[ 
https://issues.apache.org/jira/browse/RANGER-3734?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17531490#comment-17531490
 ] 

Abhishek Kumar commented on RANGER-3734:
----------------------------------------

This has been fixed(part of master branch) and will be part of the next ranger 
release. [Commit 
Link|https://github.com/apache/ranger/commit/27c32c4235df81c73ebbbb626de2940d4103c381]

> Ranger Admin connections Ozone service failed
> ---------------------------------------------
>
>                 Key: RANGER-3734
>                 URL: https://issues.apache.org/jira/browse/RANGER-3734
>             Project: Ranger
>          Issue Type: Bug
>          Components: Ranger
>    Affects Versions: 2.2.0
>            Reporter: MLikeWater
>            Priority: Major
>
> The environment:
> Ranger 2.2.0
> Ozone 1.2.1
> All with Kerberos
>  
> When I added the plugin ozone `ozonedev` service through the Ranger Admin Web 
> page, and then executed the `Test Connection`, there was a lack of Ozone 
> related jars in the Ranger Admin log. Then copy the jars for Ozone 1.2.1 to 
> `ews/webapp/WEB-INF/classes/ranger-plugins/ozone/`, and copy `core-site.xml` 
> and `ozone-site.xml` to ews/webapp/WEB-INF/classes/conf` and restart the 
> range-admin service.
> The following error occurs in the log file 
> ews/logs/ranger-admin-hostname-root.log:
> {code:java}
> 2022-04-27 12:08:36,513 [http-nio-32080-exec-6] DEBUG 
> org.apache.ranger.plugin.util.RangerPerfTracer (RangerPerfTracer.java:101) - 
> [PERF] ServiceREST.validateConfig(serviceName=ozonedev): 56
> 2022-04-27 12:08:38,641 [http-nio-32080-exec-5] DEBUG 
> org.apache.ranger.plugin.util.RangerPerfTracer (RangerPerfTracer.java:101) - 
> [PERF] 
> ServiceREST.getSecureServicePoliciesIfUpdated(serviceName=hivedev,lastKnownVersion=123,lastActivationTime=1651061153626):
>  1
> 2022-04-27 12:08:43,640 [http-nio-32080-exec-1] DEBUG 
> org.apache.ranger.plugin.util.RangerPerfTracer (RangerPerfTracer.java:101) - 
> [PERF] 
> ServiceREST.getSecureServicePoliciesIfUpdated(serviceName=hivedev,lastKnownVersion=123,lastActivationTime=1651061153626):
>  2
> 2022-04-27 12:08:48,640 [http-nio-32080-exec-7] DEBUG 
> org.apache.ranger.plugin.util.RangerPerfTracer (RangerPerfTracer.java:101) - 
> [PERF] 
> ServiceREST.getSecureServicePoliciesIfUpdated(serviceName=hivedev,lastKnownVersion=123,lastActivationTime=1651061153626):
>  2
> 2022-04-27 12:08:53,641 [http-nio-32080-exec-10] DEBUG 
> org.apache.ranger.plugin.util.RangerPerfTracer (RangerPerfTracer.java:101) - 
> [PERF] 
> ServiceREST.getSecureServicePoliciesIfUpdated(serviceName=hivedev,lastKnownVersion=123,lastActivationTime=1651061153626):
>  1
> 2022-04-27 12:08:56,955 [timed-executor-pool-0] INFO  
> org.apache.ranger.plugin.client.BaseClient (BaseClient.java:132) - Init 
> Lookup Login: security enabled, using lookupPrincipal/lookupKeytab
> 2022-04-27 12:08:56,989 [timed-executor-pool-0] WARN  
> org.apache.hadoop.ipc.Client$Connection$1 (Client.java:772) - Exception 
> encountered while connecting to the server 
> org.apache.hadoop.security.AccessControlException: Client cannot authenticate 
> via:[TOKEN, KERBEROS]
>       at 
> org.apache.hadoop.security.SaslRpcClient.selectSaslClient(SaslRpcClient.java:179)
>       at 
> org.apache.hadoop.security.SaslRpcClient.saslConnect(SaslRpcClient.java:392)
>       at 
> org.apache.hadoop.ipc.Client$Connection.setupSaslConnection(Client.java:622)
>       at org.apache.hadoop.ipc.Client$Connection.access$2300(Client.java:413)
>       at org.apache.hadoop.ipc.Client$Connection$2.run(Client.java:822)
>       at org.apache.hadoop.ipc.Client$Connection$2.run(Client.java:818)
>       at java.security.AccessController.doPrivileged(Native Method)
>       at javax.security.auth.Subject.doAs(Subject.java:422)
>       at 
> org.apache.hadoop.security.UserGroupInformation.doAs(UserGroupInformation.java:1845)
>       at 
> org.apache.hadoop.ipc.Client$Connection.setupIOstreams(Client.java:818)
>       at org.apache.hadoop.ipc.Client$Connection.access$3800(Client.java:413)
>       at org.apache.hadoop.ipc.Client.getConnection(Client.java:1636)
>       at org.apache.hadoop.ipc.Client.call(Client.java:1452)
>       at org.apache.hadoop.ipc.Client.call(Client.java:1405)
>       at 
> org.apache.hadoop.ipc.ProtobufRpcEngine$Invoker.invoke(ProtobufRpcEngine.java:240)
>       at 
> org.apache.hadoop.ipc.ProtobufRpcEngine$Invoker.invoke(ProtobufRpcEngine.java:125)
>       at com.sun.proxy.$Proxy110.submitRequest(Unknown Source)
>       at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
>       at 
> sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
>       at 
> sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
>       at java.lang.reflect.Method.invoke(Method.java:498)
>       at 
> org.apache.hadoop.io.retry.RetryInvocationHandler.invokeMethod(RetryInvocationHandler.java:422)
>       at 
> org.apache.hadoop.io.retry.RetryInvocationHandler$Call.invokeMethod(RetryInvocationHandler.java:165)
>       at 
> org.apache.hadoop.io.retry.RetryInvocationHandler$Call.invoke(RetryInvocationHandler.java:157)
>       at 
> org.apache.hadoop.io.retry.RetryInvocationHandler$Call.invokeOnce(RetryInvocationHandler.java:95)
>       at 
> org.apache.hadoop.io.retry.RetryInvocationHandler.invoke(RetryInvocationHandler.java:359)
>       at com.sun.proxy.$Proxy110.submitRequest(Unknown Source)
>       at 
> org.apache.hadoop.fs.ozone.Hadoop27RpcTransport.submitRequest(Hadoop27RpcTransport.java:74)
>       at 
> org.apache.hadoop.ozone.om.protocolPB.OzoneManagerProtocolClientSideTranslatorPB.submitRequest(OzoneManagerProtocolClientSideTranslatorPB.java:230)
>       at 
> org.apache.hadoop.ozone.om.protocolPB.OzoneManagerProtocolClientSideTranslatorPB.getServiceInfo(OzoneManagerProtocolClientSideTranslatorPB.java:1108)
>       at 
> org.apache.hadoop.ozone.client.rpc.RpcClient.<init>(RpcClient.java:193)
>       at 
> org.apache.hadoop.ozone.client.OzoneClientFactory.getClientProtocol(OzoneClientFactory.java:246)
>       at 
> org.apache.hadoop.ozone.client.OzoneClientFactory.getRpcClient(OzoneClientFactory.java:147)
>       at 
> org.apache.ranger.services.ozone.client.OzoneClient.<init>(OzoneClient.java:57)
>       at 
> org.apache.ranger.services.ozone.client.OzoneClient.connectionTest(OzoneClient.java:172)
>       at 
> org.apache.ranger.services.ozone.client.OzoneResourceMgr.connectionTest(OzoneResourceMgr.java:49)
>       at 
> org.apache.ranger.services.ozone.RangerServiceOzone.validateConfig(RangerServiceOzone.java:74)
>       at 
> org.apache.ranger.biz.ServiceMgr$ValidateCallable.actualCall(ServiceMgr.java:660)
>       at 
> org.apache.ranger.biz.ServiceMgr$ValidateCallable.actualCall(ServiceMgr.java:647)
>       at 
> org.apache.ranger.biz.ServiceMgr$TimedCallable.call(ServiceMgr.java:608)
>       at java.util.concurrent.FutureTask.run(FutureTask.java:266)
>       at 
> java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
>       at 
> java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
>       at java.lang.Thread.run(Thread.java:748)
> 2022-04-27 12:08:56,991 [timed-executor-pool-0] WARN  
> org.apache.hadoop.ipc.Client$Connection$1 (Client.java:772) - Exception 
> encountered while connecting to the server 
> org.apache.hadoop.security.AccessControlException: Client cannot authenticate 
> via:[TOKEN, KERBEROS]
>       at 
> org.apache.hadoop.security.SaslRpcClient.selectSaslClient(SaslRpcClient.java:179)
>       at 
> org.apache.hadoop.security.SaslRpcClient.saslConnect(SaslRpcClient.java:392)
>       at 
> org.apache.hadoop.ipc.Client$Connection.setupSaslConnection(Client.java:622)
>       at org.apache.hadoop.ipc.Client$Connection.access$2300(Client.java:413)
>       at org.apache.hadoop.ipc.Client$Connection$2.run(Client.java:822)
>       at org.apache.hadoop.ipc.Client$Connection$2.run(Client.java:818)
>       at java.security.AccessController.doPrivileged(Native Method)
>       at javax.security.auth.Subject.doAs(Subject.java:422)
>       at 
> org.apache.hadoop.security.UserGroupInformation.doAs(UserGroupInformation.java:1845)
>       at 
> org.apache.hadoop.ipc.Client$Connection.setupIOstreams(Client.java:818)
>       at org.apache.hadoop.ipc.Client$Connection.access$3800(Client.java:413)
>       at org.apache.hadoop.ipc.Client.getConnection(Client.java:1636)
>       at org.apache.hadoop.ipc.Client.call(Client.java:1452)
>       at org.apache.hadoop.ipc.Client.call(Client.java:1405)
>       at 
> org.apache.hadoop.ipc.ProtobufRpcEngine$Invoker.invoke(ProtobufRpcEngine.java:240)
>       at 
> org.apache.hadoop.ipc.ProtobufRpcEngine$Invoker.invoke(ProtobufRpcEngine.java:125)
>       at com.sun.proxy.$Proxy110.submitRequest(Unknown Source)
>       at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
>       at 
> sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
>       at 
> sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
>       at java.lang.reflect.Method.invoke(Method.java:498)
>       at 
> org.apache.hadoop.io.retry.RetryInvocationHandler.invokeMethod(RetryInvocationHandler.java:422)
>       at 
> org.apache.hadoop.io.retry.RetryInvocationHandler$Call.invokeMethod(RetryInvocationHandler.java:165)
>       at 
> org.apache.hadoop.io.retry.RetryInvocationHandler$Call.invoke(RetryInvocationHandler.java:157)
>       at 
> org.apache.hadoop.io.retry.RetryInvocationHandler$Call.invokeOnce(RetryInvocationHandler.java:95)
>       at 
> org.apache.hadoop.io.retry.RetryInvocationHandler.invoke(RetryInvocationHandler.java:359)
>       at com.sun.proxy.$Proxy110.submitRequest(Unknown Source)
>       at 
> org.apache.hadoop.fs.ozone.Hadoop27RpcTransport.submitRequest(Hadoop27RpcTransport.java:74)
>       at 
> org.apache.hadoop.ozone.om.protocolPB.OzoneManagerProtocolClientSideTranslatorPB.submitRequest(OzoneManagerProtocolClientSideTranslatorPB.java:230)
>       at 
> org.apache.hadoop.ozone.om.protocolPB.OzoneManagerProtocolClientSideTranslatorPB.getServiceInfo(OzoneManagerProtocolClientSideTranslatorPB.java:1108)
>       at 
> org.apache.hadoop.ozone.client.rpc.RpcClient.<init>(RpcClient.java:193)
>       at 
> org.apache.hadoop.ozone.client.OzoneClientFactory.getClientProtocol(OzoneClientFactory.java:246)
>       at 
> org.apache.hadoop.ozone.client.OzoneClientFactory.getRpcClient(OzoneClientFactory.java:147)
>       at 
> org.apache.ranger.services.ozone.client.OzoneClient.<init>(OzoneClient.java:57)
>       at 
> org.apache.ranger.services.ozone.client.OzoneClient.connectionTest(OzoneClient.java:172)
>       at 
> org.apache.ranger.services.ozone.client.OzoneResourceMgr.connectionTest(OzoneResourceMgr.java:49)
>       at 
> org.apache.ranger.services.ozone.RangerServiceOzone.validateConfig(RangerServiceOzone.java:74)
>       at 
> org.apache.ranger.biz.ServiceMgr$ValidateCallable.actualCall(ServiceMgr.java:660)
>       at 
> org.apache.ranger.biz.ServiceMgr$ValidateCallable.actualCall(ServiceMgr.java:647)
>       at 
> org.apache.ranger.biz.ServiceMgr$TimedCallable.call(ServiceMgr.java:608)
>       at java.util.concurrent.FutureTask.run(FutureTask.java:266)
>       at 
> java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
>       at 
> java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
>       at java.lang.Thread.run(Thread.java:748)
> 2022-04-27 12:08:56,994 [timed-executor-pool-0] WARN  
> org.apache.hadoop.ipc.Client$Connection$1 (Client.java:772) - Exception 
> encountered while connecting to the server 
> org.apache.hadoop.security.AccessControlException: Client cannot authenticate 
> via:[TOKEN, KERBEROS]
>       at 
> org.apache.hadoop.security.SaslRpcClient.selectSaslClient(SaslRpcClient.java:179)
>       at 
> org.apache.hadoop.security.SaslRpcClient.saslConnect(SaslRpcClient.java:392)
>       at 
> org.apache.hadoop.ipc.Client$Connection.setupSaslConnection(Client.java:622)
>       at org.apache.hadoop.ipc.Client$Connection.access$2300(Client.java:413)
>       at org.apache.hadoop.ipc.Client$Connection$2.run(Client.java:822)
>       at org.apache.hadoop.ipc.Client$Connection$2.run(Client.java:818)
>       at java.security.AccessController.doPrivileged(Native Method)
>       at javax.security.auth.Subject.doAs(Subject.java:422)
>       at 
> org.apache.hadoop.security.UserGroupInformation.doAs(UserGroupInformation.java:1845)
>       at 
> org.apache.hadoop.ipc.Client$Connection.setupIOstreams(Client.java:818)
>       at org.apache.hadoop.ipc.Client$Connection.access$3800(Client.java:413)
>       at org.apache.hadoop.ipc.Client.getConnection(Client.java:1636)
>       at org.apache.hadoop.ipc.Client.call(Client.java:1452)
>       at org.apache.hadoop.ipc.Client.call(Client.java:1405)
>       at 
> org.apache.hadoop.ipc.ProtobufRpcEngine$Invoker.invoke(ProtobufRpcEngine.java:240)
>       at 
> org.apache.hadoop.ipc.ProtobufRpcEngine$Invoker.invoke(ProtobufRpcEngine.java:125)
>       at com.sun.proxy.$Proxy110.submitRequest(Unknown Source)
>       at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
>       at 
> sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
>       at 
> sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
>       at java.lang.reflect.Method.invoke(Method.java:498)
>       at 
> org.apache.hadoop.io.retry.RetryInvocationHandler.invokeMethod(RetryInvocationHandler.java:422)
>       at 
> org.apache.hadoop.io.retry.RetryInvocationHandler$Call.invokeMethod(RetryInvocationHandler.java:165)
>       at 
> org.apache.hadoop.io.retry.RetryInvocationHandler$Call.invoke(RetryInvocationHandler.java:157)
>       at 
> org.apache.hadoop.io.retry.RetryInvocationHandler$Call.invokeOnce(RetryInvocationHandler.java:95)
>       at 
> org.apache.hadoop.io.retry.RetryInvocationHandler.invoke(RetryInvocationHandler.java:359)
>       at com.sun.proxy.$Proxy110.submitRequest(Unknown Source)
>       at 
> org.apache.hadoop.fs.ozone.Hadoop27RpcTransport.submitRequest(Hadoop27RpcTransport.java:74)
>       at 
> org.apache.hadoop.ozone.om.protocolPB.OzoneManagerProtocolClientSideTranslatorPB.submitRequest(OzoneManagerProtocolClientSideTranslatorPB.java:230)
>       at 
> org.apache.hadoop.ozone.om.protocolPB.OzoneManagerProtocolClientSideTranslatorPB.getServiceInfo(OzoneManagerProtocolClientSideTranslatorPB.java:1108)
>       at 
> org.apache.hadoop.ozone.client.rpc.RpcClient.<init>(RpcClient.java:193)
>       at 
> org.apache.hadoop.ozone.client.OzoneClientFactory.getClientProtocol(OzoneClientFactory.java:246)
>       at 
> org.apache.hadoop.ozone.client.OzoneClientFactory.getRpcClient(OzoneClientFactory.java:147)
>       at 
> org.apache.ranger.services.ozone.client.OzoneClient.<init>(OzoneClient.java:57)
>       at 
> org.apache.ranger.services.ozone.client.OzoneClient.connectionTest(OzoneClient.java:172)
>       at 
> org.apache.ranger.services.ozone.client.OzoneResourceMgr.connectionTest(OzoneResourceMgr.java:49)
>       at 
> org.apache.ranger.services.ozone.RangerServiceOzone.validateConfig(RangerServiceOzone.java:74)
>       at 
> org.apache.ranger.biz.ServiceMgr$ValidateCallable.actualCall(ServiceMgr.java:660)
>       at 
> org.apache.ranger.biz.ServiceMgr$ValidateCallable.actualCall(ServiceMgr.java:647)
>       at 
> org.apache.ranger.biz.ServiceMgr$TimedCallable.call(ServiceMgr.java:608)
>       at java.util.concurrent.FutureTask.run(FutureTask.java:266)
>       at 
> java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
>       at 
> java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
>       at java.lang.Thread.run(Thread.java:748)
> 2022-04-27 12:08:56,994 [timed-executor-pool-0] ERROR 
> org.apache.hadoop.ozone.client.OzoneClientFactory 
> (OzoneClientFactory.java:249) - Couldn't create RpcClient protocol exception: 
> java.io.IOException: DestHost:destPort ozone-om-hostname:9862 , 
> LocalHost:localPort ranger-hostname/10.2.1.6:0. Failed on local exception: 
> java.io.IOException: org.apache.hadoop.security.AccessControlException: 
> Client cannot authenticate via:[TOKEN, KERBEROS]
>       at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)
>       at 
> sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:62)
>       at 
> sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:45)
>       at java.lang.reflect.Constructor.newInstance(Constructor.java:423)
>       at org.apache.hadoop.net.NetUtils.wrapWithMessage(NetUtils.java:837)
>       at org.apache.hadoop.net.NetUtils.wrapException(NetUtils.java:812)
>       at org.apache.hadoop.ipc.Client.getRpcResponse(Client.java:1566)
>       at org.apache.hadoop.ipc.Client.call(Client.java:1508)
>       at org.apache.hadoop.ipc.Client.call(Client.java:1405)
>       at 
> org.apache.hadoop.ipc.ProtobufRpcEngine$Invoker.invoke(ProtobufRpcEngine.java:240)
>       at 
> org.apache.hadoop.ipc.ProtobufRpcEngine$Invoker.invoke(ProtobufRpcEngine.java:125)
>       at com.sun.proxy.$Proxy110.submitRequest(Unknown Source)
>       at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
>       at 
> sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
>       at 
> sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
>       at java.lang.reflect.Method.invoke(Method.java:498)
>       at 
> org.apache.hadoop.io.retry.RetryInvocationHandler.invokeMethod(RetryInvocationHandler.java:422)
>       at 
> org.apache.hadoop.io.retry.RetryInvocationHandler$Call.invokeMethod(RetryInvocationHandler.java:165)
>       at 
> org.apache.hadoop.io.retry.RetryInvocationHandler$Call.invoke(RetryInvocationHandler.java:157)
>       at 
> org.apache.hadoop.io.retry.RetryInvocationHandler$Call.invokeOnce(RetryInvocationHandler.java:95)
>       at 
> org.apache.hadoop.io.retry.RetryInvocationHandler.invoke(RetryInvocationHandler.java:359)
>       at com.sun.proxy.$Proxy110.submitRequest(Unknown Source)
>       at 
> org.apache.hadoop.fs.ozone.Hadoop27RpcTransport.submitRequest(Hadoop27RpcTransport.java:74)
>       at 
> org.apache.hadoop.ozone.om.protocolPB.OzoneManagerProtocolClientSideTranslatorPB.submitRequest(OzoneManagerProtocolClientSideTranslatorPB.java:230)
>       at 
> org.apache.hadoop.ozone.om.protocolPB.OzoneManagerProtocolClientSideTranslatorPB.getServiceInfo(OzoneManagerProtocolClientSideTranslatorPB.java:1108)
>       at 
> org.apache.hadoop.ozone.client.rpc.RpcClient.<init>(RpcClient.java:193)
>       at 
> org.apache.hadoop.ozone.client.OzoneClientFactory.getClientProtocol(OzoneClientFactory.java:246)
>       at 
> org.apache.hadoop.ozone.client.OzoneClientFactory.getRpcClient(OzoneClientFactory.java:147)
>       at 
> org.apache.ranger.services.ozone.client.OzoneClient.<init>(OzoneClient.java:57)
>       at 
> org.apache.ranger.services.ozone.client.OzoneClient.connectionTest(OzoneClient.java:172)
>       at 
> org.apache.ranger.services.ozone.client.OzoneResourceMgr.connectionTest(OzoneResourceMgr.java:49)
>       at 
> org.apache.ranger.services.ozone.RangerServiceOzone.validateConfig(RangerServiceOzone.java:74)
>       at 
> org.apache.ranger.biz.ServiceMgr$ValidateCallable.actualCall(ServiceMgr.java:660)
>       at 
> org.apache.ranger.biz.ServiceMgr$ValidateCallable.actualCall(ServiceMgr.java:647)
>       at 
> org.apache.ranger.biz.ServiceMgr$TimedCallable.call(ServiceMgr.java:608)
>       at java.util.concurrent.FutureTask.run(FutureTask.java:266)
>       at 
> java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
>       at 
> java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
>       at java.lang.Thread.run(Thread.java:748)
> Caused by: java.io.IOException: 
> org.apache.hadoop.security.AccessControlException: Client cannot authenticate 
> via:[TOKEN, KERBEROS]
>       at org.apache.hadoop.ipc.Client$Connection$1.run(Client.java:778)
>       at java.security.AccessController.doPrivileged(Native Method)
>       at javax.security.auth.Subject.doAs(Subject.java:422)
>       at 
> org.apache.hadoop.security.UserGroupInformation.doAs(UserGroupInformation.java:1845)
>       at 
> org.apache.hadoop.ipc.Client$Connection.handleSaslConnectionFailure(Client.java:732)
>       at 
> org.apache.hadoop.ipc.Client$Connection.setupIOstreams(Client.java:835)
>       at org.apache.hadoop.ipc.Client$Connection.access$3800(Client.java:413)
>       at org.apache.hadoop.ipc.Client.getConnection(Client.java:1636)
>       at org.apache.hadoop.ipc.Client.call(Client.java:1452)
>       ... 31 more
> Caused by: org.apache.hadoop.security.AccessControlException: Client cannot 
> authenticate via:[TOKEN, KERBEROS]
>       at 
> org.apache.hadoop.security.SaslRpcClient.selectSaslClient(SaslRpcClient.java:179)
>       at 
> org.apache.hadoop.security.SaslRpcClient.saslConnect(SaslRpcClient.java:392)
>       at 
> org.apache.hadoop.ipc.Client$Connection.setupSaslConnection(Client.java:622)
>       at org.apache.hadoop.ipc.Client$Connection.access$2300(Client.java:413)
>       at org.apache.hadoop.ipc.Client$Connection$2.run(Client.java:822)
>       at org.apache.hadoop.ipc.Client$Connection$2.run(Client.java:818)
>       at java.security.AccessController.doPrivileged(Native Method)
>       at javax.security.auth.Subject.doAs(Subject.java:422)
>       at 
> org.apache.hadoop.security.UserGroupInformation.doAs(UserGroupInformation.java:1845)
>       at 
> org.apache.hadoop.ipc.Client$Connection.setupIOstreams(Client.java:818)
>       ... 34 more
> 2022-04-27 12:08:56,995 [timed-executor-pool-0] ERROR 
> org.apache.ranger.biz.ServiceMgr$TimedCallable (ServiceMgr.java:610) - 
> TimedCallable.call: Error:java.io.IOException: 
> org.apache.hadoop.security.AccessControlException: Client cannot authenticate 
> via:[TOKEN, KERBEROS]
> 2022-04-27 12:08:56,995 [http-nio-32080-exec-9] ERROR 
> org.apache.ranger.biz.ServiceMgr (ServiceMgr.java:198) - ==> 
> ServiceMgr.validateConfig 
> Error:org.apache.ranger.plugin.client.HadoopException: java.io.IOException: 
> org.apache.hadoop.security.AccessControlException: Client cannot authenticate 
> via:[TOKEN, KERBEROS]
> 2022-04-27 12:08:56,996 [http-nio-32080-exec-9] DEBUG 
> org.apache.ranger.plugin.util.RangerPerfTracer (RangerPerfTracer.java:101) - 
> [PERF] ServiceREST.validateConfig(serviceName=ozonedev): 53
> {code}



--
This message was sent by Atlassian Jira
(v8.20.7#820007)

Reply via email to