Mailing-List: contact dev-help@hawq.incubator.apache.org; run by ezmlm
Precedence: bulk
Reply-To: dev@hawq.incubator.apache.org
MIME-Version: 1.0
In-Reply-To: <CAOPnHqeBvxo6H89cKrMTssjN8gF3ZrgAXseVckXkh21HdnVjqQ@mail.gmail.com>
References: <CANAtR61KciO2CnuRiOP9myk4tC5DnV7NEyLmMgV8aiYsm_7sdA@mail.gmail.com>
 <CANAtR60MT+pRu9aNRa69G-v-uJ7XfprFX-3eQjWBP0E9wEfziA@mail.gmail.com>
 <CAMTypuu807zE-bt9ouisFyP-sanJTXosNPVWjdWCea5ZSVDkoQ@mail.gmail.com>
 <CANAtR62VUuKEEDUaQGgYS=a7wFzjaNDDBh4dxxXu6VF-TQuZ-A@mail.gmail.com> <CAOPnHqeBvxo6H89cKrMTssjN8gF3ZrgAXseVckXkh21HdnVjqQ@mail.gmail.com>
From: Ruilong Huo <rhuo@pivotal.io>
Date: Thu, 28 Jul 2016 16:41:57 +0800
Message-ID: <CAMTypuvmswk0cpy3JDbomfK4SVvBu506fuDu5o8LYmGNMMpr7g@mail.gmail.com>
Subject: Re: HAWQ Ranger Integration Design Doc
To: dev@hawq.incubator.apache.org
Content-Type: multipart/alternative; boundary=001a113b1364605c3a0538ae1ba8
archived-at: Thu, 28 Jul 2016 08:42:05 -0000

--001a113b1364605c3a0538ae1ba8
Content-Type: text/plain; charset=UTF-8

Very cool proposal to integrate ranger with hawq. Here are two of my
concerns, any clarification would be great. Thanks.

1. If users created in LDAP/Unix will be synced by UserSync processes
periodically, is that means there is a chance that a newly created user
might not be found in Ranger Admin Server just because it is not synced yet?

2. What's the expected behaviour when ranger becomes offline temporarily,
and thus cannot provided sync/grant/check/audit functionalities in that
interim? Will hawq stop responding to queries that are about to start, and
wait for ranger to get back?

Best regards,
Ruilong Huo

On Thu, Jul 28, 2016 at 4:10 PM, Hong Wu <xunzhangthu@gmail.com> wrote:

> Thanks Wen, the right link should be: HAWQRangerSupportDesign.pdf
> <
> https://issues.apache.org/jira/secure/attachment/12820665/HAWQRangerSupportDesign.pdf
> >.
> Good work!
>
> Best
> xunzhang
>
> 2016-07-28 16:08 GMT+08:00 Wen Lin <wlin@pivotal.io>:
>
> > It's very strange, I attached a PDF file in the email, but it seems be
> > blocked.
> > The document can be downloaded from
> > https://issues.apache.org/jira/browse/HAWQ-256
> >
> > On Thu, Jul 28, 2016 at 4:04 PM, Ruilong Huo <rhuo@pivotal.io> wrote:
> >
> > > Any link to the doc?
> > >
> > > Best regards,
> > > Ruilong Huo
> > >
> > > On Thu, Jul 28, 2016 at 4:04 PM, Wen Lin <wlin@pivotal.io> wrote:
> > >
> > > >
> > > >
> > > > On Thu, Jul 28, 2016 at 4:03 PM, Wen Lin <wlin@pivotal.io> wrote:
> > > >
> > > >> Hi,
> > > >>
> > > >> A design document for HAWQ Ranger Integration has been worked out by
> > > >> Hubert, Lili and me.
> > > >> Please share your suggestion or comments.
> > > >>
> > > >> Regards!
> > > >>
> > > >
> > > >
> > >
> >
>

--001a113b1364605c3a0538ae1ba8--