Madhan Neethiraj created RANGER-5648:
----------------------------------------
Summary: Solr authorization fails with NPE
Key: RANGER-5648
URL: https://issues.apache.org/jira/browse/RANGER-5648
Project: Ranger
Issue Type: Bug
Components: plugins
Affects Versions: 3.0.0
Reporter: Madhan Neethiraj
In docker setup with Ranger built from master branch, queries to Solr fail with
status code 403, with the following response:
{noformat}
Error running solr query, please check solr configs. Error from server at
http://ranger-solr.rangernw:8983/solr/ranger_audits: Expected mime type
application/octet-stream but got text/html. <html> <head> <meta
http-equiv="Content-Type" content="text/html;charset=ISO-8859-1"/> <title>Error
403 Unauthorized request, Response code: 403</title> </head> <body><h2>HTTP
ERROR 403 Unauthorized request, Response code: 403</h2> <table>
<tr><th>URI:</th><td>/solr/ranger_audits/select</td></tr>
<tr><th>STATUS:</th><td>403</td></tr> <tr><th>MESSAGE:</th><td>Unauthorized
request, Response code: 403</td></tr>
<tr><th>SERVLET:</th><td>default</td></tr> </table> </body> </html> {noformat}
{{ranger-solr}} pod logs following error, indicating Ranger plugin
initialization was not successful:
{noformat}
2026-06-15 23:17:23.874 ERROR (qtp746115872-17) [c: s: r: x:ranger_audits
t:null-6] o.a.r.a.s.a.RangerSolrAuthorizer Cannot invoke
"org.apache.ranger.plugin.service.RangerBasePlugin.getConfig()" because
"org.apache.ranger.authorization.solr.authorizer.RangerSolrAuthorizer.solrPlugin"
is null => java.lang.NullPointerException: Cannot invoke
"org.apache.ranger.plugin.service.RangerBasePlugin.getConfig()" because
"org.apache.ranger.authorization.solr.authorizer.RangerSolrAuthorizer.solrPlugin"
is null
at
org.apache.ranger.authorization.solr.authorizer.RangerSolrAuthorizer.authorize(RangerSolrAuthorizer.java:136)
java.lang.NullPointerException: Cannot invoke
"org.apache.ranger.plugin.service.RangerBasePlugin.getConfig()" because
"org.apache.ranger.authorization.solr.authorizer.RangerSolrAuthorizer.solrPlugin"
is null
at
org.apache.ranger.authorization.solr.authorizer.RangerSolrAuthorizer.authorize(RangerSolrAuthorizer.java:136)
~[ranger-solr-plugin-shim-3.0.0-SNAPSHOT.jar:3.0.0-SNAPSHOT]
at
org.apache.ranger.authorization.solr.authorizer.RangerSolrAuthorizer.authorize(RangerSolrAuthorizer.java:73)
~[ranger-solr-plugin-shim-3.0.0-SNAPSHOT.jar:3.0.0-SNAPSHOT]
at
org.apache.solr.security.AuthorizationUtils.authorize(AuthorizationUtils.java:75)
~[solr-core-9.4.1.jar:9.4.1 57762a5b52a9d40a6f15441c4adeb76f0b045476 - dsmiley
- 2024-01-13 00:49:10]
at org.apache.solr.servlet.HttpSolrCall.call(HttpSolrCall.java:528)
~[solr-core-9.4.1.jar:9.4.1 57762a5b52a9d40a6f15441c4adeb76f0b045476 - dsmiley
- 2024-01-13 00:49:10]
at
org.apache.solr.servlet.SolrDispatchFilter.dispatch(SolrDispatchFilter.java:262)
~[solr-core-9.4.1.jar:9.4.1 57762a5b52a9d40a6f15441c4adeb76f0b045476 - dsmiley
- 2024-01-13 00:49:10]
at
org.apache.solr.servlet.SolrDispatchFilter.lambda$doFilter$0(SolrDispatchFilter.java:219)
~[solr-core-9.4.1.jar:9.4.1 57762a5b52a9d40a6f15441c4adeb76f0b045476 - dsmiley
- 2024-01-13 00:49:10]
at
org.apache.solr.servlet.ServletUtils.traceHttpRequestExecution2(ServletUtils.java:246)
~[solr-core-9.4.1.jar:9.4.1 57762a5b52a9d40a6f15441c4adeb76f0b045476 - dsmiley
- 2024-01-13 00:49:10]
at
org.apache.solr.servlet.ServletUtils.rateLimitRequest(ServletUtils.java:215)
~[solr-core-9.4.1.jar:9.4.1 57762a5b52a9d40a6f15441c4adeb76f0b045476 - dsmiley
- 2024-01-13 00:49:10]
at
org.apache.solr.servlet.SolrDispatchFilter.doFilter(SolrDispatchFilter.java:213)
~[solr-core-9.4.1.jar:9.4.1 57762a5b52a9d40a6f15441c4adeb76f0b045476 - dsmiley
- 2024-01-13 00:49:10]
at
org.apache.solr.servlet.SolrDispatchFilter.doFilter(SolrDispatchFilter.java:195)
~[solr-core-9.4.1.jar:9.4.1 57762a5b52a9d40a6f15441c4adeb76f0b045476 - dsmiley
- 2024-01-13 00:49:10]
at
org.eclipse.jetty.servlet.FilterHolder.doFilter(FilterHolder.java:210)
~[jetty-servlet-10.0.19.jar:10.0.19]
at
org.eclipse.jetty.servlet.ServletHandler$Chain.doFilter(ServletHandler.java:1635)
~[jetty-servlet-10.0.19.jar:10.0.19]
at
org.eclipse.jetty.servlet.ServletHandler.doHandle(ServletHandler.java:527)
~[jetty-servlet-10.0.19.jar:10.0.19]
at
org.eclipse.jetty.server.handler.ScopedHandler.handle(ScopedHandler.java:131)
~[jetty-server-10.0.19.jar:10.0.19]
at
org.eclipse.jetty.security.SecurityHandler.handle(SecurityHandler.java:598)
~[jetty-security-10.0.19.jar:10.0.19]
at
org.eclipse.jetty.server.handler.HandlerWrapper.handle(HandlerWrapper.java:122)
~[jetty-server-10.0.19.jar:10.0.19]
at
org.eclipse.jetty.server.handler.ScopedHandler.nextHandle(ScopedHandler.java:223)
~[jetty-server-10.0.19.jar:10.0.19]
at
org.eclipse.jetty.server.session.SessionHandler.doHandle(SessionHandler.java:1580)
~[jetty-server-10.0.19.jar:10.0.19]
at
org.eclipse.jetty.server.handler.ScopedHandler.nextHandle(ScopedHandler.java:221)
~[jetty-server-10.0.19.jar:10.0.19]
at
org.eclipse.jetty.server.handler.ContextHandler.doHandle(ContextHandler.java:1384)
~[jetty-server-10.0.19.jar:10.0.19]
at
org.eclipse.jetty.server.handler.ScopedHandler.nextScope(ScopedHandler.java:176)
~[jetty-server-10.0.19.jar:10.0.19]
at
org.eclipse.jetty.servlet.ServletHandler.doScope(ServletHandler.java:484)
~[jetty-servlet-10.0.19.jar:10.0.19]
at
org.eclipse.jetty.server.session.SessionHandler.doScope(SessionHandler.java:1553)
~[jetty-server-10.0.19.jar:10.0.19]
at
org.eclipse.jetty.server.handler.ScopedHandler.nextScope(ScopedHandler.java:174)
~[jetty-server-10.0.19.jar:10.0.19]
at
org.eclipse.jetty.server.handler.ContextHandler.doScope(ContextHandler.java:1306)
~[jetty-server-10.0.19.jar:10.0.19]
at
org.eclipse.jetty.server.handler.ScopedHandler.handle(ScopedHandler.java:129)
~[jetty-server-10.0.19.jar:10.0.19]
at
org.eclipse.jetty.server.handler.ContextHandlerCollection.handle(ContextHandlerCollection.java:149)
~[jetty-server-10.0.19.jar:10.0.19]
at
org.eclipse.jetty.server.handler.InetAccessHandler.handle(InetAccessHandler.java:228)
~[jetty-server-10.0.19.jar:10.0.19]
at
org.eclipse.jetty.server.handler.HandlerCollection.handle(HandlerCollection.java:141)
~[jetty-server-10.0.19.jar:10.0.19]
at
org.eclipse.jetty.server.handler.HandlerWrapper.handle(HandlerWrapper.java:122)
~[jetty-server-10.0.19.jar:10.0.19]
at
org.eclipse.jetty.rewrite.handler.RewriteHandler.handle(RewriteHandler.java:301)
~[jetty-rewrite-10.0.19.jar:10.0.19]
at
org.eclipse.jetty.server.handler.HandlerWrapper.handle(HandlerWrapper.java:122)
~[jetty-server-10.0.19.jar:10.0.19]
at
org.eclipse.jetty.server.handler.gzip.GzipHandler.handle(GzipHandler.java:822)
~[jetty-server-10.0.19.jar:10.0.19]
at
org.eclipse.jetty.server.handler.HandlerWrapper.handle(HandlerWrapper.java:122)
~[jetty-server-10.0.19.jar:10.0.19]
at org.eclipse.jetty.server.Server.handle(Server.java:563)
~[jetty-server-10.0.19.jar:10.0.19]
at
org.eclipse.jetty.server.HttpChannel$RequestDispatchable.dispatch(HttpChannel.java:1598)
~[jetty-server-10.0.19.jar:10.0.19]
at org.eclipse.jetty.server.HttpChannel.dispatch(HttpChannel.java:753)
~[jetty-server-10.0.19.jar:10.0.19]
at org.eclipse.jetty.server.HttpChannel.handle(HttpChannel.java:501)
~[jetty-server-10.0.19.jar:10.0.19]
at
org.eclipse.jetty.server.HttpConnection.onFillable(HttpConnection.java:287)
~[jetty-server-10.0.19.jar:10.0.19]
at
org.eclipse.jetty.io.AbstractConnection$ReadCallback.succeeded(AbstractConnection.java:314)
~[jetty-io-10.0.19.jar:10.0.19]
at org.eclipse.jetty.io.FillInterest.fillable(FillInterest.java:100)
~[jetty-io-10.0.19.jar:10.0.19]
at
org.eclipse.jetty.io.SelectableChannelEndPoint$1.run(SelectableChannelEndPoint.java:53)
~[jetty-io-10.0.19.jar:10.0.19]
at
org.eclipse.jetty.util.thread.strategy.AdaptiveExecutionStrategy.runTask(AdaptiveExecutionStrategy.java:421)
~[jetty-util-10.0.19.jar:10.0.19]
at
org.eclipse.jetty.util.thread.strategy.AdaptiveExecutionStrategy.consumeTask(AdaptiveExecutionStrategy.java:390)
~[jetty-util-10.0.19.jar:10.0.19]
at
org.eclipse.jetty.util.thread.strategy.AdaptiveExecutionStrategy.tryProduce(AdaptiveExecutionStrategy.java:277)
~[jetty-util-10.0.19.jar:10.0.19]
at
org.eclipse.jetty.util.thread.strategy.AdaptiveExecutionStrategy.produce(AdaptiveExecutionStrategy.java:193)
~[jetty-util-10.0.19.jar:10.0.19]
at
org.eclipse.jetty.util.thread.QueuedThreadPool.runJob(QueuedThreadPool.java:969)
~[jetty-util-10.0.19.jar:10.0.19]
at
org.eclipse.jetty.util.thread.QueuedThreadPool$Runner.doRunJob(QueuedThreadPool.java:1194)
~[jetty-util-10.0.19.jar:10.0.19]
at
org.eclipse.jetty.util.thread.QueuedThreadPool$Runner.run(QueuedThreadPool.java:1149)
~[jetty-util-10.0.19.jar:10.0.19]
at java.base/java.lang.Thread.run(Unknown Source) [?:?]
{noformat}
Earlier logs show failure in plugin initialization:
{noformat}
2026-06-15 23:03:18.169 ERROR (main) [c: s: r: x: t:]
o.a.r.a.s.a.RangerSolrAuthorizer Error creating and initializing
RangerBasePlugin() => java.lang.RuntimeException:
org.apache.hadoop.security.KerberosAuthException: failure to login: for
principal: solr/[email protected] from keytab
/etc/keytabs/solr.keytab javax.security.auth.login.LoginException
at
org.apache.ranger.plugin.service.RangerBasePlugin.<init>(RangerBasePlugin.java:185)
java.lang.RuntimeException: org.apache.hadoop.security.KerberosAuthException:
failure to login: for principal: solr/[email protected] from
keytab /etc/keytabs/solr.keytab javax.security.auth.login.LoginException
at
org.apache.ranger.plugin.service.RangerBasePlugin.<init>(RangerBasePlugin.java:185)
~[?:?]
at
org.apache.ranger.plugin.service.RangerBasePlugin.<init>(RangerBasePlugin.java:113)
~[?:?]
at
org.apache.ranger.authorization.solr.authorizer.RangerSolrAuthorizer.init(RangerSolrAuthorizer.java:326)
~[ranger-solr-plugin-shim-3.0.0-SNAPSHOT.jar:3.0.0-SNAPSHOT]
at
org.apache.ranger.authorization.solr.authorizer.RangerSolrAuthorizer.init(RangerSolrAuthorizer.java:80)
~[ranger-solr-plugin-shim-3.0.0-SNAPSHOT.jar:3.0.0-SNAPSHOT]
at
org.apache.solr.core.CoreContainer.initializeAuthorizationPlugin(CoreContainer.java:472)
~[solr-core-9.4.1.jar:9.4.1 57762a5b52a9d40a6f15441c4adeb76f0b045476 - dsmiley
- 2024-01-13 00:49:10]
at
org.apache.solr.core.CoreContainer.reloadSecurityProperties(CoreContainer.java:1186)
~[solr-core-9.4.1.jar:9.4.1 57762a5b52a9d40a6f15441c4adeb76f0b045476 - dsmiley
- 2024-01-13 00:49:10]
at
org.apache.solr.core.CoreContainer.loadInternal(CoreContainer.java:857)
~[solr-core-9.4.1.jar:9.4.1 57762a5b52a9d40a6f15441c4adeb76f0b045476 - dsmiley
- 2024-01-13 00:49:10]
at org.apache.solr.core.CoreContainer.load(CoreContainer.java:765)
~[solr-core-9.4.1.jar:9.4.1 57762a5b52a9d40a6f15441c4adeb76f0b045476 - dsmiley
- 2024-01-13 00:49:10]
at
org.apache.solr.servlet.CoreContainerProvider.createCoreContainer(CoreContainerProvider.java:427)
~[solr-core-9.4.1.jar:9.4.1 57762a5b52a9d40a6f15441c4adeb76f0b045476 - dsmiley
- 2024-01-13 00:49:10]
at
org.apache.solr.servlet.CoreContainerProvider.init(CoreContainerProvider.java:246)
~[solr-core-9.4.1.jar:9.4.1 57762a5b52a9d40a6f15441c4adeb76f0b045476 - dsmiley
- 2024-01-13 00:49:10]
at
org.apache.solr.servlet.CoreContainerProvider.contextInitialized(CoreContainerProvider.java:116)
~[solr-core-9.4.1.jar:9.4.1 57762a5b52a9d40a6f15441c4adeb76f0b045476 - dsmiley
- 2024-01-13 00:49:10]
at
org.eclipse.jetty.server.handler.ContextHandler.callContextInitialized(ContextHandler.java:1049)
~[jetty-server-10.0.19.jar:10.0.19]
at
org.eclipse.jetty.servlet.ServletContextHandler.callContextInitialized(ServletContextHandler.java:624)
~[jetty-servlet-10.0.19.jar:10.0.19]
at
org.eclipse.jetty.server.handler.ContextHandler.contextInitialized(ContextHandler.java:984)
~[jetty-server-10.0.19.jar:10.0.19]
at
org.eclipse.jetty.servlet.ServletHandler.initialize(ServletHandler.java:740)
~[jetty-servlet-10.0.19.jar:10.0.19]
at
org.eclipse.jetty.servlet.ServletContextHandler.startContext(ServletContextHandler.java:392)
~[jetty-servlet-10.0.19.jar:10.0.19]
at
org.eclipse.jetty.webapp.WebAppContext.startContext(WebAppContext.java:1304)
~[jetty-webapp-10.0.19.jar:10.0.19]
at
org.eclipse.jetty.server.handler.ContextHandler.doStart(ContextHandler.java:901)
~[jetty-server-10.0.19.jar:10.0.19]
at
org.eclipse.jetty.servlet.ServletContextHandler.doStart(ServletContextHandler.java:306)
~[jetty-servlet-10.0.19.jar:10.0.19]
at
org.eclipse.jetty.webapp.WebAppContext.doStart(WebAppContext.java:532)
~[jetty-webapp-10.0.19.jar:10.0.19]
at
org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:93)
~[jetty-util-10.0.19.jar:10.0.19]
at
org.eclipse.jetty.util.component.ContainerLifeCycle.start(ContainerLifeCycle.java:171)
~[jetty-util-10.0.19.jar:10.0.19]
at
org.eclipse.jetty.util.component.ContainerLifeCycle.doStart(ContainerLifeCycle.java:121)
~[jetty-util-10.0.19.jar:10.0.19]
at
org.eclipse.jetty.server.handler.AbstractHandler.doStart(AbstractHandler.java:89)
~[jetty-server-10.0.19.jar:10.0.19]
at
org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:93)
~[jetty-util-10.0.19.jar:10.0.19]
at
org.eclipse.jetty.util.component.ContainerLifeCycle.start(ContainerLifeCycle.java:171)
~[jetty-util-10.0.19.jar:10.0.19]
at
org.eclipse.jetty.util.component.ContainerLifeCycle.doStart(ContainerLifeCycle.java:114)
~[jetty-util-10.0.19.jar:10.0.19]
at
org.eclipse.jetty.server.handler.AbstractHandler.doStart(AbstractHandler.java:89)
~[jetty-server-10.0.19.jar:10.0.19]
at
org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:93)
~[jetty-util-10.0.19.jar:10.0.19]
at
org.eclipse.jetty.util.component.ContainerLifeCycle.start(ContainerLifeCycle.java:171)
~[jetty-util-10.0.19.jar:10.0.19]
at
org.eclipse.jetty.util.component.ContainerLifeCycle.doStart(ContainerLifeCycle.java:121)
~[jetty-util-10.0.19.jar:10.0.19]
at
org.eclipse.jetty.server.handler.AbstractHandler.doStart(AbstractHandler.java:89)
~[jetty-server-10.0.19.jar:10.0.19]
at
org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:93)
~[jetty-util-10.0.19.jar:10.0.19]
at
org.eclipse.jetty.util.component.ContainerLifeCycle.start(ContainerLifeCycle.java:171)
~[jetty-util-10.0.19.jar:10.0.19]
at
org.eclipse.jetty.util.component.ContainerLifeCycle.doStart(ContainerLifeCycle.java:114)
~[jetty-util-10.0.19.jar:10.0.19]
at
org.eclipse.jetty.server.handler.AbstractHandler.doStart(AbstractHandler.java:89)
~[jetty-server-10.0.19.jar:10.0.19]
at
org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:93)
~[jetty-util-10.0.19.jar:10.0.19]
at
org.eclipse.jetty.util.component.ContainerLifeCycle.start(ContainerLifeCycle.java:171)
~[jetty-util-10.0.19.jar:10.0.19]
at
org.eclipse.jetty.util.component.ContainerLifeCycle.doStart(ContainerLifeCycle.java:114)
~[jetty-util-10.0.19.jar:10.0.19]
at
org.eclipse.jetty.server.handler.AbstractHandler.doStart(AbstractHandler.java:89)
~[jetty-server-10.0.19.jar:10.0.19]
at
org.eclipse.jetty.server.handler.gzip.GzipHandler.doStart(GzipHandler.java:221)
~[jetty-server-10.0.19.jar:10.0.19]
at
org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:93)
~[jetty-util-10.0.19.jar:10.0.19]
at
org.eclipse.jetty.util.component.ContainerLifeCycle.start(ContainerLifeCycle.java:171)
~[jetty-util-10.0.19.jar:10.0.19]
at org.eclipse.jetty.server.Server.start(Server.java:470)
~[jetty-server-10.0.19.jar:10.0.19]
at
org.eclipse.jetty.util.component.ContainerLifeCycle.doStart(ContainerLifeCycle.java:114)
~[jetty-util-10.0.19.jar:10.0.19]
at
org.eclipse.jetty.server.handler.AbstractHandler.doStart(AbstractHandler.java:89)
~[jetty-server-10.0.19.jar:10.0.19]
at org.eclipse.jetty.server.Server.doStart(Server.java:415)
~[jetty-server-10.0.19.jar:10.0.19]
at
org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:93)
~[jetty-util-10.0.19.jar:10.0.19]
at
org.eclipse.jetty.xml.XmlConfiguration.main(XmlConfiguration.java:1919)
~[jetty-xml-10.0.19.jar:10.0.19]
at
java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
~[?:?]
at
java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)
~[?:?]
at
java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(Unknown
Source) ~[?:?]
at java.base/java.lang.reflect.Method.invoke(Unknown Source) ~[?:?]
at org.eclipse.jetty.start.Main.invokeMain(Main.java:229)
~[start.jar:10.0.19]
at org.eclipse.jetty.start.Main.start(Main.java:528)
~[start.jar:10.0.19]
at org.eclipse.jetty.start.Main.main(Main.java:76) ~[start.jar:10.0.19]
Caused by: org.apache.hadoop.security.KerberosAuthException: failure to login:
for principal: solr/[email protected] from keytab
/etc/keytabs/solr.keytab javax.security.auth.login.LoginException
at
org.apache.hadoop.security.UserGroupInformation.doSubjectLogin(UserGroupInformation.java:2070)
~[hadoop-common-3.3.5.jar:?]
at
org.apache.hadoop.security.UserGroupInformation.loginUserFromKeytabAndReturnUGI(UserGroupInformation.java:1398)
~[hadoop-common-3.3.5.jar:?]
at
org.apache.hadoop.security.UserGroupInformation.loginUserFromKeytab(UserGroupInformation.java:1136)
~[hadoop-common-3.3.5.jar:?]
at
org.apache.ranger.audit.provider.MiscUtil.setUGIFromJAASConfig(MiscUtil.java:694)
~[?:?]
at
org.apache.ranger.plugin.service.RangerBasePlugin.<init>(RangerBasePlugin.java:181)
~[?:?]
... 55 more
Caused by: javax.security.auth.login.LoginException
at
[email protected]/com.sun.security.auth.module.Krb5LoginModule.attemptAuthentication(Unknown
Source) ~[jdk.security.auth:?]
at
[email protected]/com.sun.security.auth.module.Krb5LoginModule.login(Unknown
Source) ~[jdk.security.auth:?]
at java.base/javax.security.auth.login.LoginContext.invoke(Unknown
Source) ~[?:?]
at java.base/javax.security.auth.login.LoginContext$4.run(Unknown
Source) ~[?:?]
at java.base/javax.security.auth.login.LoginContext$4.run(Unknown
Source) ~[?:?]
at java.base/java.security.AccessController.doPrivileged(Unknown
Source) ~[?:?]
at java.base/javax.security.auth.login.LoginContext.invokePriv(Unknown
Source) ~[?:?]
at java.base/javax.security.auth.login.LoginContext.login(Unknown
Source) ~[?:?]
at
org.apache.hadoop.security.UserGroupInformation$HadoopLoginContext.login(UserGroupInformation.java:2154)
~[hadoop-common-3.3.5.jar:?]
at
org.apache.hadoop.security.UserGroupInformation.doSubjectLogin(UserGroupInformation.java:2053)
~[hadoop-common-3.3.5.jar:?]
at
org.apache.hadoop.security.UserGroupInformation.loginUserFromKeytabAndReturnUGI(UserGroupInformation.java:1398)
~[hadoop-common-3.3.5.jar:?]
at
org.apache.hadoop.security.UserGroupInformation.loginUserFromKeytab(UserGroupInformation.java:1136)
~[hadoop-common-3.3.5.jar:?]
at
org.apache.ranger.audit.provider.MiscUtil.setUGIFromJAASConfig(MiscUtil.java:694)
~[?:?]
at
org.apache.ranger.plugin.service.RangerBasePlugin.<init>(RangerBasePlugin.java:181)
~[?:?]
... 55 more
Caused by: java.net.PortUnreachableException
at java.base/sun.nio.ch.DatagramChannelImpl.receive0(Native Method)
~[?:?]
at
java.base/sun.nio.ch.DatagramChannelImpl.receiveIntoNativeBuffer(Unknown
Source) ~[?:?]
at java.base/sun.nio.ch.DatagramChannelImpl.receive(Unknown Source)
~[?:?]
at
java.base/sun.nio.ch.DatagramChannelImpl.trustedBlockingReceive(Unknown Source)
~[?:?]
at java.base/sun.nio.ch.DatagramChannelImpl.blockingReceive(Unknown
Source) ~[?:?]
at java.base/sun.nio.ch.DatagramSocketAdaptor.receive(Unknown Source)
~[?:?]
at java.base/java.net.DatagramSocket.receive(Unknown Source) ~[?:?]
at
java.security.jgss/sun.security.krb5.internal.UDPClient.receive(Unknown Source)
~[java.security.jgss:?]
at
java.security.jgss/sun.security.krb5.KdcComm$KdcCommunication.run(Unknown
Source) ~[java.security.jgss:?]
at
java.security.jgss/sun.security.krb5.KdcComm$KdcCommunication.run(Unknown
Source) ~[java.security.jgss:?]
at java.base/java.security.AccessController.doPrivileged(Unknown
Source) ~[?:?]
at java.security.jgss/sun.security.krb5.KdcComm.send(Unknown Source)
~[java.security.jgss:?]
at java.security.jgss/sun.security.krb5.KdcComm.sendIfPossible(Unknown
Source) ~[java.security.jgss:?]
at java.security.jgss/sun.security.krb5.KdcComm.send(Unknown Source)
~[java.security.jgss:?]
at java.security.jgss/sun.security.krb5.KdcComm.send(Unknown Source)
~[java.security.jgss:?]
at java.security.jgss/sun.security.krb5.KrbAsReqBuilder.send(Unknown
Source) ~[java.security.jgss:?]
at java.security.jgss/sun.security.krb5.KrbAsReqBuilder.action(Unknown
Source) ~[java.security.jgss:?]
at
[email protected]/com.sun.security.auth.module.Krb5LoginModule.attemptAuthentication(Unknown
Source) ~[jdk.security.auth:?]
at
[email protected]/com.sun.security.auth.module.Krb5LoginModule.login(Unknown
Source) ~[jdk.security.auth:?]
at java.base/javax.security.auth.login.LoginContext.invoke(Unknown
Source) ~[?:?]
at java.base/javax.security.auth.login.LoginContext$4.run(Unknown
Source) ~[?:?]
at java.base/javax.security.auth.login.LoginContext$4.run(Unknown
Source) ~[?:?]
at java.base/java.security.AccessController.doPrivileged(Unknown
Source) ~[?:?]
at java.base/javax.security.auth.login.LoginContext.invokePriv(Unknown
Source) ~[?:?]
at java.base/javax.security.auth.login.LoginContext.login(Unknown
Source) ~[?:?]
at
org.apache.hadoop.security.UserGroupInformation$HadoopLoginContext.login(UserGroupInformation.java:2154)
~[hadoop-common-3.3.5.jar:?]
at
org.apache.hadoop.security.UserGroupInformation.doSubjectLogin(UserGroupInformation.java:2053)
~[hadoop-common-3.3.5.jar:?]
at
org.apache.hadoop.security.UserGroupInformation.loginUserFromKeytabAndReturnUGI(UserGroupInformation.java:1398)
~[hadoop-common-3.3.5.jar:?]
at
org.apache.hadoop.security.UserGroupInformation.loginUserFromKeytab(UserGroupInformation.java:1136)
~[hadoop-common-3.3.5.jar:?]
at
org.apache.ranger.audit.provider.MiscUtil.setUGIFromJAASConfig(MiscUtil.java:694)
~[?:?]
at
org.apache.ranger.plugin.service.RangerBasePlugin.<init>(RangerBasePlugin.java:181)
~[?:?]
... 55 more
{noformat}
This issue is not seen after a restart of {{ranger-solr}} pod. Ranger plugin
should be resilient to initialization failures.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
