Madhan Neethiraj created RANGER-5646:
----------------------------------------
Summary: Hive plugins fails to send audit logs to audit server
Key: RANGER-5646
URL: https://issues.apache.org/jira/browse/RANGER-5646
Project: Ranger
Issue Type: Bug
Components: audit, plugins
Reporter: Madhan Neethiraj
{{ranger-hive}} container, built with the latest master branch, fails in
sending audit logs to Ranger audit server with the following error:
{noformat}
2026-06-14T06:54:32,582 ERROR [org.apache.ranger.audit.queue.AuditBatchQueue0]
destination.RangerAuditServerDestination: Failed to send audit batch. HTTP
status: 401, Response:
2026-06-14T06:54:32,582 ERROR [org.apache.ranger.audit.queue.AuditBatchQueue0]
destination.RangerAuditServerDestination: Authentication failure (401). Verify
credentials are valid and audit server is properly configured.
2026-06-14T06:54:32,583 ERROR [org.apache.ranger.audit.queue.AuditBatchQueue0]
destination.RangerAuditServerDestination: Failed to send batch of 1 events
2026-06-14T06:54:32,590 WARN [org.apache.ranger.audit.queue.AuditBatchQueue0]
provider.BaseAuditHandler: failed to log audit event:
{"repoType":3,"repo":"dev_hive","reqUser":"testuser1","evtTime":"2026-06-14
06:54:02.006","access":"USE","resType":"@null","action":"_any","result":1,"agent":"hiveServer2","policy":16,"enforcer":"ranger-acl","sess":"1364dc0b-08ad-4fad-a64e-2fb2cb1867a0","cliType":"HIVESERVER2","cliIP":"172.18.0.19","reqData":"SHOW
DATABASES","agentHost":"ranger-hive.rangernw","logType":"RangerAudit","id":"7ec67de0-c3a6-4fb3-b547-d6dc4d29723c-0","seq_num":1,"event_count":1,"event_dur_ms":0,"additional_info":"{\"remote-ip-address\":\"172.18.0.19\"}","policy_version":1}
, errorMessage=
{noformat}
Found following libraries in Hive plugin directory
{{/opt/hive/lib/ranger-hive-plugin-impl}} are already present in HiveServer2
lib directory {{/opt/hive/lib}} - resulting in duplicates. Removing these
duplicate libraries from Hive plugin directory addressed above audit failure:
# commons-collections-3.2.2.jar
# hppc-0.8.0.jar (Hive includes hppc-0.7.2.jar)
# httpclient-4.5.13.jar
# httpcore-4.4.14.jar (Hive includes httpcore-4.4.13.jar)
# jackson-annotations-2.17.2.jar (Hive includes jackson-annotations-2.16.1.jar)
# jackson-core-2.17.2.jar (Hive includes jackson-core-2.16.1.jar)
# jackson-databind-2.17.2.jar (Hive includes jackson-databind-2.16.1.jar)
# jackson-jaxrs-base-2.17.2.jar (Hive includes jackson-jaxrs-base-2.16.1.jar)
# jackson-jaxrs-json-provider-2.17.2.jar (Hive includes
jackson-jaxrs-json-provider-2.16.1.jar)
# javax.annotation-api-1.3.2.jar
# joda-time-2.10.6.jar (Hive includes joda-time-2.9.9.jar)
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
