[
https://issues.apache.org/jira/browse/RANGER-5646?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Ramachandran Krishnan resolved RANGER-5646.
-------------------------------------------
Fix Version/s: 3.0.0
Assignee: Ramachandran Krishnan
Resolution: Fixed
> Hive plugins fails to send audit logs to audit server
> -----------------------------------------------------
>
> Key: RANGER-5646
> URL: https://issues.apache.org/jira/browse/RANGER-5646
> Project: Ranger
> Issue Type: Bug
> Components: audit, plugins
> Reporter: Madhan Neethiraj
> Assignee: Ramachandran Krishnan
> Priority: Major
> Fix For: 3.0.0
>
> Time Spent: 20m
> Remaining Estimate: 0h
>
> {{ranger-hive}} container, built with the latest master branch, fails in
> sending audit logs to Ranger audit server with the following error:
> {noformat}
> 2026-06-14T06:54:32,582 ERROR
> [org.apache.ranger.audit.queue.AuditBatchQueue0]
> destination.RangerAuditServerDestination: Failed to send audit batch. HTTP
> status: 401, Response:
> 2026-06-14T06:54:32,582 ERROR
> [org.apache.ranger.audit.queue.AuditBatchQueue0]
> destination.RangerAuditServerDestination: Authentication failure (401).
> Verify credentials are valid and audit server is properly configured.
> 2026-06-14T06:54:32,583 ERROR
> [org.apache.ranger.audit.queue.AuditBatchQueue0]
> destination.RangerAuditServerDestination: Failed to send batch of 1 events
> 2026-06-14T06:54:32,590 WARN
> [org.apache.ranger.audit.queue.AuditBatchQueue0] provider.BaseAuditHandler:
> failed to log audit event:
> {"repoType":3,"repo":"dev_hive","reqUser":"testuser1","evtTime":"2026-06-14
> 06:54:02.006","access":"USE","resType":"@null","action":"_any","result":1,"agent":"hiveServer2","policy":16,"enforcer":"ranger-acl","sess":"1364dc0b-08ad-4fad-a64e-2fb2cb1867a0","cliType":"HIVESERVER2","cliIP":"172.18.0.19","reqData":"SHOW
>
> DATABASES","agentHost":"ranger-hive.rangernw","logType":"RangerAudit","id":"7ec67de0-c3a6-4fb3-b547-d6dc4d29723c-0","seq_num":1,"event_count":1,"event_dur_ms":0,"additional_info":"{\"remote-ip-address\":\"172.18.0.19\"}","policy_version":1}
> , errorMessage=
> {noformat}
>
> Found following libraries in Hive plugin directory
> {{/opt/hive/lib/ranger-hive-plugin-impl}} are already present in HiveServer2
> lib directory {{/opt/hive/lib}} - resulting in duplicates. Removing these
> duplicate libraries from Hive plugin directory addressed above audit failure:
> # commons-collections-3.2.2.jar
> # hppc-0.8.0.jar (Hive includes hppc-0.7.2.jar)
> # httpclient-4.5.13.jar
> # httpcore-4.4.14.jar (Hive includes httpcore-4.4.13.jar)
> # jackson-annotations-2.17.2.jar (Hive includes
> jackson-annotations-2.16.1.jar)
> # jackson-core-2.17.2.jar (Hive includes jackson-core-2.16.1.jar)
> # jackson-databind-2.17.2.jar (Hive includes jackson-databind-2.16.1.jar)
> # jackson-jaxrs-base-2.17.2.jar (Hive includes jackson-jaxrs-base-2.16.1.jar)
> # jackson-jaxrs-json-provider-2.17.2.jar (Hive includes
> jackson-jaxrs-json-provider-2.16.1.jar)
> # javax.annotation-api-1.3.2.jar
> # joda-time-2.10.6.jar (Hive includes joda-time-2.9.9.jar)
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
