Return-Path: X-Original-To: apmail-ambari-dev-archive@www.apache.org Delivered-To: apmail-ambari-dev-archive@www.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id 37F82171F5 for ; Sun, 14 Jun 2015 14:09:31 +0000 (UTC) Received: (qmail 44542 invoked by uid 500); 14 Jun 2015 13:38:38 -0000 Delivered-To: apmail-ambari-dev-archive@ambari.apache.org Received: (qmail 36743 invoked by uid 500); 14 Jun 2015 13:38:26 -0000 Mailing-List: contact dev-help@ambari.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: dev@ambari.apache.org Delivered-To: mailing list dev@ambari.apache.org Received: (qmail 17526 invoked by uid 99); 14 Jun 2015 10:07:00 -0000 Received: from arcas.apache.org (HELO arcas.apache.org) (140.211.11.28) by apache.org (qpsmtpd/0.29) with ESMTP; Sun, 14 Jun 2015 10:07:00 +0000 Date: Sun, 14 Jun 2015 10:07:00 +0000 (UTC) From: "Andrew Onischuk (JIRA)" To: dev@ambari.apache.org Message-ID: In-Reply-To: References: Subject: [jira] [Resolved] (AMBARI-11912) Ambari removing ranger group from ranger user after installation MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394 [ https://issues.apache.org/jira/browse/AMBARI-11912?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Andrew Onischuk resolved AMBARI-11912. -------------------------------------- Resolution: Fixed Committed to trunk and branch-2.1 > Ambari removing ranger group from ranger user after installation > ---------------------------------------------------------------- > > Key: AMBARI-11912 > URL: https://issues.apache.org/jira/browse/AMBARI-11912 > Project: Ambari > Issue Type: Bug > Reporter: Andrew Onischuk > Assignee: Andrew Onischuk > Fix For: 2.1.0 > > > After installation Ambari is removing the default `ranger` group from `ranger` > user and adding the `hadoop` user. This is breaking Unix Authentication. > Before Installing Ranger through Ambari > > > [root@pa-0105-postgres-1 yum.repos.d]# cat /etc/passwd | grep ranger > [root@pa-0105-postgres-1 yum.repos.d]# yum install -y ranger-admin > [root@pa-0105-postgres-1 yum.repos.d]# cat /etc/passwd | grep ranger > ranger:x:2546:498:Ranger:/var/lib/ranger:/bin/bash > [root@pa-0105-postgres-1 yum.repos.d]# groups ranger > ranger : ranger > [root@pa-0105-postgres-1 yum.repos.d]# yum install ranger-usersync > [root@pa-0105-postgres-1 yum.repos.d]# ls -l /usr/hdp/current/ranger-usersync/native/ > total 8 > -rwsr-x---. 1 root ranger 5640 Jun 1 00:13 credValidator.uexe > > After Installing Ranger through Ambari > > > [root@pa-0105-postgres-1 ranger-usersync]# groups ranger > ranger : hadoop > > Logs during installation in Ambari > > > Group['hadoop'] {'ignore_failures': False} > 2015-06-01 06:49:35,553 - Group['users'] {'ignore_failures': False} > 2015-06-01 06:49:35,553 - Group['ranger'] {'ignore_failures': False} > 2015-06-01 06:49:35,553 - Adding group Group['ranger'] > 2015-06-01 06:49:35,599 - User['ambari-qa'] {'gid': 'hadoop', 'ignore_failures': False, 'groups': ['users']} > 2015-06-01 06:49:35,601 - User['zookeeper'] {'gid': 'hadoop', 'ignore_failures': False, 'groups': ['hadoop']} > 2015-06-01 06:49:35,603 - User['hdfs'] {'gid': 'hadoop', 'ignore_failures': False, 'groups': ['hadoop']} > 2015-06-01 06:49:35,604 - User['ranger'] {'gid': 'hadoop', 'ignore_failures': False, 'groups': ['hadoop']} > 2015-06-01 06:49:35,605 - Adding user User['ranger'] > > CC sneethiraj/vperiasamy -- This message was sent by Atlassian JIRA (v6.3.4#6332)