GBDS Security

• 1. GBDS 4 Security Overview
  • 1.1. Components
  • 1.2. Security-enabled Workflows
    • 1.2.1. Authentication
    • 1.2.2. Making an API Request
  • 1.3. Configuration
    • 1.3.1. Files
    • 1.3.2. Security Options
• 2. Integrating with Active Directory
  • 2.1. Verify DNS resolution
  • 2.2. Install required packages
  • 2.3. Integrate with AD
    • 2.3.1. Join the Domain
    • 2.3.2. Troubleshooting
• 3. Integrating with OpenLdap
  • 3.1. Install OpenLdap
    • 3.1.1. Dependencies
    • 3.1.2. Start Ldap Daemon
    • 3.1.3. Generate Root Password
    • 3.1.4. Create hdb-database
      • 3.1.4.1. Push the changes to the server
    • 3.1.5. Restrict Monitor Access to the ldapadm
      • 3.1.5.1. Push the changes to the server
    • 3.1.6. Add hdb-backend Configuration File
    • 3.1.7. Add Essential Ldap Schemas
    • 3.1.8. Enable memberOf Module
    • 3.1.9. Generate the database for your domain
  • 3.2. Troubleshooting
  • 3.3. Encrypt OpenLdap Passwords
    • 3.3.1. Configure Hash Algorithm
    • 3.3.2. Import the Password Policy Schema
    • 3.3.3. Load Password Policy Module
    • 3.3.4. Create Default Password Policy
  • 3.4. Improve Security
    • 3.4.1. Disable Anonymous Binding
    • 3.4.2. Disable Read Access to User Passwords
  • 3.5. Enable LDAPS
    • 3.5.1. Create your own Certificates
      • 3.5.1.1. Create your CA
      • 3.5.1.2. Create the Ldap Server Certificate
    • 3.5.2. Configure OpenLdap to use certificate and key
    • 3.5.3. Enable TLS Endpoint
    • 3.5.4. Force TLS
    • 3.5.5. Client-side TLS Configuration
  • 3.6. Create Bind user for Ranger and GBDS
  • 3.7. LDAP API
    • 3.7.1. Configuring the API
    • 3.7.2. Creating New Users and Groups
• 4. Installing Ranger
  • 4.1. Prerequisites
    • 4.1.1. Install ambari-infra
    • 4.1.2. Install and Configure MySQL instance
  • 4.2. Installing Ranger Service
    • 4.2.1. Ranger Admin
    • 4.2.2. Ranger User Info
    • 4.2.3. Ranger Audit
  • 4.3. Check Installation
    • 4.3.1. User Sync
    • 4.3.2. Solr Audit
  • 4.4. Enabling Ldap Integration with TLS
    • 4.4.1. Change Ldap Connection URL
    • 4.4.2. Import Ldaps Certificate
    • 4.4.3. Troubleshooting
      • 4.4.3.1. Unable to create SSLContext for communication to policy manager
• 5. Configuring GBDS Security
  • 5.1. Create GBDS Keystore
  • 5.2. Create trustore for LDAPS
  • 5.3. Update Configuration File
• 6. Installing Ranger Authorization Service
• 7. Configuring PHP LDAP Admin