ranger-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Velmurugan Periasamy (JIRA)" <j...@apache.org>
Subject [jira] [Updated] (RANGER-2034) When ranger.ks.masterkey.password mismatch with DB store hash it outputs into catalina.out
Date Tue, 03 Jul 2018 04:23:00 GMT

     [ https://issues.apache.org/jira/browse/RANGER-2034?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]

Velmurugan Periasamy updated RANGER-2034:
-----------------------------------------
    Fix Version/s:     (was: 1.1.0)

> When ranger.ks.masterkey.password mismatch with DB store hash it outputs into catalina.out
> ------------------------------------------------------------------------------------------
>
>                 Key: RANGER-2034
>                 URL: https://issues.apache.org/jira/browse/RANGER-2034
>             Project: Ranger
>          Issue Type: Bug
>          Components: Ranger
>    Affects Versions: 0.7.2
>         Environment: HDP-2.6.3 -  Apache Ranger 0.7.0 
>            Reporter: Ernani Pereira de Mattos Junior
>            Assignee: Qiang Zhang
>            Priority: Minor
>              Labels: easyfix
>
> After unsuccessful migration of Ranger KMS from DB to HSM, the ranger.ks.masterkey.password
mismatched and thrown the following stack trace; 
>  
> {code:java}
> java.io.IOException: Keystore was tampered with, or password was incorrect 
> at org.apache.hadoop.crypto.key.RangerKeyStore.engineLoad(RangerKeyStore.java:393) 
> at org.apache.hadoop.crypto.key.RangerKeyStoreProvider.loadKeys(RangerKeyStoreProvider.java:151) 
> at org.apache.hadoop.crypto.key.RangerKeyStoreProvider.reloadKeys(RangerKeyStoreProvider.java:382) 
> at org.apache.hadoop.crypto.key.RangerKeyStoreProvider.<init>(RangerKeyStoreProvider.java:111) 
> at org.apache.hadoop.crypto.key.RangerKeyStoreProvider$Factory.createProvider(RangerKeyStoreProvider.java:399) 
> at org.apache.hadoop.crypto.key.KeyProviderFactory.get(KeyProviderFactory.java:95) 
> at org.apache.hadoop.crypto.key.kms.server.KMSWebApp.contextInitialized(KMSWebApp.java:177) 
> at org.apache.catalina.core.StandardContext.listenerStart(StandardContext.java:5110) 
> at org.apache.catalina.core.StandardContext.startInternal(StandardContext.java:5633) 
> at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:145) 
> at org.apache.catalina.core.ContainerBase$StartChild.call(ContainerBase.java:1694) 
> at org.apache.catalina.core.ContainerBase$StartChild.call(ContainerBase.java:1684) 
> at java.util.concurrent.FutureTask.run(FutureTask.java:266) 
> at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142) 
> at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617) 
> at java.lang.Thread.run(Thread.java:745) 
> Caused by: java.security.UnrecoverableKeyException: Password verification failed 
> at org.apache.hadoop.crypto.key.RangerKeyStore.engineLoad(RangerKeyStore.java:391) 
> ... 15 more 
> ERROR: Hadoop KMS could not be started 
> {code}
>  
>  
> The problem that I am bringing to your attention is clearly this is an Application Exception.
This exception is being output to catalina.out, and the kms.log does not indicate any trace
of what happen, even with DEBUG enabled. 
> My request is to copy or redirect this Application UnrecoverableKeyException to the configured
Application logging, in this case the kms.log. 
>  



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

Mime
View raw message