ranger-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Hajime Osako (JIRA)" <j...@apache.org>
Subject [jira] [Created] (RANGER-1989) Ranger Admin may fail to start after enabling SSLHadoop GroupMapping
Date Wed, 21 Feb 2018 23:35:00 GMT
Hajime Osako created RANGER-1989:

             Summary: Ranger Admin may fail to start after enabling SSLHadoop GroupMapping
                 Key: RANGER-1989
                 URL: https://issues.apache.org/jira/browse/RANGER-1989
             Project: Ranger
          Issue Type: Bug
          Components: admin
    Affects Versions: 0.7.0
            Reporter: Hajime Osako

Opening this Jira to request Ranger community to add commons-io-x.y.jar in the classpath
with default installation.

Thank you.


After setting up Hadoop GroupMapping with "hadoop.security.group.mapping.provider.ldap.bind.password.*file*"
for HDFS and YARN, Ranger Admin may fail to start if SSL is enabled.

The following error is in catalina.out:
Exception in thread "main" java.lang.NoClassDefFoundError: org/apache/commons/io/Charsets
at org.apache.hadoop.security.LdapGroupsMapping.extractPassword(LdapGroupsMapping.java:667)
at org.apache.hadoop.security.LdapGroupsMapping.setConf(LdapGroupsMapping.java:588)
This is because, in LdapGroupsMapping.setConf() above, if ".bind.password" is empty, it tries
to extract from ".bind.password.file" with extractPassword(), and inside of this method org.apache.commons.io.Charsets
is used, however, commons-io.jar doesn't seem to be in the Ranger Admin classpath.

An example of workarounds is simply copying commons-io-x.y.jar, like below: 

cp -p /usr/hdp/current/ranger-admin/ews/webapp/WEB-INF/lib/commons-io-2.4.jar /usr/hdp/current/ranger-admin/ews/lib/

This message was sent by Atlassian JIRA

View raw message