[RANGER-1649] Ranger Solr Plugin fails to refresh policy due to failure in ticket renewal mechanism

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.0.0
• Fix Version/s: 1.0.0
• Component/s: Ranger
• Assignee: Ramesh Mani
• Reporter: Ramesh Mani
• Created: 17/Jun/17 00:11
• Updated: 09/Aug/17 20:39
• Resolved: 09/Aug/17 20:39

Description

Ranger Solr Plugin fails to refresh policy due to failure in ticket renewal mechanism.
Ranger Plugin for non core Hadoop components like Solr, when it uses Hadoop UserGroupInformation api to set/get the UGI, and this UGI is used for Authenticated call to Download Policy / Audit to HDFS. When TGT expires there was failure as it never got renewed. (Core components like Hdfs, hive, hbase internally taking care of this with right keytab login and renewal ). So in this case when we do a MiscUtil.getUGILoginUser() to get UGI at the plugin, this call will invoke UGI.checkTGTAndReloginFromKeytab() to check and renew the TGT. This fails if the UGI is not created with Principal/Keytab.
In this issue when authWithConfig(), it uses the just Subject() alone to login and as a result checkTGTAndReloginFromKeytab() failed.