ranger-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Sailaja Polavarapu (JIRA)" <j...@apache.org>
Subject [jira] [Assigned] (RANGER-1989) Ranger Admin may fail to start after enabling SSLHadoop GroupMapping
Date Tue, 24 Apr 2018 22:24:01 GMT

     [ https://issues.apache.org/jira/browse/RANGER-1989?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]

Sailaja Polavarapu reassigned RANGER-1989:
------------------------------------------

    Assignee: Sailaja Polavarapu  (was: Qiang Zhang)

> Ranger Admin may fail to start after enabling SSLHadoop GroupMapping
> --------------------------------------------------------------------
>
>                 Key: RANGER-1989
>                 URL: https://issues.apache.org/jira/browse/RANGER-1989
>             Project: Ranger
>          Issue Type: Bug
>          Components: admin
>    Affects Versions: 0.7.0
>            Reporter: Hajime Osako
>            Assignee: Sailaja Polavarapu
>            Priority: Major
>         Attachments: 0001-RANGER-2082-Adding-commons-io-jar-file-to-ews-lib-fo.patch
>
>
> Opening this Jira to request Ranger community to add commons-io-x.y.jar in the classpath
with default installation.
> Thank you.
>  
> After setting up Hadoop GroupMapping with "hadoop.security.group.mapping.provider.ldap.bind.password.*file*"
for HDFS and YARN, Ranger Admin may fail to start if SSL is enabled.
> The following error is in catalina.out:
> {noformat}
> Exception in thread "main" java.lang.NoClassDefFoundError: org/apache/commons/io/Charsets
> at org.apache.hadoop.security.LdapGroupsMapping.extractPassword(LdapGroupsMapping.java:667)
> at org.apache.hadoop.security.LdapGroupsMapping.setConf(LdapGroupsMapping.java:588)
> ...{noformat}
> This is because, in LdapGroupsMapping.setConf() above, if ".bind.password" is empty,
it tries to extract from ".bind.password.file" with extractPassword(), and inside of this
method org.apache.commons.io.Charsets is used, however, commons-io.jar doesn't seem to be
in the Ranger Admin classpath.
> h3. WORKAROUND:
> An example of workarounds is simply copying commons-io-x.y.jar, like below: 
> cp -p /usr/hdp/current/ranger-admin/ews/webapp/WEB-INF/lib/commons-io-2.4.jar /usr/hdp/current/ranger-admin/ews/lib/



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

Mime
View raw message