How to troubleshoot Ranger Policy Synchronization?

How to troubleshoot Ranger Policy Synchronization?



hello my name is Hernan Fernandez and we're going to Travis you the Ranger policy synchronization first we need to understand the Ranger admin and plug-in relations check is the Ranger plugin is install check if the Ranger plugin is a neighbor understand what's happening when you enable this is here in the reindeer admin verify the policy cache file understand the plug-in status information and to know which loves to review in case of failure to understand the Ranger admin implying installation we to understand each one of these components first the reindeer admin is the web interface where you create the policies the plane is a piece of the Rangers software that run on the master component in the case of HDFS the master component is the name the plugin will connect to the Ranger admin in order to download the last copy of the policies some sort of dissipation a policy cache file will be created also the crane has two important tasks authorized the HDFS operations and how did each one of those to check if the Ranger Pegeen is install you can go to the master component linux server you can search for this RPM package be sure the RPM package is installed for your current SDP version also using RPM commands you can verify this package to check if the Ranger plug-in is enabled first you need to check the ranger configuration in Rayong conflict when you're playing you can check it apply in its neighbor also you need to check the run your cognizant neighbor on the master company you can go to Ranger HDFS plug-in properties and check if they are applying is enable here also in HDFS side you can check the try subclass in this case the tracer classify ranger one of the most common errors occur when ECL is enabled on rainy ramen when you enable HTTPS and renderman the plying maybe not be able to connect to the regular I mean in order to download the policies you need to check the ranger plugin trust in this configuration section you need to verify that this file exists and also have the certificates to connect to a reindeer admin if you are using to wait CCL you need to check the transferring key store for applying and al-sadr angel admin the policy cache file is a JSON file the risen Lord and Master component you can check in this directory a date and time of this file that will show you the last update time of the policies it's important also check the file size if the file size is zero right the policies have not been updated the range status information will show you the status of the plane in the case of HD phase you will see three important columns active tunnel and Las update last update will show you the last time when the policy was updated on trend it had me download will show you when the plane connect to the range arriving in order to download the policies an active will show you the time when the policy was enabled on the master component if the policy is still not syncing you need to check two important logs the master component logs in this case is the name of law you need to search for Ranger entries also you can check the Ranger admin access log on the Ranger node here you can search for download attempt from the play this information will give you an idea what may be finding on their policy synchronization

Leave a Reply

Your email address will not be published. Required fields are marked *