Uploaded image for project: 'Ranger'
  1. Ranger
  2. RANGER-1989

Ranger Admin may fail to start after enabling SSLHadoop GroupMapping

    Details

    • Type: Bug
    • Status: Resolved
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: 0.7.0
    • Fix Version/s: 1.1.0
    • Component/s: admin
    • Labels:
      None

      Description

      Opening this Jira to request Ranger community to add commons-io-x.y.jar in the classpath with default installation.

      Thank you.

       

      After setting up Hadoop GroupMapping with "hadoop.security.group.mapping.provider.ldap.bind.password.file" for HDFS and YARN, Ranger Admin may fail to start if SSL is enabled.

      The following error is in catalina.out:

      Exception in thread "main" java.lang.NoClassDefFoundError: org/apache/commons/io/Charsets
      at org.apache.hadoop.security.LdapGroupsMapping.extractPassword(LdapGroupsMapping.java:667)
      at org.apache.hadoop.security.LdapGroupsMapping.setConf(LdapGroupsMapping.java:588)
      ...

      This is because, in LdapGroupsMapping.setConf() above, if ".bind.password" is empty, it tries to extract from ".bind.password.file" with extractPassword(), and inside of this method org.apache.commons.io.Charsets is used, however, commons-io.jar doesn't seem to be in the Ranger Admin classpath.

      WORKAROUND:

      An example of workarounds is simply copying commons-io-x.y.jar, like below: 

      cp -p /usr/hdp/current/ranger-admin/ews/webapp/WEB-INF/lib/commons-io-2.4.jar /usr/hdp/current/ranger-admin/ews/lib/

        Attachments

          Issue Links

            Activity

              People

              • Assignee:
                spolavarapu Sailaja Polavarapu
                Reporter:
                h_o Hajime Osako
              • Votes:
                0 Vote for this issue
                Watchers:
                2 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: