PowerScale OneFS HDFS Configuration Guide

Apache Ranger support

OneFS supports Apache Ranger as part of a Hadoop deployment with a PowerScale cluster.

The Apache Ranger console provides a centralized security framework to manage access control over Hadoop data access components such as Apache Hive and Apache HBase. These policies can be set for both individual users or groups and then enforced consistently on files, folders, and databases.

Only Ranger's HDFS authorization policies with Deny conditions are supported by OneFS. Documentation for Apache JIRA RANGER-606 describes how to use Deny conditions, which were added to Apache Ranger 0.6.0.

For more information on Apache Ranger and specific HDP components, refer to the Apache Ranger pages on the Hortonworks site.

• AD, Kerberos, and local authentication are supported.
• One-way SSL with Ranger policy server is supported with MIT KDC and Active Directory (AD).
• Apache Ranger audit of HDFS access is not currently supported.
• Tag policies are not currently supported.