[HDDS-9282] Authorization error Ozone plugin for Ranger

• Type: Bug
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Affects Version/s: 1.3.0
• Assignee: Tejaskriya Madhan
• Reporter: Chingachgook
• Created: 14/Sep/23 09:54
• Updated: 01/Nov/23 03:16

Description

When setting up a connection to Ozone from Ranger 2.3.0, I receive a message in the UI
Connection Failed.

Unable to retrieve any files using given parameters, You can still save the repository and start creating policies, but you would not be able to use autocomplete for resource names. Check ranger_admin.log for more info.
java.lang.NoClassDefFoundError: org/apache/hadoop/shaded/com/google/protobuf/ServiceException.
org.apache.hadoop.shaded.com.google.protobuf.ServiceException.

Error in Ranger Admin logs

 

2023-09-14 09:37:31,798 [timed-executor-pool-0] INFO [Base Client.java:126] Init Login: security not enabled, using username
2023-09-14 09:37:31,857 [http-nio-6080-exec-9] ERROR [ServiceMgr.java:198] ==> ServiceMgr.validateConfig Error:org.apache.ranger.plugin.client.HadoopException: java.lang.NoClassDefFoundError: org/apache/hadoop/shaded/com/google/protobuf/ServiceException

or

2023-09-14 10:02:18,401 [timed-executor-pool-0] ERROR [PasswordUtils.java:165] Unable to decrypt password due to error
javax.crypto.IllegalBlockSizeException: Input length must be multiple of 8 when decrypting with padded cipher
        at com.sun.crypto.provider.CipherCore.prepareInputBuffer(CipherCore.java:1005)
        at com.sun.crypto.provider.CipherCore.doFinal(CipherCore.java:848)
        at com.sun.crypto.provider.PBES1Core.doFinal(PBES1Core.java:432)
        at com.sun.crypto.provider.PBEWithMD5AndDESCipher.engineDoFinal(PBEWithMD5AndDESCipher.java:316)
        at javax.crypto.Cipher.doFinal(Cipher.java:2168)
        at org.apache.ranger.plugin.util.PasswordUtils.decrypt(PasswordUtils.java:150)
        at org.apache.ranger.plugin.util.PasswordUtils.decryptPassword(PasswordUtils.java:138)
        at org.apache.ranger.plugin.client.BaseClient.login(BaseClient.java:109)
        at org.apache.ranger.plugin.client.BaseClient.<init>(BaseClient.java:61)
        at org.apache.ranger.services.ozone.client.OzoneClient.<init>(OzoneClient.java:47)
        at org.apache.ranger.services.ozone.client.OzoneClient.connectionTest(OzoneClient.java:172)
        at org.apache.ranger.services.ozone.client.OzoneResourceMgr.connectionTest(OzoneResourceMgr.java:50)
        at org.apache.ranger.services.ozone.RangerServiceOzone.validateConfig(RangerServiceOzone.java:74)
        at org.apache.ranger.biz.ServiceMgr$ValidateCallable.actualCall(ServiceMgr.java:660)
        at org.apache.ranger.biz.ServiceMgr$ValidateCallable.actualCall(ServiceMgr.java:647)
        at org.apache.ranger.biz.ServiceMgr$TimedCallable.call(ServiceMgr.java:608)
        at java.util.concurrent.FutureTask.run(FutureTask.java:266)
        at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
        at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
        at java.lang.Thread.run(Thread.java:750)
2023-09-14 10:02:18,402 [timed-executor-pool-0] INFO [BaseClient.java:111] Password decryption failed; trying connection with received password string
2023-09-14 10:02:18,402 [timed-executor-pool-0] INFO [BaseClient.java:126] Init Login: security not enabled, using username
2023-09-14 10:02:18,487 [http-nio-6080-exec-10] ERROR [ServiceMgr.java:198] ==> ServiceMgr.validateConfig Error:org.apache.ranger.plugin.client.HadoopException: java.lang.NoClassDefFoundError: org/apache/hadoop/shaded/com/google/protobuf/ServiceException

The directory for the Ozone plugin had to be created manually in 

ews/webapp/WEB-INF/classes/ranger-plugins/ozone

 because it was not there by default and copied jars Ozone there after creation