[ 
https://issues.apache.org/jira/browse/RANGER-5441?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Madhan Neethiraj updated RANGER-5441:
-------------------------------------
    Description: 
While bringing up Ranger docker containers from dev-support/ranger-docker 
directory, HiveServer2 startup encounters following error which results in 
clients (like beeline) unable to connect to HiveServer2:
{noformat}
2026-01-11T17:56:15,392  WARN [main] server.HiveServer2: Error starting 
HiveServer2 on attempt 11, will retry in 60000ms
org.apache.hive.service.ServiceException: 
org.apache.zookeeper.KeeperException$AuthFailedException: KeeperErrorCode = 
AuthFailed for /hiveserver2
        at 
org.apache.hive.service.server.HiveServer2.start(HiveServer2.java:729) 
~[hive-service-3.1.3.jar:3.1.3]
        at 
org.apache.hive.service.server.HiveServer2.startHiveServer2(HiveServer2.java:1039)
 [hive-service-3.1.3.jar:3.1.3]
        at 
org.apache.hive.service.server.HiveServer2.access$1600(HiveServer2.java:139) 
[hive-service-3.1.3.jar:3.1.3]
        at 
org.apache.hive.service.server.HiveServer2$StartOptionExecutor.execute(HiveServer2.java:1307)
 [hive-service-3.1.3.jar:3.1.3]
        at 
org.apache.hive.service.server.HiveServer2.main(HiveServer2.java:1151) 
[hive-service-3.1.3.jar:3.1.3]
        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) 
~[?:1.8.0_462]
        at 
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62) 
~[?:1.8.0_462]
        at 
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
 ~[?:1.8.0_462]
        at java.lang.reflect.Method.invoke(Method.java:498) ~[?:1.8.0_462]
        at org.apache.hadoop.util.RunJar.run(RunJar.java:318) 
[hadoop-common-3.1.1.jar:?]
        at org.apache.hadoop.util.RunJar.main(RunJar.java:232) 
[hadoop-common-3.1.1.jar:?]
Caused by: org.apache.zookeeper.KeeperException$AuthFailedException: 
KeeperErrorCode = AuthFailed for /hiveserver2
        at 
org.apache.zookeeper.KeeperException.create(KeeperException.java:123) 
~[zookeeper-3.4.6.jar:3.4.6-1569965]
        at org.apache.zookeeper.KeeperException.create(KeeperException.java:51) 
~[zookeeper-3.4.6.jar:3.4.6-1569965]
        at org.apache.zookeeper.ZooKeeper.create(ZooKeeper.java:783) 
~[zookeeper-3.4.6.jar:3.4.6-1569965]
        at 
org.apache.curator.framework.imps.CreateBuilderImpl$11.call(CreateBuilderImpl.java:740)
 ~[curator-framework-2.12.0.jar:?]
        at 
org.apache.curator.framework.imps.CreateBuilderImpl$11.call(CreateBuilderImpl.java:723)
 ~[curator-framework-2.12.0.jar:?]
        at org.apache.curator.RetryLoop.callWithRetry(RetryLoop.java:109) 
~[curator-client-2.12.0.jar:?]
        at 
org.apache.curator.framework.imps.CreateBuilderImpl.pathInForeground(CreateBuilderImpl.java:720)
 ~[curator-framework-2.12.0.jar:?]
        at 
org.apache.curator.framework.imps.CreateBuilderImpl.protectedPathInForeground(CreateBuilderImpl.java:484)
 ~[curator-framework-2.12.0.jar:?]
        at 
org.apache.curator.framework.imps.CreateBuilderImpl.forPath(CreateBuilderImpl.java:474)
 ~[curator-framework-2.12.0.jar:?]
        at 
org.apache.curator.framework.imps.CreateBuilderImpl.forPath(CreateBuilderImpl.java:454)
 ~[curator-framework-2.12.0.jar:?]
        at 
org.apache.curator.framework.imps.CreateBuilderImpl.forPath(CreateBuilderImpl.java:44)
 ~[curator-framework-2.12.0.jar:?]
        at 
org.apache.hive.service.server.HiveServer2.startZookeeperClient(HiveServer2.java:490)
 ~[hive-service-3.1.3.jar:3.1.3]
        at 
org.apache.hive.service.server.HiveServer2.startPrivilegeSynchonizer(HiveServer2.java:1004)
 ~[hive-service-3.1.3.jar:3.1.3]
        at 
org.apache.hive.service.server.HiveServer2.start(HiveServer2.java:726) 
~[hive-service-3.1.3.jar:3.1.3]
        ... 10 more
 {noformat}

Note that Zookeeper running in ranger-zk container is not setup with Kerberos 
authentication. Perhaps this causes HiveServer2 to fail in creating Zookeeper 
node?

CC: [~abhi_2110]

  was:
While bringing up Ranger docker containers from dev-support/ranger-docker 
directory, HiveServer2 startup encounters following error which results in 
clients (like beeline) unable to connect to HiveServer2:
{noformat}
2026-01-11T17:49:13,040  WARN [main] server.HiveServer2: Error starting 
HiveServer2 on attempt 4, will retry in 
60000msorg.apache.hive.service.ServiceException: 
org.apache.zookeeper.KeeperException$AuthFailedException: KeeperErrorCode = 
AuthFailed for /hiveserver2        at 
org.apache.hive.service.server.HiveServer2.start(HiveServer2.java:729) 
~[hive-service-3.1.3.jar:3.1.3]       at 
org.apache.hive.service.server.HiveServer2.startHiveServer2(HiveServer2.java:1039)
 [hive-service-3.1.3.jar:3.1.3]    at 
org.apache.hive.service.server.HiveServer2.access$1600(HiveServer2.java:139) 
[hive-service-3.1.3.jar:3.1.3]  at 
org.apache.hive.service.server.HiveServer2$StartOptionExecutor.execute(HiveServer2.java:1307)
 [hive-service-3.1.3.jar:3.1.3] at 
org.apache.hive.service.server.HiveServer2.main(HiveServer2.java:1151) 
[hive-service-3.1.3.jar:3.1.3]        at 
sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) ~[?:1.8.0_462]   at 
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62) 
~[?:1.8.0_462] at 
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
 ~[?:1.8.0_462] at java.lang.reflect.Method.invoke(Method.java:498) 
~[?:1.8.0_462]      at org.apache.hadoop.util.RunJar.run(RunJar.java:318) 
[hadoop-common-3.1.1.jar:?]       at 
org.apache.hadoop.util.RunJar.main(RunJar.java:232) 
[hadoop-common-3.1.1.jar:?]Caused by: 
org.apache.zookeeper.KeeperException$AuthFailedException: KeeperErrorCode = 
AuthFailed for /hiveserver2    at 
org.apache.zookeeper.KeeperException.create(KeeperException.java:123) 
~[zookeeper-3.4.6.jar:3.4.6-1569965]   at 
org.apache.zookeeper.KeeperException.create(KeeperException.java:51) 
~[zookeeper-3.4.6.jar:3.4.6-1569965]    at 
org.apache.zookeeper.ZooKeeper.create(ZooKeeper.java:783) 
~[zookeeper-3.4.6.jar:3.4.6-1569965]       at 
org.apache.curator.framework.imps.CreateBuilderImpl$11.call(CreateBuilderImpl.java:740)
 ~[curator-framework-2.12.0.jar:?]    at 
org.apache.curator.framework.imps.CreateBuilderImpl$11.call(CreateBuilderImpl.java:723)
 ~[curator-framework-2.12.0.jar:?]    at 
org.apache.curator.RetryLoop.callWithRetry(RetryLoop.java:109) 
~[curator-client-2.12.0.jar:?]        at 
org.apache.curator.framework.imps.CreateBuilderImpl.pathInForeground(CreateBuilderImpl.java:720)
 ~[curator-framework-2.12.0.jar:?]   at 
org.apache.curator.framework.imps.CreateBuilderImpl.protectedPathInForeground(CreateBuilderImpl.java:484)
 ~[curator-framework-2.12.0.jar:?]  at 
org.apache.curator.framework.imps.CreateBuilderImpl.forPath(CreateBuilderImpl.java:474)
 ~[curator-framework-2.12.0.jar:?]    at 
org.apache.curator.framework.imps.CreateBuilderImpl.forPath(CreateBuilderImpl.java:454)
 ~[curator-framework-2.12.0.jar:?]    at 
org.apache.curator.framework.imps.CreateBuilderImpl.forPath(CreateBuilderImpl.java:44)
 ~[curator-framework-2.12.0.jar:?]     at 
org.apache.hive.service.server.HiveServer2.startZookeeperClient(HiveServer2.java:490)
 ~[hive-service-3.1.3.jar:3.1.3]        at 
org.apache.hive.service.server.HiveServer2.startPrivilegeSynchonizer(HiveServer2.java:1004)
 ~[hive-service-3.1.3.jar:3.1.3]  at 
org.apache.hive.service.server.HiveServer2.start(HiveServer2.java:726) 
~[hive-service-3.1.3.jar:3.1.3]       ... 10 more
 {noformat}

Note that Zookeeper running in ranger-zk container is not setup with Kerberos 
authentication. Perhaps this causes HiveServer2 to fail in creating Zookeeper 
node?

CC: [~abhi_2110]


> Docker: HiveServer2 initialization fails in creating Zookeeper node 
> /hiveserver2
> --------------------------------------------------------------------------------
>
>                 Key: RANGER-5441
>                 URL: https://issues.apache.org/jira/browse/RANGER-5441
>             Project: Ranger
>          Issue Type: Bug
>          Components: docker
>    Affects Versions: 2.8.0
>            Reporter: Madhan Neethiraj
>            Priority: Blocker
>
> While bringing up Ranger docker containers from dev-support/ranger-docker 
> directory, HiveServer2 startup encounters following error which results in 
> clients (like beeline) unable to connect to HiveServer2:
> {noformat}
> 2026-01-11T17:56:15,392  WARN [main] server.HiveServer2: Error starting 
> HiveServer2 on attempt 11, will retry in 60000ms
> org.apache.hive.service.ServiceException: 
> org.apache.zookeeper.KeeperException$AuthFailedException: KeeperErrorCode = 
> AuthFailed for /hiveserver2
>       at 
> org.apache.hive.service.server.HiveServer2.start(HiveServer2.java:729) 
> ~[hive-service-3.1.3.jar:3.1.3]
>       at 
> org.apache.hive.service.server.HiveServer2.startHiveServer2(HiveServer2.java:1039)
>  [hive-service-3.1.3.jar:3.1.3]
>       at 
> org.apache.hive.service.server.HiveServer2.access$1600(HiveServer2.java:139) 
> [hive-service-3.1.3.jar:3.1.3]
>       at 
> org.apache.hive.service.server.HiveServer2$StartOptionExecutor.execute(HiveServer2.java:1307)
>  [hive-service-3.1.3.jar:3.1.3]
>       at 
> org.apache.hive.service.server.HiveServer2.main(HiveServer2.java:1151) 
> [hive-service-3.1.3.jar:3.1.3]
>       at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) 
> ~[?:1.8.0_462]
>       at 
> sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62) 
> ~[?:1.8.0_462]
>       at 
> sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
>  ~[?:1.8.0_462]
>       at java.lang.reflect.Method.invoke(Method.java:498) ~[?:1.8.0_462]
>       at org.apache.hadoop.util.RunJar.run(RunJar.java:318) 
> [hadoop-common-3.1.1.jar:?]
>       at org.apache.hadoop.util.RunJar.main(RunJar.java:232) 
> [hadoop-common-3.1.1.jar:?]
> Caused by: org.apache.zookeeper.KeeperException$AuthFailedException: 
> KeeperErrorCode = AuthFailed for /hiveserver2
>       at 
> org.apache.zookeeper.KeeperException.create(KeeperException.java:123) 
> ~[zookeeper-3.4.6.jar:3.4.6-1569965]
>       at org.apache.zookeeper.KeeperException.create(KeeperException.java:51) 
> ~[zookeeper-3.4.6.jar:3.4.6-1569965]
>       at org.apache.zookeeper.ZooKeeper.create(ZooKeeper.java:783) 
> ~[zookeeper-3.4.6.jar:3.4.6-1569965]
>       at 
> org.apache.curator.framework.imps.CreateBuilderImpl$11.call(CreateBuilderImpl.java:740)
>  ~[curator-framework-2.12.0.jar:?]
>       at 
> org.apache.curator.framework.imps.CreateBuilderImpl$11.call(CreateBuilderImpl.java:723)
>  ~[curator-framework-2.12.0.jar:?]
>       at org.apache.curator.RetryLoop.callWithRetry(RetryLoop.java:109) 
> ~[curator-client-2.12.0.jar:?]
>       at 
> org.apache.curator.framework.imps.CreateBuilderImpl.pathInForeground(CreateBuilderImpl.java:720)
>  ~[curator-framework-2.12.0.jar:?]
>       at 
> org.apache.curator.framework.imps.CreateBuilderImpl.protectedPathInForeground(CreateBuilderImpl.java:484)
>  ~[curator-framework-2.12.0.jar:?]
>       at 
> org.apache.curator.framework.imps.CreateBuilderImpl.forPath(CreateBuilderImpl.java:474)
>  ~[curator-framework-2.12.0.jar:?]
>       at 
> org.apache.curator.framework.imps.CreateBuilderImpl.forPath(CreateBuilderImpl.java:454)
>  ~[curator-framework-2.12.0.jar:?]
>       at 
> org.apache.curator.framework.imps.CreateBuilderImpl.forPath(CreateBuilderImpl.java:44)
>  ~[curator-framework-2.12.0.jar:?]
>       at 
> org.apache.hive.service.server.HiveServer2.startZookeeperClient(HiveServer2.java:490)
>  ~[hive-service-3.1.3.jar:3.1.3]
>       at 
> org.apache.hive.service.server.HiveServer2.startPrivilegeSynchonizer(HiveServer2.java:1004)
>  ~[hive-service-3.1.3.jar:3.1.3]
>       at 
> org.apache.hive.service.server.HiveServer2.start(HiveServer2.java:726) 
> ~[hive-service-3.1.3.jar:3.1.3]
>       ... 10 more
>  {noformat}
> Note that Zookeeper running in ranger-zk container is not setup with Kerberos 
> authentication. Perhaps this causes HiveServer2 to fail in creating Zookeeper 
> node?
> CC: [~abhi_2110]



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to