RANGER-5373: addressed review comments; verified kerberos authentication in admin, usersync and tagsync services

Author: mneethiraj

dev-support/ranger-docker/Dockerfile.ranger

@@ -29,6 +29,7 @@ COPY ./dist/ranger-${RANGER_VERSION}-admin.tar.gz /home/ranger/dist/
 COPY ./scripts/ranger.sh                                         ${RANGER_SCRIPTS}/
 COPY ./scripts/ranger-admin-install-${RANGER_DB_TYPE}.properties ${RANGER_SCRIPTS}/ranger-admin-install.properties
 COPY ./scripts/create-ranger-services.py                         ${RANGER_SCRIPTS}/
+COPY ./scripts/core-site-kerberos.xml                            ${RANGER_SCRIPTS}/
 
 RUN    tar xvfz /home/ranger/dist/ranger-${RANGER_VERSION}-admin.tar.gz --directory=${RANGER_HOME} \
     && ln -s ${RANGER_HOME}/ranger-${RANGER_VERSION}-admin ${RANGER_HOME}/admin \

dev-support/ranger-docker/Dockerfile.ranger-kms

@@ -26,6 +26,7 @@ COPY ./dist/ranger-${KMS_VERSION}-kms.tar.gz                   /home/ranger/dist
 
 COPY ./scripts/ranger-kms.sh                                   ${RANGER_SCRIPTS}/
 COPY ./scripts/ranger-kms-install-${RANGER_DB_TYPE}.properties ${RANGER_SCRIPTS}/ranger-kms-install.properties
+COPY ./scripts/core-site-kerberos.xml                          ${RANGER_SCRIPTS}/
 
 RUN tar xvfz /home/ranger/dist/ranger-${KMS_VERSION}-kms.tar.gz --directory=${RANGER_HOME} && \
     ln -s ${RANGER_HOME}/ranger-${KMS_VERSION}-kms ${RANGER_HOME}/kms && \

dev-support/ranger-docker/Dockerfile.ranger-tagsync

@@ -26,6 +26,7 @@ COPY ./dist/ranger-${TAGSYNC_VERSION}-tagsync.tar.gz /home/ranger/dist/
 COPY ./scripts/ranger-tagsync.sh                     ${RANGER_SCRIPTS}/
 COPY ./scripts/ranger-tagsync-install.properties     ${RANGER_SCRIPTS}/
 COPY ./scripts/ranger-tagsync-tags.json              ${RANGER_SCRIPTS}/
+COPY ./scripts/core-site-kerberos.xml                ${RANGER_SCRIPTS}/
 
 RUN tar xvfz /home/ranger/dist/ranger-${TAGSYNC_VERSION}-tagsync.tar.gz --directory=${RANGER_HOME} && \
     ln -s ${RANGER_HOME}/ranger-${TAGSYNC_VERSION}-tagsync ${RANGER_HOME}/tagsync && \

dev-support/ranger-docker/Dockerfile.ranger-usersync

@@ -26,6 +26,7 @@ COPY ./dist/ranger-${USERSYNC_VERSION}-usersync.tar.gz /home/ranger/dist/
 COPY ./scripts/ranger-usersync.sh                 ${RANGER_SCRIPTS}/
 COPY ./scripts/ranger-usersync-install.properties ${RANGER_SCRIPTS}/
 COPY ./scripts/ugsync-file-source.csv             ${RANGER_SCRIPTS}/
+COPY ./scripts/core-site-kerberos.xml             ${RANGER_SCRIPTS}/
 
 RUN tar xvfz /home/ranger/dist/ranger-${USERSYNC_VERSION}-usersync.tar.gz --directory=${RANGER_HOME} && \
     ln -s ${RANGER_HOME}/ranger-${USERSYNC_VERSION}-usersync ${RANGER_HOME}/usersync && \

dev-support/ranger-docker/config/kdc/entrypoint.sh

@@ -19,7 +19,7 @@
 set -e
 
 REALM="${REALM:-EXAMPLE.COM}"
-KDC_HOST="${KDC_HOST:-ranger-kdc.example.com}"
+KDC_HOST="${KDC_HOST:-ranger-kdc.rangernw}"
 MASTER_PASSWORD="${MASTER_PASSWORD:-masterpassword}"
 ADMIN_PRINC="${ADMIN_PRINCIPAL:-admin/admin}"
 ADMIN_PASSWORD="${ADMIN_PASSWORD:-adminpassword}"

dev-support/ranger-docker/config/kdc/krb5.conf

@@ -7,11 +7,9 @@
 
 [realms]
  EXAMPLE.COM = {
-  kdc = ranger-kdc.example.com
-  admin_server = ranger-kdc.example.com
+  kdc = ranger-kdc.rangernw
+  admin_server = ranger-kdc.rangernw
  }
 
 [domain_realm]
- .example.com = EXAMPLE.COM
- example.com = EXAMPLE.COM
-
+ .rangernw = EXAMPLE.COM

dev-support/ranger-docker/docker-compose.ranger-build.yml

@@ -8,7 +8,7 @@ services:
         - RANGER_BASE_BUILD_VERSION=${RANGER_BASE_BUILD_VERSION}
     image: ranger-build
     container_name: ranger-build
-    hostname: ranger-build.example.com
+    hostname: ranger-build.rangernw
     networks:
       - ranger
     volumes:

dev-support/ranger-docker/docker-compose.ranger-db.yml

@@ -7,7 +7,7 @@ services:
         - POSTGRES_VERSION=${POSTGRES_VERSION}
     image: ranger-postgres
     container_name: ranger-postgres
-    hostname: ranger-db.example.com
+    hostname: ranger-db.rangernw
     ports:
       - "5432:5432"
     networks:
@@ -27,7 +27,7 @@ services:
     image: ranger-mysql
     command: --default-authentication-plugin=mysql_native_password
     container_name: ranger-mysql
-    hostname: ranger-db.example.com
+    hostname: ranger-db.rangernw
     ports:
       - "3306:3306"
     networks:
@@ -47,7 +47,7 @@ services:
         - ORACLE_VERSION=${ORACLE_VERSION}
     image: ranger-oracle
     container_name: ranger-oracle
-    hostname: ranger-db.example.com
+    hostname: ranger-db.rangernw
     ports:
       - "1521:1521"
     networks:
@@ -66,7 +66,7 @@ services:
         - SQLSERVER_VERSION=${SQLSERVER_VERSION}
     image: ranger-sqlserver
     container_name: ranger-sqlserver
-    hostname: ranger-db.example.com
+    hostname: ranger-db.rangernw
     ports:
       - "1433:1433"
     networks:

dev-support/ranger-docker/docker-compose.ranger-hadoop.yml

@@ -12,7 +12,7 @@ services:
         - KERBEROS_ENABLED=${KERBEROS_ENABLED}
     image: ranger-hadoop
     container_name: ranger-hadoop
-    hostname: ranger-hadoop.example.com
+    hostname: ranger-hadoop.rangernw
     stdin_open: true
     tty: true
     networks:

dev-support/ranger-docker/docker-compose.ranger-hbase.yml

@@ -11,7 +11,7 @@ services:
         - KERBEROS_ENABLED=${KERBEROS_ENABLED}
     image: ranger-hbase
     container_name: ranger-hbase
-    hostname: ranger-hbase.example.com
+    hostname: ranger-hbase.rangernw
     stdin_open: true
     tty: true
     networks: