You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@ozone.apache.org by "Hemant Kumar (Jira)" <ji...@apache.org> on 2024/01/23 00:47:00 UTC

[jira] [Comment Edited] (HDDS-9728) Ozone/Ranger TENANT_AUTHORIZER_ERROR

    [ https://issues.apache.org/jira/browse/HDDS-9728?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17809690#comment-17809690 ] 

Hemant Kumar edited comment on HDDS-9728 at 1/23/24 12:46 AM:
--------------------------------------------------------------

[~netscrol], did you follow the guideline as in [https://github.com/apache/ozone/blob/master/hadoop-hdds/docs/content/feature/S3-Tenant-Commands.md] and had appropriate as in the guideline?

Also can you please add OM logs if possible?


was (Author: JIRAUSER297350):
[~netscrol], can you please add OM logs if possible?

> Ozone/Ranger TENANT_AUTHORIZER_ERROR
> ------------------------------------
>
>                 Key: HDDS-9728
>                 URL: https://issues.apache.org/jira/browse/HDDS-9728
>             Project: Apache Ozone
>          Issue Type: Bug
>            Reporter: netscrol
>            Priority: Major
>
> When using ozone with a ranger, an error occurs spontaneously(TENANT_AUTHORIZER_ERROR). All ranger functions work except for operations with tenants. The error appears when trying to create a tenant or add a user to a tenant.
>  
> {code:java}
> /opt/ozone/bin/ozone tenant create room-tenant --om-service-id=cluster1
> 2023-11-07 16:28:23,247 WARN util.NativeCodeLoader: Unable to load native-hadoop library for your platform... using builtin-java classes where applicable
> 2023-11-07 16:28:24,223 INFO rpc.RpcClient: Creating Tenant: 'room-tenant', with new volume: 'room-tenant'
> TENANT_AUTHORIZER_ERROR java.io.IOException: org.apache.ranger.RangerServiceException: Ranger API org.apache.ranger.RangerClient$API@4a92034f failed: statusCode=401, status=Unauthorized, response: {code}
> Ranger access log
>  
> {code:java}
> 10.10.1.225 - - [17/Nov/2023:18:23:01 +0000] "POST /service/public/v2/api/roles?serviceName=test-ozone HTTP/1.1" 401 - 3 "-" "Java/1.8.0_372" {code}
>  
>  
>  
>  
>  
>  
>  



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@ozone.apache.org
For additional commands, e-mail: issues-help@ozone.apache.org