[jira] [Created] (RANGER-1774) When the security admin and mysql service is not the same computer, the security admin was installed failed.

["peng.jianhua (JIRA)" <ji...@apache.org>]

peng.jianhua created RANGER-1774:
------------------------------------

             Summary: When the security admin and mysql service is not the same computer, the security admin was installed failed.
                 Key: RANGER-1774
                 URL: https://issues.apache.org/jira/browse/RANGER-1774
             Project: Ranger
          Issue Type: Bug
          Components: admin
    Affects Versions: 1.0.0, master
            Reporter: peng.jianhua
            Assignee: peng.jianhua


The security admin installed fail based on mysql 5.5.35-log version(refer to mysql-version.png). The error log is as following:
{code}
2017-09-12 13:21:05,525  [JISQL] /usr/java/jdk/bin/java  -cp /usr/share/java/mysql-connector-java.jar:/opt/ZDH/parcels/lib/ranger/ranger-admin/jisql/lib/* org.apache.util.sql.Jisql -driver mysqlconj -cstring jdbc:mysql://10.43.183.132/ranger -u 'rangeradmin' -p '********' -noheader -trim -c \; -query "SELECT version();"
SQLException : SQL state: 28000 java.sql.SQLException: Access denied for user 'rangeradmin'@'dap134-183' (using password: YES) ErrorCode: 1045
{code}
We should explicitly assign the ranger machine to access mysql using 'grant all privileges' command. That is the following code segment should be add the IP of the computer running security admin installer.
{code:title=ranger/security-admin/scripts/dba_script.py|borderStyle=solid}
hosts_arr =["%", "localhost"]
if not self.host == "localhost": hosts_arr.append(self.host)
for host in hosts_arr:
......
query = get_cmd + " -query \"grant all privileges on %s.* to '%s'@'%s' with grant option;\"" %(db_name,db_user, host)
......
{code}




--
This message was sent by Atlassian JIRA
(v6.4.14#64029)