[
https://issues.apache.org/jira/browse/RANGER-4623?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
zhaoshuaihua updated RANGER-4623:
---------------------------------
Description:
*Click on the connectivity test of the knox service to report an error.*
*the error is :*
Unable to retrieve any files using given parameters, You can still save the
repository and start creating policies, but you would not be able to use
autocomplete for resource names. Check ranger_admin.log for more info.
org.apache.ranger.plugin.client.HadoopException: Exception on REST call to
KnoxUrl : [https://xxx:8443/gateway/admin/api/v1/topologies]..
javax.net.ssl.SSLHandshakeException: PKIX path building failed:
sun.security.provider.certpath.SunCertPathBuilderException: unable to find
valid certification path to requested target.
PKIX path building failed:
sun.security.provider.certpath.SunCertPathBuilderException: unable to find
valid certification path to requested target.
!ranger-knox-failed-1.png!!ranger-knox-failed-2.png!
h3. *resolved:*
The ranger plug-in client does not need SSL handshake when calling knox, so it
is replaced with apache http client to solve the SSL handshake problem and
adjust the knox interface.
*!ranger-knox-success-1.png!!ranger-knox-success-2.png!!ranger-knox-success-3.png!!ranger-knox-success-4.png!*
was:
*Click on the connectivity test of the knox service to report an error.*
*the error is :*
Unable to retrieve any files using given parameters, You can still save the
repository and start creating policies, but you would not be able to use
autocomplete for resource names. Check ranger_admin.log for more info.
org.apache.ranger.plugin.client.HadoopException: Exception on REST call to
KnoxUrl : [https://xxx:8443/gateway/admin/api/v1/topologies]..
javax.net.ssl.SSLHandshakeException: PKIX path building failed:
sun.security.provider.certpath.SunCertPathBuilderException: unable to find
valid certification path to requested target.
PKIX path building failed:
sun.security.provider.certpath.SunCertPathBuilderException: unable to find
valid certification path to requested target.
!ranger-knox-failed-1.png!!ranger-knox-failed-2.png!
> Ranger knox plugin test connection failure
> ------------------------------------------
>
> Key: RANGER-4623
> URL: https://issues.apache.org/jira/browse/RANGER-4623
> Project: Ranger
> Issue Type: Improvement
> Components: plugins
> Affects Versions: 2.1.0, 2.2.0, 2.3.0
> Reporter: zhaoshuaihua
> Priority: Major
> Attachments: RANGER-4623.patch, ranger-knox-failed-1.png,
> ranger-knox-failed-2.png, ranger-knox-success-1.png,
> ranger-knox-success-2.png, ranger-knox-success-3.png,
> ranger-knox-success-4.png
>
>
> *Click on the connectivity test of the knox service to report an error.*
> *the error is :*
> Unable to retrieve any files using given parameters, You can still save the
> repository and start creating policies, but you would not be able to use
> autocomplete for resource names. Check ranger_admin.log for more info.
> org.apache.ranger.plugin.client.HadoopException: Exception on REST call to
> KnoxUrl : [https://xxx:8443/gateway/admin/api/v1/topologies]..
> javax.net.ssl.SSLHandshakeException: PKIX path building failed:
> sun.security.provider.certpath.SunCertPathBuilderException: unable to find
> valid certification path to requested target.
> PKIX path building failed:
> sun.security.provider.certpath.SunCertPathBuilderException: unable to find
> valid certification path to requested target.
> !ranger-knox-failed-1.png!!ranger-knox-failed-2.png!
>
>
> h3. *resolved:*
> The ranger plug-in client does not need SSL handshake when calling knox, so
> it is replaced with apache http client to solve the SSL handshake problem and
> adjust the knox interface.
> *!ranger-knox-success-1.png!!ranger-knox-success-2.png!!ranger-knox-success-3.png!!ranger-knox-success-4.png!*
>
>
>
>
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
