You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@ranger.apache.org by "Sailaja Polavarapu (JIRA)" <ji...@apache.org> on 2017/03/09 20:39:38 UTC
[jira] [Reopened] (RANGER-1392) Hive test connection is failing
even if jdbc.url configured is correct in Ranger 0.7.0
[ https://issues.apache.org/jira/browse/RANGER-1392?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Sailaja Polavarapu reopened RANGER-1392:
----------------------------------------
Reverted changes from Master and ranger-0.7 branches as it is causing issues with ranger deployment
> Hive test connection is failing even if jdbc.url configured is correct in Ranger 0.7.0
> --------------------------------------------------------------------------------------
>
> Key: RANGER-1392
> URL: https://issues.apache.org/jira/browse/RANGER-1392
> Project: Ranger
> Issue Type: Bug
> Components: Ranger
> Reporter: Deepak Sharma
> Assignee: Sailaja Polavarapu
> Fix For: 0.7.0, 1.0.0, 0.7.1
>
> Attachments: 0001-RANGER-1392-Hive-test-connection-is-failing-even-if-.patch
>
>
> even if jdbc.url is correct then also ranger hive test connection is failing.
> jdbc.url is configured to
> jdbc:hive2://ctr-e127-1486658464320-1453-01-000004.hwx.site:2181,ctr-e127-1486658464320-1453-01-000003.hwx.site:2181/;serviceDiscoveryMode=zooKeeper;zooKeeperNamespace=hiveserver2;principal=hive/_HOST@EXAMPLE.COM;transportMode=http;httpPath=cliservice;ssl=true;sslTrustStore=/etc/security/serverKeys/hivetruststore.jks;trustStorePassword=changeit
> but during test connection it gives error:
> org.apache.ranger.plugin.client.HadoopException: Unable to connect to Hive Thrift Server instance..
> Unable to connect to Hive Thrift Server instance..
> Could not establish connection to jdbc:hive2://ctr-e127-1486658464320-1453-01-000004.hwx.site:10001/;serviceDiscoveryMode=zooKeeper;zooKeeperNamespace=hiveserver2;principal=hive/_HOST@EXAMPLE.COM;transportMode=http;httpPath=cliservice;ssl=true;sslTrustStore=/etc/security/serverKeys/hivetruststore.jks;trustStorePassword=changeit: org.apache.hive.org.apache.http.client.ClientProtocolException.
> org.apache.hive.org.apache.http.client.ClientProtocolException.
> java.lang.RuntimeException: class org.apache.hadoop.security.JniBasedUnixGroupsMappingWithFallback not org.apache.hive.org.apache.hadoop.security.GroupMappingServiceProvider.
> class org.apache.hadoop.security.JniBasedUnixGroupsMappingWithFallback not org.apache.hive.org.apache.hadoop.security.GroupMappingServiceProvider.
> problem is during test connection hiveserver2 url is used dbc:hive2://ctr-e127-1486658464320-1453-01-000004.hwx.site:10001/; and servicediscovery mode is zookeeper,
> tried to connect manually to this url , it failed due to same error, but when remove zookeeper service discovery parameter then i was able to connect using beeline.
> so it seems somewhere this url is being modified.
> This happens in non WE clusters as well. Though the error is somewhat different:
> 2017-02-16 00:24:23,432 [timed-executor-pool-0] INFO org.apache.ranger.plugin.client.BaseClient (BaseClient.java:125) - Init Lookup Login: security enabled, using lookupPrincipal/lookupKeytab
> 2017-02-16 00:24:23,436 [timed-executor-pool-0] INFO apache.ranger.services.hive.client.HiveClient (HiveClient.java:67) - Secured Mode: JDBC Connection done with preAuthenticated Subject
> 2017-02-16 00:24:23,481 [timed-executor-pool-0] ERROR apache.ranger.services.hive.client.HiveClient (HiveClient.java:433) - Unable to Connect to Hive
> org.apache.ranger.plugin.client.HadoopException: Unable to connect to Hive Thrift Server instance
> at org.apache.ranger.services.hive.client.HiveClient.initConnection(HiveClient.java:549)
> As per [~rmani]:
> Issue being this class org.apache.hive.org.apache.hadoop.security.GroupMappingServiceProvider from hive-jdbc-1.2.1000.2.6.0.0-*-standalone.jar is getting loaded by ranger class-loader where as org.apache.hadoop.security.JniBasedUnixGroupsMappingWithFallback is loaded by Tomcat class-loader.
> One way to fix is to pack hive-jdbc-1.2.1000.2.6.0.0-*-standalone.jar in /usr/hdp/2.6.0.0-*/ranger-admin/ews/webapp/WEB-INF/lib so the type issue will be resolved.
--
This message was sent by Atlassian JIRA
(v6.3.15#6346)