Hajime Osako created RANGER-1989:
------------------------------------
Summary: Ranger Admin may fail to start after enabling SSLHadoop
GroupMapping
Key: RANGER-1989
URL: https://issues.apache.org/jira/browse/RANGER-1989
Project: Ranger
Issue Type: Bug
Components: admin
Affects Versions: 0.7.0
Reporter: Hajime Osako
Opening this Jira to request Ranger community to add commons-io-x.y.jar in the
classpath with default installation.
Thank you.
After setting up Hadoop GroupMapping with
"hadoop.security.group.mapping.provider.ldap.bind.password.*file*" for HDFS and
YARN, Ranger Admin may fail to start if SSL is enabled.
The following error is in catalina.out:
{noformat}
Exception in thread "main" java.lang.NoClassDefFoundError:
org/apache/commons/io/Charsets
at
org.apache.hadoop.security.LdapGroupsMapping.extractPassword(LdapGroupsMapping.java:667)
at
org.apache.hadoop.security.LdapGroupsMapping.setConf(LdapGroupsMapping.java:588)
...{noformat}
This is because, in LdapGroupsMapping.setConf() above, if ".bind.password" is
empty, it tries to extract from ".bind.password.file" with extractPassword(),
and inside of this method org.apache.commons.io.Charsets is used, however,
commons-io.jar doesn't seem to be in the Ranger Admin classpath.
h3. WORKAROUND:
An example of workarounds is simply copying commons-io-x.y.jar, like below:
cp -p /usr/hdp/current/ranger-admin/ews/webapp/WEB-INF/lib/commons-io-2.4.jar
/usr/hdp/current/ranger-admin/ews/lib/
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
