Skip to content

Commit 8e2c3de

Browse files
Update ranger-policies-for-spark.md
Updated the steps to add rangerlook up user
1 parent 16958c8 commit 8e2c3de

File tree

1 file changed

+7
-4
lines changed

1 file changed

+7
-4
lines changed

articles/hdinsight/spark/ranger-policies-for-spark.md

Lines changed: 7 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,7 @@ title: Configure Apache Ranger policies for Spark SQL in HDInsight with Enterpri
33
description: This article describes how to configure Ranger policies for Spark SQL with Enterprise Security Package.
44
ms.service: hdinsight-aks
55
ms.topic: how-to
6-
ms.date: 02/12/2024
6+
ms.date: 03/07/2024
77
---
88

99
# Configure Apache Ranger policies for Spark SQL in HDInsight with Enterprise Security Package
@@ -174,9 +174,9 @@ Let's say that you have the policies defined in the Ranger repo already under th
174174

175175
:::image type="content" source="./media/ranger-policies-for-spark/ambari-config-ranger-security.png" alt-text="Screenshot shows Ambari config ranger security." lightbox="./media/ranger-policies-for-spark/ambari-config-ranger-security.png":::
176176

177-
You can also open this configuration in **/etc/spark3/conf** by using SSH.
177+
or You can also open this configuration in **/etc/spark3/conf** by using SSH.
178178

179-
1. Edit two configurations (**ranger.plugin.spark.service.name** and **ranger.plugin.spark.policy.cache.dir**) to point to the old policy repo **oldclustername_hive**, and then save the configurations.
179+
Edit two configurations (**ranger.plugin.spark.service.name** and **ranger.plugin.spark.policy.cache.dir**) to point to the old policy repo **oldclustername_hive**, and then save the configurations.
180180

181181
Ambari:
182182

@@ -186,6 +186,10 @@ Let's say that you have the policies defined in the Ranger repo already under th
186186

187187
:::image type="content" source="./media/ranger-policies-for-spark/config-update-xml.png" alt-text="Screenshot that shows a configuration update for service name in XML." lightbox="./media/ranger-policies-for-spark/config-update-xml.png":::
188188

189+
1. Click on edit button for **oldclustername_hive** and add **rangersparklookup** user in the **policy.download.auth.users** and **tag.download.auth.users** list.
190+
191+
:::image type="content" source="./media/ranger-policies-for-spark/" alt-text="Screenshot that shows edit option for ranger service." lightbox="./media/ranger-policies-for-spark/":::
192+
189193
1. Restart the Ranger and Spark services from Ambari.
190194

191195
The policies are applied on databases in the Spark catalog. If you want to access the databases in the Hive catalog:
@@ -198,5 +202,4 @@ The policies are applied on databases in the Spark catalog. If you want to acces
198202
## Known issues
199203

200204
- Apache Ranger integration with Spark SQL doesn't work if the Ranger admin is down.
201-
- The Ranger database can be overloaded if more than 20 Spark sessions are started concurrently because of continuous policy pulls.
202205
- In Ranger audit logs, when you hover over the **Resource** column, it doesn't show the entire query that you ran.

0 commit comments

Comments
 (0)