peng.jianhua created RANGER-1774:
------------------------------------
Summary: When the security admin and mysql service is not the same
computer, the security admin was installed failed.
Key: RANGER-1774
URL: https://issues.apache.org/jira/browse/RANGER-1774
Project: Ranger
Issue Type: Bug
Components: admin
Affects Versions: 1.0.0, master
Reporter: peng.jianhua
Assignee: peng.jianhua
The security admin installed fail based on mysql 5.5.35-log version(refer to
mysql-version.png). The error log is as following:
{code}
2017-09-12 13:21:05,525 [JISQL] /usr/java/jdk/bin/java -cp
/usr/share/java/mysql-connector-java.jar:/opt/ZDH/parcels/lib/ranger/ranger-admin/jisql/lib/*
org.apache.util.sql.Jisql -driver mysqlconj -cstring
jdbc:mysql://10.43.183.132/ranger -u 'rangeradmin' -p '********' -noheader
-trim -c \; -query "SELECT version();"
SQLException : SQL state: 28000 java.sql.SQLException: Access denied for user
'rangeradmin'@'dap134-183' (using password: YES) ErrorCode: 1045
{code}
We should explicitly assign the ranger machine to access mysql using 'grant all
privileges' command. That is the following code segment should be add the IP of
the computer running security admin installer.
{code:title=ranger/security-admin/scripts/dba_script.py|borderStyle=solid}
hosts_arr =["%", "localhost"]
if not self.host == "localhost": hosts_arr.append(self.host)
for host in hosts_arr:
......
query = get_cmd + " -query \"grant all privileges on %s.* to '%s'@'%s' with
grant option;\"" %(db_name,db_user, host)
......
{code}
--
This message was sent by Atlassian JIRA
(v6.4.14#64029)
