service.ELService.ext.functions.coord-sla-submit</keep-key>
-              <keep-key>oozie.service.ELService.ext.functions.coord-sla-create</keep-key>
-            </transfer>
-            <set key="oozie.credentials.credentialclasses"
-                 value="hcat=org.apache.oozie.action.hadoop.HCatCredentials,hive2=org.apache.oozie.action.hadoop.Hive2Credentials"/>
-          </definition>
-
-          <definition xsi:type="configure" id="hdp_2_4_0_0_oozie_remove_service_classes" summary="Updating Oozie Service classes">
-            <type>oozie-site</type>
-            <replace key="oozie.services" find="org.apache.oozie.service.CoordinatorStoreService," replace-with="" />
-          </definition>
-        </changes>
-      </component>
-    </service>
-
-    <service name="KNOX">
-      <component name="KNOX_GATEWAY">
-        <changes>
-          <definition xsi:type="configure" id="hdp_2_3_0_0_knox_configure_ranger_policy"
-                      summary="Configuring Ranger Knox Policy">
-            <type>ranger-knox-policymgr-ssl</type>
-            <transfer operation="copy" from-type="ranger-knox-plugin-properties" from-key="SSL_KEYSTORE_FILE_PATH"
-                      to-key="xasecure.policymgr.clientssl.keystore"
-                      default-value="/usr/hdp/current/knox-server/conf/ranger-plugin-keystore.jks"/>
-            <transfer operation="copy" from-type="ranger-knox-plugin-properties" from-key="SSL_KEYSTORE_PASSWORD"
-                      to-key="xasecure.policymgr.clientssl.keystore.password" default-value="myKeyFilePassword"
-                      mask="true"/>
-            <transfer operation="copy" from-type="ranger-knox-plugin-properties" from-key="SSL_TRUSTSTORE_FILE_PATH"
-                      to-key="xasecure.policymgr.clientssl.truststore"
-                      default-value="/usr/hdp/current/knox-server/conf/ranger-plugin-truststore.jks"/>
-            <transfer operation="copy" from-type="ranger-knox-plugin-properties" from-key="SSL_TRUSTSTORE_PASSWORD"
-                      to-key="xasecure.policymgr.clientssl.truststore.password" default-value="changeit" mask="true"/>
-          </definition>
-
-          <definition xsi:type="configure" id="hdp_2_3_0_0_knox_configure_ranger_knox_audit"
-                      summary="Configuring Ranger Knox Audit">
-            <type>ranger-knox-audit</type>
-            <transfer operation="copy" from-type="ranger-knox-plugin-properties" from-key="XAAUDIT.DB.IS_ENABLED"
-                      to-key="xasecure.audit.destination.db" default-value="true"/>
-            <transfer operation="copy" from-type="ranger-knox-plugin-properties"
-                      from-key="XAAUDIT.HDFS.DESTINATION_DIRECTORY" to-key="xasecure.audit.destination.hdfs.dir"
-                      default-value="hdfs://NAMENODE_HOSTNAME:8020/ranger/audit"/>
-            <transfer operation="copy" from-type="ranger-knox-plugin-properties" from-key="XAAUDIT.HDFS.IS_ENABLED"
-                      to-key="xasecure.audit.destination.hdfs" default-value="true"/>
-            <transfer operation="copy" from-type="ranger-knox-plugin-properties"
-                      from-key="XAAUDIT.HDFS.LOCAL_ARCHIVE_DIRECTORY"
-                      to-key="xasecure.audit.destination.hdfs.batch.filespool.dir"
-                      default-value="/var/log/knox/audit/hdfs/spool"/>
-            <transfer operation="copy" from-type="ranger-knox-plugin-properties" from-key="XAAUDIT.DB.USER_NAME"
-                      to-key="xasecure.audit.destination.db.user" default-value=""/>
-            <transfer operation="copy" from-type="ranger-knox-plugin-properties" from-key="XAAUDIT.DB.PASSWORD"
-                      to-key="xasecure.audit.destination.db.password" default-value="" mask="true"/>
-            <set key="xasecure.audit.credential.provider.file" value="jceks://file{{credential_file}}"/>
-            <set key="xasecure.audit.destination.solr" value="false"/>
-            <set key="xasecure.audit.destination.solr.urls" value="{{ranger_audit_solr_urls}}"/>
-            <set key="xasecure.audit.destination.solr.zookeepers" value="none"/>
-            <set key="xasecure.audit.destination.solr.batch.filespool.dir" value="/var/log/knox/audit/solr/spool"/>
-            <set key="xasecure.audit.destination.db.jdbc.driver" value="{{jdbc_driver}}"/>
-            <set key="xasecure.audit.destination.db.jdbc.url" value="{{audit_jdbc_url}}"/>
-            <set key="xasecure.audit.provider.summary.enabled" value="false"/>
-          </definition>
-
-          <definition xsi:type="configure" id="hdp_2_3_0_0_knox_remove_deprecated_ranger_properties"
-                      summary="Removing Deprecated Ranger Knox Plugin Configurations">
-            <type>ranger-knox-plugin-properties</type>
-            <transfer operation="delete" delete-key="SSL_KEYSTORE_FILE_PATH"/>
-            <transfer operation="delete" delete-key="SSL_KEYSTORE_PASSWORD"/>
-            <transfer operation="delete" delete-key="SSL_TRUSTSTORE_FILE_PATH"/>
-            <transfer operation="delete" delete-key="SSL_TRUSTSTORE_PASSWORD"/>
-            <transfer operation="delete" delete-key="XAAUDIT.DB.IS_ENABLED"/>
-            <transfer operation="delete" delete-key="XAAUDIT.HDFS.DESTINATION_DIRECTORY"/>
-            <transfer operation="delete" delete-key="XAAUDIT.HDFS.IS_ENABLED"/>
-            <transfer operation="delete" delete-key="XAAUDIT.HDFS.LOCAL_ARCHIVE_DIRECTORY"/>
-            <transfer operation="delete" delete-key="XAAUDIT.DB.USER_NAME"/>
-            <transfer operation="delete" delete-key="XAAUDIT.DB.PASSWORD"/>
-            <transfer operation="delete" delete-key="XAAUDIT.HDFS.DESTINTATION_FILE"/>
-            <transfer operation="delete" delete-key="XAAUDIT.HDFS.DESTINTATION_FLUSH_INTERVAL_SECONDS"/>
-            <transfer operation="delete" delete-key="XAAUDIT.HDFS.DESTINTATION_OPEN_RETRY_INTERVAL_SECONDS"/>
-            <transfer operation="delete" delete-key="XAAUDIT.HDFS.DESTINTATION_ROLLOVER_INTERVAL_SECONDS"/>
-            <transfer operation="delete" delete-key="XAAUDIT.HDFS.LOCAL_ARCHIVE_MAX_FILE_COUNT"/>
-            <transfer operation="delete" delete-key="XAAUDIT.HDFS.LOCAL_BUFFER_DIRECTORY"/>
-            <transfer operation="delete" delete-key="XAAUDIT.HDFS.LOCAL_BUFFER_FILE"/>
-            <transfer operation="delete" delete-key="XAAUDIT.HDFS.LOCAL_BUFFER_FLUSH_INTERVAL_SECONDS"/>
-            <transfer operation="delete" delete-key="XAAUDIT.HDFS.LOCAL_BUFFER_ROLLOVER_INTERVAL_SECONDS"/>
-            <transfer operation="delete" delete-key="SQL_CONNECTOR_JAR"/>
-            <transfer operation="delete" delete-key="XAAUDIT.DB.FLAVOUR"/>
-            <transfer operation="delete" delete-key="XAAUDIT.DB.DATABASE_NAME"/>
-            <transfer operation="delete" delete-key="XAAUDIT.DB.HOSTNAME"/>
-            <transfer operation="delete" delete-key="REPOSITORY_NAME"/>
-            <transfer operation="delete" delete-key="POLICY_MGR_URL"/>
-          </definition>
-        </changes>
-      </component>
-    </service>
-  </services>
-</upgrade-config-changes>