forked from docs/doc-exports
Yang, Tong
6182f91ba8
Reviewed-by: Hasko, Vladimir <vladimir.hasko@t-systems.com> Co-authored-by: Yang, Tong <yangtong2@huawei.com> Co-committed-by: Yang, Tong <yangtong2@huawei.com>
57 lines
9.2 KiB
HTML
57 lines
9.2 KiB
HTML
<a name="mrs_01_1850"></a><a name="mrs_01_1850"></a>
|
|
|
|
<h1 class="topictitle1">Logging In to the Ranger Web UI</h1>
|
|
<div id="body1595917958225"><p id="mrs_01_1850__p183452684620">Ranger provides a centralized permission management framework to implement fine-grained permission control on components such as HDFS, HBase, Hive, and Yarn. In addition, Ranger also provides a web UI for <span id="mrs_01_1850__ph163601544185617">system </span>administrators to perform operations.</p>
|
|
<div class="section" id="mrs_01_1850__section2695135412818"><a name="mrs_01_1850__section2695135412818"></a><a name="section2695135412818"></a><h4 class="sectiontitle">Ranger User Type</h4><p id="mrs_01_1850__p9588362911">Ranger users are classified into <strong id="mrs_01_1850__b1669214103433">admin</strong>, <strong id="mrs_01_1850__b20102161314433">user</strong>, and <strong id="mrs_01_1850__b132148173436">auditor</strong>. Different users have different permissions to view and operate the Ranger management interface.</p>
|
|
<ul id="mrs_01_1850__ul485517183718"><li id="mrs_01_1850__li15855973379"><strong id="mrs_01_1850__b9586916194419">Admin</strong>: A security administrator can view all page content, manage permission management plug-ins and access control policies, view audit information, and set user types.</li><li id="mrs_01_1850__li13187122714370"><strong id="mrs_01_1850__b126661242810">Auditor</strong>: An audit administrator can view the permission management plug-ins and access control policies.</li><li id="mrs_01_1850__li6955193915377"><strong id="mrs_01_1850__b1871914212398">User</strong>: A common user who can be assigned with specific permissions by the <span id="mrs_01_1850__ph1576015175711">system </span>administrator.</li></ul>
|
|
</div>
|
|
<div class="section" id="mrs_01_1850__section284610578508"><h4 class="sectiontitle">Logging In to the Ranger Web UI</h4><p id="mrs_01_1850__p0872819434">Security mode (Kerberos authentication is enabled for clusters)</p>
|
|
<ol id="mrs_01_1850__ol195993645114"><li id="mrs_01_1850__li2059919610510"><span>Log in to FusionInsight Manager as user <strong id="mrs_01_1850__b1488722872617">admin</strong>. For details, see <a href="mrs_01_2124.html">Accessing FusionInsight Manager (MRS 3.x or Later)</a>. Choose <strong id="mrs_01_1850__b15761185218495">Cluster</strong> > <strong id="mrs_01_1850__b167611552124912">Services</strong> > <strong id="mrs_01_1850__b1276155244912">Ranger</strong>. The Ranger service overview page is displayed.</span></li><li id="mrs_01_1850__li1749563911520"><span>Click <strong id="mrs_01_1850__b1659217215509">RangerAdmin</strong> in the <strong id="mrs_01_1850__b12597429508">Basic Information</strong> area. The Ranger web UI is displayed.</span><p><ul id="mrs_01_1850__ul1791111587121"><li id="mrs_01_1850__li5910958161211">The <strong id="mrs_01_1850__b1799972051718">admin</strong> user in Ranger belongs to the <strong id="mrs_01_1850__b579642871711">User</strong> type and can only view the <strong id="mrs_01_1850__b9876163916188">Access Manager</strong> as well as <strong id="mrs_01_1850__b13404134371817">Security Zone</strong> pages.</li><li id="mrs_01_1850__li139111858161212">To view all management pages, switch to user <strong id="mrs_01_1850__b1017312713197">rangeradmin</strong> or other users who have the Ranger administrator permissions.<ol type="a" id="mrs_01_1850__ol19111358171218"><li id="mrs_01_1850__li1291025861219">On the Ranger WebUI, click the user name in the upper right corner and choose <strong id="mrs_01_1850__b14550164842214">Log Out</strong> to log out of the Ranger WebUI.<p id="mrs_01_1850__p186317534448"><span><img id="mrs_01_1850__image28931136154414" src="en-us_image_0000001389336372.png"></span></p>
|
|
</li><li id="mrs_01_1850__li89111658111213">Log in to the system as user <strong id="mrs_01_1850__b13765854132311">rangeradmin</strong> (default password: <strong id="mrs_01_1850__b1129116112418">Rangeradmin@123</strong>) or another user who has the Ranger administrator permissions. </li></ol>
|
|
</li></ul>
|
|
</p></li></ol>
|
|
<p id="mrs_01_1850__p16501171664616">Normal mode (Kerberos authentication is disabled for clusters)</p>
|
|
<ol id="mrs_01_1850__ol28071922154614"><li id="mrs_01_1850__li81232025134612"><span>Log in to FusionInsight Manager as user <strong id="mrs_01_1850__b11941761515">admin</strong>. For details, see <a href="mrs_01_2124.html">Accessing FusionInsight Manager (MRS 3.x or Later)</a>. Choose <strong id="mrs_01_1850__b17151117151510">Cluster</strong> > <strong id="mrs_01_1850__b1516717161515">Services</strong> > <strong id="mrs_01_1850__b0160173157">Ranger</strong>. The Ranger service overview page is displayed.</span></li><li id="mrs_01_1850__li693417355463"><span>Click <strong id="mrs_01_1850__b189551861518">RangerAdmin</strong> in the <strong id="mrs_01_1850__b20896118171514">Basic Information</strong> area. The Ranger web UI is displayed.</span><p><p id="mrs_01_1850__p7859354134510">The <strong id="mrs_01_1850__b10296714103111">admin</strong> user in Ranger belongs to the <strong id="mrs_01_1850__b1480632112311">Admin</strong> type and can view all management pages of Ranger without switching to user <strong id="mrs_01_1850__b1285965416452">rangeradmin</strong>.</p>
|
|
<div class="note" id="mrs_01_1850__note138591754184517"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="mrs_01_1850__p585919547452">When a user logs in to the Ranger WebUI as user <strong id="mrs_01_1850__b456993330">rangeradmin</strong> in normal mode, error 401 is reported.</p>
|
|
</div></div>
|
|
</p></li></ol>
|
|
<div class="p" id="mrs_01_1850__p845854620442">On the homepage of Ranger web UI, you can view the permission management plug-ins of the services integrated in Ranger. The plug-ins can be used to set more fine-grained permissions. For details about functions of main operations you can perform on the page, see <a href="#mrs_01_1850__t2e8dff27d0214c0885ce9fa207af6953">Table 1</a>.
|
|
<div class="tablenoborder"><a name="mrs_01_1850__t2e8dff27d0214c0885ce9fa207af6953"></a><a name="t2e8dff27d0214c0885ce9fa207af6953"></a><table cellpadding="4" cellspacing="0" summary="" id="mrs_01_1850__t2e8dff27d0214c0885ce9fa207af6953" frame="border" border="1" rules="all"><caption><b>Table 1 </b>Functions of each operation portal on the Ranger page</caption><thead align="left"><tr id="mrs_01_1850__en-us_topic_0046736886_row34076345"><th align="left" class="cellrowborder" valign="top" width="24.240000000000002%" id="mcps1.3.3.6.2.2.3.1.1"><p id="mrs_01_1850__en-us_topic_0046736886_p8720581">Portal</p>
|
|
</th>
|
|
<th align="left" class="cellrowborder" valign="top" width="75.76%" id="mcps1.3.3.6.2.2.3.1.2"><p id="mrs_01_1850__en-us_topic_0046736886_p35278494">Function</p>
|
|
</th>
|
|
</tr>
|
|
</thead>
|
|
<tbody><tr id="mrs_01_1850__en-us_topic_0046736886_row38985771"><td class="cellrowborder" valign="top" width="24.240000000000002%" headers="mcps1.3.3.6.2.2.3.1.1 "><p id="mrs_01_1850__en-us_topic_0046736886_p3730901">Access Manager</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="75.76%" headers="mcps1.3.3.6.2.2.3.1.2 "><p id="mrs_01_1850__p9581194614241">You can view the permission management plug-ins of each service integrated in Ranger. The plug-ins can be used to set more fine-grained permissions. For details, see <a href="mrs_01_1851.html">Configuring Component Permission Policies</a>.</p>
|
|
</td>
|
|
</tr>
|
|
<tr id="mrs_01_1850__en-us_topic_0046736886_row50817438"><td class="cellrowborder" valign="top" width="24.240000000000002%" headers="mcps1.3.3.6.2.2.3.1.1 "><p id="mrs_01_1850__en-us_topic_0046736886_p22571789">Audit</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="75.76%" headers="mcps1.3.3.6.2.2.3.1.2 "><p id="mrs_01_1850__p185810468246">You can view the audit logs related to Ranger running and permission control. For details, see <a href="mrs_01_1852.html">Viewing Ranger Audit Information</a>.</p>
|
|
</td>
|
|
</tr>
|
|
<tr id="mrs_01_1850__en-us_topic_0046736886_row59550034"><td class="cellrowborder" valign="top" width="24.240000000000002%" headers="mcps1.3.3.6.2.2.3.1.1 "><p id="mrs_01_1850__en-us_topic_0046736886_p58823444">Security Zone</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="75.76%" headers="mcps1.3.3.6.2.2.3.1.2 "><p id="mrs_01_1850__p15580144652418"><span id="mrs_01_1850__ph1179917380588">System </span><span id="mrs_01_1850__ph1768784314585">a</span>dministrators can divide resources of each component into multiple security zones where different administrators set security policies for specified resources of services to facilitate management. For details, see <a href="mrs_01_1853.html">Configuring a Security Zone</a>.</p>
|
|
</td>
|
|
</tr>
|
|
<tr id="mrs_01_1850__en-us_topic_0046736886_row44981334"><td class="cellrowborder" valign="top" width="24.240000000000002%" headers="mcps1.3.3.6.2.2.3.1.1 "><p id="mrs_01_1850__en-us_topic_0046736886_p19609461">Settings</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="75.76%" headers="mcps1.3.3.6.2.2.3.1.2 "><p id="mrs_01_1850__p19561184611243">You can view Ranger permission settings, such as users, user groups, and roles. For details, see <a href="mrs_01_1854.html">Viewing Ranger Permission Information</a>.</p>
|
|
</td>
|
|
</tr>
|
|
</tbody>
|
|
</table>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
<div>
|
|
<div class="familylinks">
|
|
<div class="parentlink"><strong>Parent topic:</strong> <a href="mrs_01_1849.html">Using Ranger (MRS 3.x)</a></div>
|
|
</div>
|
|
</div>
|
|
|