[jira] [Updated] (RANGER-2034) When ranger.ks.masterkey.password mismatch with DB store hash it outputs into catalina.out

["Velmurugan Periasamy (JIRA)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/RANGER-2034?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Velmurugan Periasamy updated RANGER-2034:
-----------------------------------------
    Fix Version/s:     (was: 1.1.0)

> When ranger.ks.masterkey.password mismatch with DB store hash it outputs into catalina.out
> ------------------------------------------------------------------------------------------
>
>                 Key: RANGER-2034
>                 URL: https://issues.apache.org/jira/browse/RANGER-2034
>             Project: Ranger
>          Issue Type: Bug
>          Components: Ranger
>    Affects Versions: 0.7.2
>         Environment: HDP-2.6.3 -  Apache Ranger 0.7.0 
>            Reporter: Ernani Pereira de Mattos Junior
>            Assignee: Qiang Zhang
>            Priority: Minor
>              Labels: easyfix
>
> After unsuccessful migration of Ranger KMS from DB to HSM, the ranger.ks.masterkey.password mismatched and thrown the following stack trace; 
>  
> {code:java}
> java.io.IOException: Keystore was tampered with, or password was incorrect 
> at org.apache.hadoop.crypto.key.RangerKeyStore.engineLoad(RangerKeyStore.java:393) 
> at org.apache.hadoop.crypto.key.RangerKeyStoreProvider.loadKeys(RangerKeyStoreProvider.java:151) 
> at org.apache.hadoop.crypto.key.RangerKeyStoreProvider.reloadKeys(RangerKeyStoreProvider.java:382) 
> at org.apache.hadoop.crypto.key.RangerKeyStoreProvider.<init>(RangerKeyStoreProvider.java:111) 
> at org.apache.hadoop.crypto.key.RangerKeyStoreProvider$Factory.createProvider(RangerKeyStoreProvider.java:399) 
> at org.apache.hadoop.crypto.key.KeyProviderFactory.get(KeyProviderFactory.java:95) 
> at org.apache.hadoop.crypto.key.kms.server.KMSWebApp.contextInitialized(KMSWebApp.java:177) 
> at org.apache.catalina.core.StandardContext.listenerStart(StandardContext.java:5110) 
> at org.apache.catalina.core.StandardContext.startInternal(StandardContext.java:5633) 
> at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:145) 
> at org.apache.catalina.core.ContainerBase$StartChild.call(ContainerBase.java:1694) 
> at org.apache.catalina.core.ContainerBase$StartChild.call(ContainerBase.java:1684) 
> at java.util.concurrent.FutureTask.run(FutureTask.java:266) 
> at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142) 
> at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617) 
> at java.lang.Thread.run(Thread.java:745) 
> Caused by: java.security.UnrecoverableKeyException: Password verification failed 
> at org.apache.hadoop.crypto.key.RangerKeyStore.engineLoad(RangerKeyStore.java:391) 
> ... 15 more 
> ERROR: Hadoop KMS could not be started 
> {code}
>  
>  
> The problem that I am bringing to your attention is clearly this is an Application Exception. This exception is being output to catalina.out, and the kms.log does not indicate any trace of what happen, even with DEBUG enabled. 
> My request is to copy or redirect this Application UnrecoverableKeyException to the configured Application logging, in this case the kms.log. 
>  



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)