[RANGER-1989] Ranger Admin may fail to start after enabling SSLHadoop GroupMapping

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 0.7.0
• Fix Version/s: 1.1.0
• Component/s: admin
• Assignee: Sailaja Polavarapu
• Reporter: Hajime Osako
• Created: 21/Feb/18 23:34
• Updated: 03/Jul/18 05:51
• Resolved: 25/Apr/18 00:33

Description

Opening this Jira to request Ranger community to add commons-io-x.y.jar in the classpath with default installation.

Thank you.

 

After setting up Hadoop GroupMapping with "hadoop.security.group.mapping.provider.ldap.bind.password.file" for HDFS and YARN, Ranger Admin may fail to start if SSL is enabled.

The following error is in catalina.out:

Exception in thread "main" java.lang.NoClassDefFoundError: org/apache/commons/io/Charsets
at org.apache.hadoop.security.LdapGroupsMapping.extractPassword(LdapGroupsMapping.java:667)
at org.apache.hadoop.security.LdapGroupsMapping.setConf(LdapGroupsMapping.java:588)
...

This is because, in LdapGroupsMapping.setConf() above, if ".bind.password" is empty, it tries to extract from ".bind.password.file" with extractPassword(), and inside of this method org.apache.commons.io.Charsets is used, however, commons-io.jar doesn't seem to be in the Ranger Admin classpath.

WORKAROUND:

An example of workarounds is simply copying commons-io-x.y.jar, like below: 

cp -p /usr/hdp/current/ranger-admin/ews/webapp/WEB-INF/lib/commons-io-2.4.jar /usr/hdp/current/ranger-admin/ews/lib/

Issue Links

• Blocked: RANGER-2082 Ranger fails to start when using (core) LDAPGroupMapping - missing class