Configure JMX for Ranger Service

You can add the configuration parameters in Ambari to enable JMX monitoring for Ranger components.

---

Steps to Configure JMX

• In the ODP Ambari UI, navigate to Ranger > Configs > Advanced.
• In the ranger-env template section, locate configurations for:
  • ranger_admin
  • ranger_usersync
  • ranger_tagsync (if deployed)
• Add the following configuration to the template to enable JMX for Ranger.

Update the service configuration template with the appropriate JMX settings. Provide valid values for all placeholders (< >) for each Ranger component.

Configure JMX Without Security

export JAVA_OPTS="${JAVA_OPTS} -Dcom.sun.management.jmxremote -Dcom.sun.management.jmxremote.authenticate=false -Dcom.sun.management.jmxremote.ssl=false -Dcom.sun.management.jmxremote.port=<Ranger JMX Port>"

JMX with Basic Authentication

export JAVA_OPTS="${JAVA_OPTS} -Dcom.sun.management.jmxremote -Dcom.sun.management.jmxremote.authenticate=true -Dcom.sun.management.jmxremote.ssl=false -Dcom.sun.management.jmxremote.access.file=</path/to/jmxremote.access/file> -Dcom.sun.management.jmxremote.password.file=</path/to/jmxremote.password/file> -Dcom.sun.management.jmxremote.port=<Ranger JMX Port>"

JMX with Basic Authentication and SSL

export JAVA_OPTS="${JAVA_OPTS} -Dcom.sun.management.jmxremote -Dcom.sun.management.jmxremote.authenticate=true -Dcom.sun.management.jmxremote.ssl=true -Dcom.sun.management.jmxremote.registry.ssl=true -Djavax.net.ssl.keyStore=</path/to/keystore.jks/file> -Dcom.sun.management.jmxremote.access.file=</path/to/jmxremote.access/file> -Djavax.net.ssl.keyStorePassword=<Keystore Password> -Dcom.sun.management.jmxremote.password.file=</path/to/jmxremote.password/file> -Djavax.net.ssl.trustStore=</path/to/truststore.jks/file> -Djavax.net.ssl.trustStorePassword=<Truststore Password> -Dcom.sun.management.jmxremote.port=<Ranger JMX Port>"

• Save the configurations.
• Restart the Ranger service.