You are viewing a plain text version of this content. The canonical link for it is here.
Posted to user@ranger.apache.org by Venu Nadh Veeralanka <vv...@gmail.com> on 2016/09/17 07:29:08 UTC

Fwd: Ranger Integration with Hadoop:Issue-Unable to decrypt password due to error

Hi,

We are trying to integrate ranger-0.7.0-SNAPSHOT (first experience)  with
Cloudera Hadoop 5.7.1.

*We setup the CDH 5.7.1 on a single box.
*On the same box we setup below components as per the instructions
mentioned in https://cwiki.apache.org/confluence/display/RANGER/
Apache+Ranger+0.5.0+Installation

ranger-0.7.0-SNAPSHOT-admin
ranger-0.7.0-SNAPSHOT-usersync
ranger-0.7.0-SNAPSHOT-hdfs-plugin
ranger-0.7.0-SNAPSHOT-hbase-plugin


We are following authentication_method=UNIX.
Ranger UI is coming up, but while creating a HBase service It fails with
the below error.  Please guide me towards the solution.

2016-09-16 01:25:42,393 [timed-executor-pool-0] ERROR
org.apache.ranger.plugin.util.PasswordUtils (PasswordUtils.java:127) - *Unable
to decrypt password due to error*

javax.crypto.IllegalBlockSizeException: Input length must be multiple of 8
when decrypting with padded cipher

        at com.sun.crypto.provider.CipherCore.doFinal(CipherCore.java:913)

        at com.sun.crypto.provider.CipherCore.doFinal(CipherCore.java:824)

        at com.sun.crypto.provider.PBES1Core.doFinal(PBES1Core.java:416)

        at com.sun.crypto.provider.PBEWithMD5AndDESCipher.engineDoFinal
(PBEWithMD5AndDESCipher.java:316)

        at javax.crypto.Cipher.doFinal(Cipher.java:2165)

        at org.apache.ranger.plugin.util.PasswordUtils.decryptPassword(
PasswordUtils.java:112)

        at org.apache.ranger.plugin.client.BaseClient.login(BaseClient.
java:113)

        at org.apache.ranger.plugin.client.BaseClient.<init>(BaseClient
.java:59)

        at org.apache.ranger.plugin.client.BaseClient.<init>(BaseClient
.java:51)

        at org.apache.ranger.services.hbase.client.HBaseClient.<init>(
HBaseClient.java:56)

        at org.apache.ranger.services.hbase.client.HBaseClient.connecti
onTest(HBaseClient.java:100)

        at org.apache.ranger.services.hbase.client.HBaseResourceMgr.con
nectionTest(HBaseResourceMgr.java:48)

        at org.apache.ranger.services.hbase.RangerServiceHBase.validate
Config(RangerServiceHBase.java:59)

        at org.apache.ranger.biz.ServiceMgr$ValidateCallable.actualC
all(ServiceMgr.java:560
<http://org.apache.ranger.biz.servicemgr%24validatecallable.actualcall%28servicemgr.java:560/>
)

        at org.apache.ranger.biz.ServiceMgr$ValidateCallable.actualC
all(ServiceMgr.java:547
<http://org.apache.ranger.biz.servicemgr%24validatecallable.actualcall%28servicemgr.java:547/>
)

        at org.apache.ranger.biz.ServiceMgr$TimedCallable.call(Servi
ceMgr.java
<http://org.apache.ranger.biz.servicemgr%24timedcallable.call%28servicemgr.java/>
:

Regards,
Venu.

Re: Ranger Integration with Hadoop:Issue-Unable to decrypt password due to error

Posted by Ramesh Mani <rm...@hortonworks.com>.
Venu,

Please check that the java you install has JCE unlimited strength. You can verify that in java directory jre/lib/security.
http://www.oracle.com/technetwork/java/javase/downloads/jce-7-download-432124.html

Please try this.

Thanks,
Ramesh

From: Venu Nadh Veeralanka <vv...@gmail.com>>
Reply-To: "user@ranger.incubator.apache.org<ma...@ranger.incubator.apache.org>" <us...@ranger.incubator.apache.org>>
Date: Saturday, September 17, 2016 at 12:29 AM
To: "user@ranger.incubator.apache.org<ma...@ranger.incubator.apache.org>" <us...@ranger.incubator.apache.org>>
Subject: Fwd: Ranger Integration with Hadoop:Issue-Unable to decrypt password due to error

Hi,

We are trying to integrate ranger-0.7.0-SNAPSHOT (first experience)  with Cloudera Hadoop 5.7.1.

*We setup the CDH 5.7.1 on a single box.
*On the same box we setup below components as per the instructions mentioned in https://cwiki.apache.org/confluence/display/RANGER/Apache+Ranger+0.5.0+Installation
ranger-0.7.0-SNAPSHOT-admin
ranger-0.7.0-SNAPSHOT-usersync
ranger-0.7.0-SNAPSHOT-hdfs-plugin
ranger-0.7.0-SNAPSHOT-hbase-plugin


We are following authentication_method=UNIX.

Ranger UI is coming up, but while creating a HBase service It fails with the below error.  Please guide me towards the solution.

2016<tel:2016>-09-16 01:25:42,393 [timed-executor-pool-0] ERROR org.apache.ranger.plugin.util.PasswordUtils (PasswordUtils.java:127) - Unable to decrypt password due to error

javax.crypto.IllegalBlockSizeException: Input length must be multiple of 8 when decrypting with padded cipher

        at com.sun.crypto.provider.CipherCore.doFinal(CipherCore.java:913)

        at com.sun.crypto.provider.CipherCore.doFinal(CipherCore.java:824)

        at com.sun.crypto.provider.PBES1Core.doFinal(PBES1Core.java:416)

        at com.sun.crypto.provider.PBEWithMD5AndDESCipher.engineDoFinal(PBEWithMD5AndDESCipher.java:316)

        at javax.crypto.Cipher.doFinal(Cipher.java:2165)

        at org.apache.ranger.plugin.util.PasswordUtils.decryptPassword(PasswordUtils.java:112)

        at org.apache.ranger.plugin.client.BaseClient.login(BaseClient.java:113)

        at org.apache.ranger.plugin.client.BaseClient.<init>(BaseClient.java:59)

        at org.apache.ranger.plugin.client.BaseClient.<init>(BaseClient.java:51)

        at org.apache.ranger.services.hbase.client.HBaseClient.<init>(HBaseClient.java:56)

        at org.apache.ranger.services.hbase.client.HBaseClient.connectionTest(HBaseClient.java:100)

        at org.apache.ranger.services.hbase.client.HBaseResourceMgr.connectionTest(HBaseResourceMgr.java:48)

        at org.apache.ranger.services.hbase.RangerServiceHBase.validateConfig(RangerServiceHBase.java:59)

        at org.apache.ranger.biz.ServiceMgr$ValidateCallable.actualCall(ServiceMgr.java:560<http://org.apache.ranger.biz.servicemgr%24validatecallable.actualcall%28servicemgr.java:560/>)

        at org.apache.ranger.biz.ServiceMgr$ValidateCallable.actualCall(ServiceMgr.java:547<http://org.apache.ranger.biz.servicemgr%24validatecallable.actualcall%28servicemgr.java:547/>)

        at org.apache.ranger.biz.ServiceMgr$TimedCallable.call(ServiceMgr.java<http://org.apache.ranger.biz.servicemgr%24timedcallable.call%28servicemgr.java/>:

Regards,
Venu.