You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@ozone.apache.org by "Anatoly (Jira)" <ji...@apache.org> on 2023/09/14 10:04:00 UTC

[jira] [Updated] (HDDS-9282) Authorization error Ozone plugin for Ranger

     [ https://issues.apache.org/jira/browse/HDDS-9282?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Anatoly updated HDDS-9282:
--------------------------
    Description: 
When setting up a connection to Ozone from Ranger 2.3.0, I receive a message in the UI
Connection Failed.
{code:java}
Unable to retrieve any files using given parameters, You can still save the repository and start creating policies, but you would not be able to use autocomplete for resource names. Check ranger_admin.log for more info.
java.lang.NoClassDefFoundError: org/apache/hadoop/shaded/com/google/protobuf/ServiceException.
org.apache.hadoop.shaded.com.google.protobuf.ServiceException.
{code}
Error in Ranger Admin logs

 
{code:java}
2023-09-14 09:37:31,798 [timed-executor-pool-0] INFO [Base Client.java:126] Init Login: security not enabled, using username
2023-09-14 09:37:31,857 [http-nio-6080-exec-9] ERROR [ServiceMgr.java:198] ==> ServiceMgr.validateConfig Error:org.apache.ranger.plugin.client.HadoopException: java.lang.NoClassDefFoundError: org/apache/hadoop/shaded/com/google/protobuf/ServiceException{code}
or
{code:java}
2023-09-14 10:02:18,401 [timed-executor-pool-0] ERROR [PasswordUtils.java:165] Unable to decrypt password due to error
javax.crypto.IllegalBlockSizeException: Input length must be multiple of 8 when decrypting with padded cipher
        at com.sun.crypto.provider.CipherCore.prepareInputBuffer(CipherCore.java:1005)
        at com.sun.crypto.provider.CipherCore.doFinal(CipherCore.java:848)
        at com.sun.crypto.provider.PBES1Core.doFinal(PBES1Core.java:432)
        at com.sun.crypto.provider.PBEWithMD5AndDESCipher.engineDoFinal(PBEWithMD5AndDESCipher.java:316)
        at javax.crypto.Cipher.doFinal(Cipher.java:2168)
        at org.apache.ranger.plugin.util.PasswordUtils.decrypt(PasswordUtils.java:150)
        at org.apache.ranger.plugin.util.PasswordUtils.decryptPassword(PasswordUtils.java:138)
        at org.apache.ranger.plugin.client.BaseClient.login(BaseClient.java:109)
        at org.apache.ranger.plugin.client.BaseClient.<init>(BaseClient.java:61)
        at org.apache.ranger.services.ozone.client.OzoneClient.<init>(OzoneClient.java:47)
        at org.apache.ranger.services.ozone.client.OzoneClient.connectionTest(OzoneClient.java:172)
        at org.apache.ranger.services.ozone.client.OzoneResourceMgr.connectionTest(OzoneResourceMgr.java:50)
        at org.apache.ranger.services.ozone.RangerServiceOzone.validateConfig(RangerServiceOzone.java:74)
        at org.apache.ranger.biz.ServiceMgr$ValidateCallable.actualCall(ServiceMgr.java:660)
        at org.apache.ranger.biz.ServiceMgr$ValidateCallable.actualCall(ServiceMgr.java:647)
        at org.apache.ranger.biz.ServiceMgr$TimedCallable.call(ServiceMgr.java:608)
        at java.util.concurrent.FutureTask.run(FutureTask.java:266)
        at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
        at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
        at java.lang.Thread.run(Thread.java:750)
2023-09-14 10:02:18,402 [timed-executor-pool-0] INFO [BaseClient.java:111] Password decryption failed; trying connection with received password string
2023-09-14 10:02:18,402 [timed-executor-pool-0] INFO [BaseClient.java:126] Init Login: security not enabled, using username
2023-09-14 10:02:18,487 [http-nio-6080-exec-10] ERROR [ServiceMgr.java:198] ==> ServiceMgr.validateConfig Error:org.apache.ranger.plugin.client.HadoopException: java.lang.NoClassDefFoundError: org/apache/hadoop/shaded/com/google/protobuf/ServiceException{code}
The directory for the Ozone plugin had to be created manually in 
{code:java}
ews/webapp/WEB-INF/classes/ranger-plugins/ozone{code}
 because it was not there by default and copied jars Ozone there after creation

 

!image-2023-09-14-12-54-32-746.png|width=495,height=285!

  was:
When setting up a connection to Ozone from Ranger 2.3.0, I receive a message in the UI
Connection Failed.
{code:java}
Unable to retrieve any files using given parameters, You can still save the repository and start creating policies, but you would not be able to use autocomplete for resource names. Check ranger_admin.log for more info.
java.lang.NoClassDefFoundError: org/apache/hadoop/shaded/com/google/protobuf/ServiceException.
org.apache.hadoop.shaded.com.google.protobuf.ServiceException.
{code}
Error in Ranger Admin logs

 
{code:java}
2023-09-14 09:37:31,798 [timed-executor-pool-0] INFO [Base Client.java:126] Init Login: security not enabled, using username
2023-09-14 09:37:31,857 [http-nio-6080-exec-9] ERROR [ServiceMgr.java:198] ==> ServiceMgr.validateConfig Error:org.apache.ranger.plugin.client.HadoopException: java.lang.NoClassDefFoundError: org/apache/hadoop/shaded/com/google/protobuf/ServiceException{code}
 

The directory for the Ozone plugin had to be created manually in 
{code:java}
ews/webapp/WEB-INF/classes/ranger-plugins/ozone{code}
 because it was not there by default and copied jars Ozone there after creation

 

!image-2023-09-14-12-54-32-746.png|width=495,height=285!


> Authorization error Ozone plugin for Ranger
> -------------------------------------------
>
>                 Key: HDDS-9282
>                 URL: https://issues.apache.org/jira/browse/HDDS-9282
>             Project: Apache Ozone
>          Issue Type: Bug
>    Affects Versions: 1.3.0
>            Reporter: Anatoly
>            Priority: Major
>         Attachments: image-2023-09-14-12-54-32-746.png
>
>
> When setting up a connection to Ozone from Ranger 2.3.0, I receive a message in the UI
> Connection Failed.
> {code:java}
> Unable to retrieve any files using given parameters, You can still save the repository and start creating policies, but you would not be able to use autocomplete for resource names. Check ranger_admin.log for more info.
> java.lang.NoClassDefFoundError: org/apache/hadoop/shaded/com/google/protobuf/ServiceException.
> org.apache.hadoop.shaded.com.google.protobuf.ServiceException.
> {code}
> Error in Ranger Admin logs
>  
> {code:java}
> 2023-09-14 09:37:31,798 [timed-executor-pool-0] INFO [Base Client.java:126] Init Login: security not enabled, using username
> 2023-09-14 09:37:31,857 [http-nio-6080-exec-9] ERROR [ServiceMgr.java:198] ==> ServiceMgr.validateConfig Error:org.apache.ranger.plugin.client.HadoopException: java.lang.NoClassDefFoundError: org/apache/hadoop/shaded/com/google/protobuf/ServiceException{code}
> or
> {code:java}
> 2023-09-14 10:02:18,401 [timed-executor-pool-0] ERROR [PasswordUtils.java:165] Unable to decrypt password due to error
> javax.crypto.IllegalBlockSizeException: Input length must be multiple of 8 when decrypting with padded cipher
>         at com.sun.crypto.provider.CipherCore.prepareInputBuffer(CipherCore.java:1005)
>         at com.sun.crypto.provider.CipherCore.doFinal(CipherCore.java:848)
>         at com.sun.crypto.provider.PBES1Core.doFinal(PBES1Core.java:432)
>         at com.sun.crypto.provider.PBEWithMD5AndDESCipher.engineDoFinal(PBEWithMD5AndDESCipher.java:316)
>         at javax.crypto.Cipher.doFinal(Cipher.java:2168)
>         at org.apache.ranger.plugin.util.PasswordUtils.decrypt(PasswordUtils.java:150)
>         at org.apache.ranger.plugin.util.PasswordUtils.decryptPassword(PasswordUtils.java:138)
>         at org.apache.ranger.plugin.client.BaseClient.login(BaseClient.java:109)
>         at org.apache.ranger.plugin.client.BaseClient.<init>(BaseClient.java:61)
>         at org.apache.ranger.services.ozone.client.OzoneClient.<init>(OzoneClient.java:47)
>         at org.apache.ranger.services.ozone.client.OzoneClient.connectionTest(OzoneClient.java:172)
>         at org.apache.ranger.services.ozone.client.OzoneResourceMgr.connectionTest(OzoneResourceMgr.java:50)
>         at org.apache.ranger.services.ozone.RangerServiceOzone.validateConfig(RangerServiceOzone.java:74)
>         at org.apache.ranger.biz.ServiceMgr$ValidateCallable.actualCall(ServiceMgr.java:660)
>         at org.apache.ranger.biz.ServiceMgr$ValidateCallable.actualCall(ServiceMgr.java:647)
>         at org.apache.ranger.biz.ServiceMgr$TimedCallable.call(ServiceMgr.java:608)
>         at java.util.concurrent.FutureTask.run(FutureTask.java:266)
>         at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
>         at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
>         at java.lang.Thread.run(Thread.java:750)
> 2023-09-14 10:02:18,402 [timed-executor-pool-0] INFO [BaseClient.java:111] Password decryption failed; trying connection with received password string
> 2023-09-14 10:02:18,402 [timed-executor-pool-0] INFO [BaseClient.java:126] Init Login: security not enabled, using username
> 2023-09-14 10:02:18,487 [http-nio-6080-exec-10] ERROR [ServiceMgr.java:198] ==> ServiceMgr.validateConfig Error:org.apache.ranger.plugin.client.HadoopException: java.lang.NoClassDefFoundError: org/apache/hadoop/shaded/com/google/protobuf/ServiceException{code}
> The directory for the Ozone plugin had to be created manually in 
> {code:java}
> ews/webapp/WEB-INF/classes/ranger-plugins/ozone{code}
>  because it was not there by default and copied jars Ozone there after creation
>  
> !image-2023-09-14-12-54-32-746.png|width=495,height=285!



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@ozone.apache.org
For additional commands, e-mail: issues-help@ozone.apache.org