Infoworks supports the Sentry policies migration. When Hadoop is secured by Apache Sentry in both the source and target clusters, the Sentry policies must also be migrated.
WARNING: Ensure that no policies are defined in the target Sentry database. If not, take a backup and truncate the Sentry tables.
When the Replicator is installed, the $IW_HOME/infoworks-sentry directory is created by default which includes the following folders and files:
- connection: This folder includes the following files to configure the connection details of the source and target RDBMS used by Sentry: source.properties, target.properties
- backup: This folder includes the following files to configure the backup and restore details: export.txt - includes the SQL dump command, import.txt - includes the SQL import command.
- README: This file includes the basic commands for Sentry policies migration.
- change-map.properties: This file can be used to configure these mappings for Sentry migration, if the source URIs are mapped to different target URIs in the Replicator.
- infoworks-sentry-migration.jar: The file to be executed for Sentry migration.
Following are the steps to perform Sentry migration:
- Configure the source and target connection details in the source.properties and target.properties files respectively in the connection folder.
- Configure the database backup and restore commands in the export.txt and import.txt files respectively in the backup folder.
- Navigate to the $IW_HOME/infoworks-sentry folder and verify the connection details using the following command:
java -jar infoworks-sentry-migration.jar -v
The source and target connection success message will be displayed.
- Execute the following command for Sentry migration:
java -jar infoworks-sentry-migration.jar
The migration success message will be displayed.
Advanced Usage
If any changes in mapping are to be considered, execute the following command: java -jar infoworks-sentry-migration.jar -c <change_map_file_location>
If the files are not available in the default location, use the following command: