Opening this Jira to request Ranger community to add commons-io-x.y.jar in the classpath with default installation.
After setting up Hadoop GroupMapping with "hadoop.security.group.mapping.provider.ldap.bind.password.file" for HDFS and YARN, Ranger Admin may fail to start if SSL is enabled.
The following error is in catalina.out:
This is because, in LdapGroupsMapping.setConf() above, if ".bind.password" is empty, it tries to extract from ".bind.password.file" with extractPassword(), and inside of this method org.apache.commons.io.Charsets is used, however, commons-io.jar doesn't seem to be in the Ranger Admin classpath.
An example of workarounds is simply copying commons-io-x.y.jar, like below:
cp -p /usr/hdp/current/ranger-admin/ews/webapp/WEB-INF/lib/commons-io-2.4.jar /usr/hdp/current/ranger-admin/ews/lib/