-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/61173/
-----------------------------------------------------------

(Updated 七月 27, 2017, 7:22 a.m.)


Review request for ranger, Alok Lal, Ankita Sinha, Don Bosco Durai, Colm O 
hEigeartaigh, Gautam Borad, Madhan Neethiraj, Ramesh Mani, Selvamohan 
Neethiraj, and Velmurugan Periasamy.


Bugs: RANGER-1713
    https://issues.apache.org/jira/browse/RANGER-1713


Repository: ranger


Description
-------

Hive testConnection failed after open ldap authentication in Hive.

Scenarios 
1.when Hive used SIIMPLE authentication testConnection is ok.
2.When Hive used LDAP authentication testConnection is failed. 
Modify Hive-site.xml
<property>
<name>hive.server2.authentication</name>
<value>LDAP</value>
</property>
<property>
<name>hive.server2.authentication.ldap.url</name>
<value>ldap://192.168.10.101 ldap://192.168.10.102</value>
<description>
LDAP connection URL
</description>
</property><property>
<name>hive.server2.authentication.ldap.baseDN</name>
<value>ou=People,dc=hive,dc=com</value>
<description>
LDAP base DN
</description>
</property>
Result:
Unable to retrieve any files using given parameters, You can still save the 
repository and start creating policies, but you would not be able to use 
autocomplete for resource names. Check ranger_admin.log for more info.
org.apache.ranger.plugin.client.HadoopException: Unable to connect to Hive 
Thrift Server instance.. Unable to connect to Hive Thrift Server instance.. 
Could not open client transport with JDBC Uri: 
jdbc:hive2://10.43.182.241:10000: Peer indicated failure: Error validating the 
login. Peer indicated failure: Error validating the login.

3. Reason: Connection parameter password is incorrect .(Do not need to 
undertake the MD5 encryption password).

4. Solution: use MD5 decryption password.


Diffs
-----

  
hive-agent/src/main/java/org/apache/ranger/services/hive/client/HiveClient.java 
e442aef 


Diff: https://reviews.apache.org/r/61173/diff/1/


Testing
-------

Tested it.


Thanks,

Qiang Zhang

Reply via email to