[
https://issues.apache.org/jira/browse/RANGER-5648?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Sailaja Polavarapu reassigned RANGER-5648:
------------------------------------------
Assignee: Sanket Shelar
> Solr authorization fails with NPE
> ---------------------------------
>
> Key: RANGER-5648
> URL: https://issues.apache.org/jira/browse/RANGER-5648
> Project: Ranger
> Issue Type: Bug
> Components: plugins
> Affects Versions: 3.0.0
> Reporter: Madhan Neethiraj
> Assignee: Sanket Shelar
> Priority: Major
>
> In docker setup with Ranger built from master branch, queries to Solr fail
> with status code 403, with the following response:
> {noformat}
> Error running solr query, please check solr configs. Error from server at
> http://ranger-solr.rangernw:8983/solr/ranger_audits: Expected mime type
> application/octet-stream but got text/html. <html> <head> <meta
> http-equiv="Content-Type" content="text/html;charset=ISO-8859-1"/>
> <title>Error 403 Unauthorized request, Response code: 403</title> </head>
> <body><h2>HTTP ERROR 403 Unauthorized request, Response code: 403</h2>
> <table> <tr><th>URI:</th><td>/solr/ranger_audits/select</td></tr>
> <tr><th>STATUS:</th><td>403</td></tr> <tr><th>MESSAGE:</th><td>Unauthorized
> request, Response code: 403</td></tr>
> <tr><th>SERVLET:</th><td>default</td></tr> </table> </body> </html> {noformat}
>
> {{ranger-solr}} pod logs following error, indicating Ranger plugin
> initialization was not successful:
> {noformat}
> 2026-06-15 23:17:23.874 ERROR (qtp746115872-17) [c: s: r: x:ranger_audits
> t:null-6] o.a.r.a.s.a.RangerSolrAuthorizer Cannot invoke
> "org.apache.ranger.plugin.service.RangerBasePlugin.getConfig()" because
> "org.apache.ranger.authorization.solr.authorizer.RangerSolrAuthorizer.solrPlugin"
> is null => java.lang.NullPointerException: Cannot invoke
> "org.apache.ranger.plugin.service.RangerBasePlugin.getConfig()" because
> "org.apache.ranger.authorization.solr.authorizer.RangerSolrAuthorizer.solrPlugin"
> is null
> at
> org.apache.ranger.authorization.solr.authorizer.RangerSolrAuthorizer.authorize(RangerSolrAuthorizer.java:136)
> java.lang.NullPointerException: Cannot invoke
> "org.apache.ranger.plugin.service.RangerBasePlugin.getConfig()" because
> "org.apache.ranger.authorization.solr.authorizer.RangerSolrAuthorizer.solrPlugin"
> is null
> at
> org.apache.ranger.authorization.solr.authorizer.RangerSolrAuthorizer.authorize(RangerSolrAuthorizer.java:136)
> ~[ranger-solr-plugin-shim-3.0.0-SNAPSHOT.jar:3.0.0-SNAPSHOT]
> at
> org.apache.ranger.authorization.solr.authorizer.RangerSolrAuthorizer.authorize(RangerSolrAuthorizer.java:73)
> ~[ranger-solr-plugin-shim-3.0.0-SNAPSHOT.jar:3.0.0-SNAPSHOT]
> at
> org.apache.solr.security.AuthorizationUtils.authorize(AuthorizationUtils.java:75)
> ~[solr-core-9.4.1.jar:9.4.1 57762a5b52a9d40a6f15441c4adeb76f0b045476 -
> dsmiley - 2024-01-13 00:49:10]
> at org.apache.solr.servlet.HttpSolrCall.call(HttpSolrCall.java:528)
> ~[solr-core-9.4.1.jar:9.4.1 57762a5b52a9d40a6f15441c4adeb76f0b045476 -
> dsmiley - 2024-01-13 00:49:10]
> at
> org.apache.solr.servlet.SolrDispatchFilter.dispatch(SolrDispatchFilter.java:262)
> ~[solr-core-9.4.1.jar:9.4.1 57762a5b52a9d40a6f15441c4adeb76f0b045476 -
> dsmiley - 2024-01-13 00:49:10]
> at
> org.apache.solr.servlet.SolrDispatchFilter.lambda$doFilter$0(SolrDispatchFilter.java:219)
> ~[solr-core-9.4.1.jar:9.4.1 57762a5b52a9d40a6f15441c4adeb76f0b045476 -
> dsmiley - 2024-01-13 00:49:10]
> at
> org.apache.solr.servlet.ServletUtils.traceHttpRequestExecution2(ServletUtils.java:246)
> ~[solr-core-9.4.1.jar:9.4.1 57762a5b52a9d40a6f15441c4adeb76f0b045476 -
> dsmiley - 2024-01-13 00:49:10]
> at
> org.apache.solr.servlet.ServletUtils.rateLimitRequest(ServletUtils.java:215)
> ~[solr-core-9.4.1.jar:9.4.1 57762a5b52a9d40a6f15441c4adeb76f0b045476 -
> dsmiley - 2024-01-13 00:49:10]
> at
> org.apache.solr.servlet.SolrDispatchFilter.doFilter(SolrDispatchFilter.java:213)
> ~[solr-core-9.4.1.jar:9.4.1 57762a5b52a9d40a6f15441c4adeb76f0b045476 -
> dsmiley - 2024-01-13 00:49:10]
> at
> org.apache.solr.servlet.SolrDispatchFilter.doFilter(SolrDispatchFilter.java:195)
> ~[solr-core-9.4.1.jar:9.4.1 57762a5b52a9d40a6f15441c4adeb76f0b045476 -
> dsmiley - 2024-01-13 00:49:10]
> at
> org.eclipse.jetty.servlet.FilterHolder.doFilter(FilterHolder.java:210)
> ~[jetty-servlet-10.0.19.jar:10.0.19]
> at
> org.eclipse.jetty.servlet.ServletHandler$Chain.doFilter(ServletHandler.java:1635)
> ~[jetty-servlet-10.0.19.jar:10.0.19]
> at
> org.eclipse.jetty.servlet.ServletHandler.doHandle(ServletHandler.java:527)
> ~[jetty-servlet-10.0.19.jar:10.0.19]
> at
> org.eclipse.jetty.server.handler.ScopedHandler.handle(ScopedHandler.java:131)
> ~[jetty-server-10.0.19.jar:10.0.19]
> at
> org.eclipse.jetty.security.SecurityHandler.handle(SecurityHandler.java:598)
> ~[jetty-security-10.0.19.jar:10.0.19]
> at
> org.eclipse.jetty.server.handler.HandlerWrapper.handle(HandlerWrapper.java:122)
> ~[jetty-server-10.0.19.jar:10.0.19]
> at
> org.eclipse.jetty.server.handler.ScopedHandler.nextHandle(ScopedHandler.java:223)
> ~[jetty-server-10.0.19.jar:10.0.19]
> at
> org.eclipse.jetty.server.session.SessionHandler.doHandle(SessionHandler.java:1580)
> ~[jetty-server-10.0.19.jar:10.0.19]
> at
> org.eclipse.jetty.server.handler.ScopedHandler.nextHandle(ScopedHandler.java:221)
> ~[jetty-server-10.0.19.jar:10.0.19]
> at
> org.eclipse.jetty.server.handler.ContextHandler.doHandle(ContextHandler.java:1384)
> ~[jetty-server-10.0.19.jar:10.0.19]
> at
> org.eclipse.jetty.server.handler.ScopedHandler.nextScope(ScopedHandler.java:176)
> ~[jetty-server-10.0.19.jar:10.0.19]
> at
> org.eclipse.jetty.servlet.ServletHandler.doScope(ServletHandler.java:484)
> ~[jetty-servlet-10.0.19.jar:10.0.19]
> at
> org.eclipse.jetty.server.session.SessionHandler.doScope(SessionHandler.java:1553)
> ~[jetty-server-10.0.19.jar:10.0.19]
> at
> org.eclipse.jetty.server.handler.ScopedHandler.nextScope(ScopedHandler.java:174)
> ~[jetty-server-10.0.19.jar:10.0.19]
> at
> org.eclipse.jetty.server.handler.ContextHandler.doScope(ContextHandler.java:1306)
> ~[jetty-server-10.0.19.jar:10.0.19]
> at
> org.eclipse.jetty.server.handler.ScopedHandler.handle(ScopedHandler.java:129)
> ~[jetty-server-10.0.19.jar:10.0.19]
> at
> org.eclipse.jetty.server.handler.ContextHandlerCollection.handle(ContextHandlerCollection.java:149)
> ~[jetty-server-10.0.19.jar:10.0.19]
> at
> org.eclipse.jetty.server.handler.InetAccessHandler.handle(InetAccessHandler.java:228)
> ~[jetty-server-10.0.19.jar:10.0.19]
> at
> org.eclipse.jetty.server.handler.HandlerCollection.handle(HandlerCollection.java:141)
> ~[jetty-server-10.0.19.jar:10.0.19]
> at
> org.eclipse.jetty.server.handler.HandlerWrapper.handle(HandlerWrapper.java:122)
> ~[jetty-server-10.0.19.jar:10.0.19]
> at
> org.eclipse.jetty.rewrite.handler.RewriteHandler.handle(RewriteHandler.java:301)
> ~[jetty-rewrite-10.0.19.jar:10.0.19]
> at
> org.eclipse.jetty.server.handler.HandlerWrapper.handle(HandlerWrapper.java:122)
> ~[jetty-server-10.0.19.jar:10.0.19]
> at
> org.eclipse.jetty.server.handler.gzip.GzipHandler.handle(GzipHandler.java:822)
> ~[jetty-server-10.0.19.jar:10.0.19]
> at
> org.eclipse.jetty.server.handler.HandlerWrapper.handle(HandlerWrapper.java:122)
> ~[jetty-server-10.0.19.jar:10.0.19]
> at org.eclipse.jetty.server.Server.handle(Server.java:563)
> ~[jetty-server-10.0.19.jar:10.0.19]
> at
> org.eclipse.jetty.server.HttpChannel$RequestDispatchable.dispatch(HttpChannel.java:1598)
> ~[jetty-server-10.0.19.jar:10.0.19]
> at org.eclipse.jetty.server.HttpChannel.dispatch(HttpChannel.java:753)
> ~[jetty-server-10.0.19.jar:10.0.19]
> at org.eclipse.jetty.server.HttpChannel.handle(HttpChannel.java:501)
> ~[jetty-server-10.0.19.jar:10.0.19]
> at
> org.eclipse.jetty.server.HttpConnection.onFillable(HttpConnection.java:287)
> ~[jetty-server-10.0.19.jar:10.0.19]
> at
> org.eclipse.jetty.io.AbstractConnection$ReadCallback.succeeded(AbstractConnection.java:314)
> ~[jetty-io-10.0.19.jar:10.0.19]
> at org.eclipse.jetty.io.FillInterest.fillable(FillInterest.java:100)
> ~[jetty-io-10.0.19.jar:10.0.19]
> at
> org.eclipse.jetty.io.SelectableChannelEndPoint$1.run(SelectableChannelEndPoint.java:53)
> ~[jetty-io-10.0.19.jar:10.0.19]
> at
> org.eclipse.jetty.util.thread.strategy.AdaptiveExecutionStrategy.runTask(AdaptiveExecutionStrategy.java:421)
> ~[jetty-util-10.0.19.jar:10.0.19]
> at
> org.eclipse.jetty.util.thread.strategy.AdaptiveExecutionStrategy.consumeTask(AdaptiveExecutionStrategy.java:390)
> ~[jetty-util-10.0.19.jar:10.0.19]
> at
> org.eclipse.jetty.util.thread.strategy.AdaptiveExecutionStrategy.tryProduce(AdaptiveExecutionStrategy.java:277)
> ~[jetty-util-10.0.19.jar:10.0.19]
> at
> org.eclipse.jetty.util.thread.strategy.AdaptiveExecutionStrategy.produce(AdaptiveExecutionStrategy.java:193)
> ~[jetty-util-10.0.19.jar:10.0.19]
> at
> org.eclipse.jetty.util.thread.QueuedThreadPool.runJob(QueuedThreadPool.java:969)
> ~[jetty-util-10.0.19.jar:10.0.19]
> at
> org.eclipse.jetty.util.thread.QueuedThreadPool$Runner.doRunJob(QueuedThreadPool.java:1194)
> ~[jetty-util-10.0.19.jar:10.0.19]
> at
> org.eclipse.jetty.util.thread.QueuedThreadPool$Runner.run(QueuedThreadPool.java:1149)
> ~[jetty-util-10.0.19.jar:10.0.19]
> at java.base/java.lang.Thread.run(Unknown Source) [?:?]
> {noformat}
>
> Earlier logs show failure in plugin initialization:
> {noformat}
> 2026-06-15 23:03:18.169 ERROR (main) [c: s: r: x: t:]
> o.a.r.a.s.a.RangerSolrAuthorizer Error creating and initializing
> RangerBasePlugin() => java.lang.RuntimeException:
> org.apache.hadoop.security.KerberosAuthException: failure to login: for
> principal: solr/[email protected] from keytab
> /etc/keytabs/solr.keytab javax.security.auth.login.LoginException
> at
> org.apache.ranger.plugin.service.RangerBasePlugin.<init>(RangerBasePlugin.java:185)
> java.lang.RuntimeException: org.apache.hadoop.security.KerberosAuthException:
> failure to login: for principal: solr/[email protected] from
> keytab /etc/keytabs/solr.keytab javax.security.auth.login.LoginException
> at
> org.apache.ranger.plugin.service.RangerBasePlugin.<init>(RangerBasePlugin.java:185)
> ~[?:?]
> at
> org.apache.ranger.plugin.service.RangerBasePlugin.<init>(RangerBasePlugin.java:113)
> ~[?:?]
> at
> org.apache.ranger.authorization.solr.authorizer.RangerSolrAuthorizer.init(RangerSolrAuthorizer.java:326)
> ~[ranger-solr-plugin-shim-3.0.0-SNAPSHOT.jar:3.0.0-SNAPSHOT]
> at
> org.apache.ranger.authorization.solr.authorizer.RangerSolrAuthorizer.init(RangerSolrAuthorizer.java:80)
> ~[ranger-solr-plugin-shim-3.0.0-SNAPSHOT.jar:3.0.0-SNAPSHOT]
> at
> org.apache.solr.core.CoreContainer.initializeAuthorizationPlugin(CoreContainer.java:472)
> ~[solr-core-9.4.1.jar:9.4.1 57762a5b52a9d40a6f15441c4adeb76f0b045476 -
> dsmiley - 2024-01-13 00:49:10]
> at
> org.apache.solr.core.CoreContainer.reloadSecurityProperties(CoreContainer.java:1186)
> ~[solr-core-9.4.1.jar:9.4.1 57762a5b52a9d40a6f15441c4adeb76f0b045476 -
> dsmiley - 2024-01-13 00:49:10]
> at
> org.apache.solr.core.CoreContainer.loadInternal(CoreContainer.java:857)
> ~[solr-core-9.4.1.jar:9.4.1 57762a5b52a9d40a6f15441c4adeb76f0b045476 -
> dsmiley - 2024-01-13 00:49:10]
> at org.apache.solr.core.CoreContainer.load(CoreContainer.java:765)
> ~[solr-core-9.4.1.jar:9.4.1 57762a5b52a9d40a6f15441c4adeb76f0b045476 -
> dsmiley - 2024-01-13 00:49:10]
> at
> org.apache.solr.servlet.CoreContainerProvider.createCoreContainer(CoreContainerProvider.java:427)
> ~[solr-core-9.4.1.jar:9.4.1 57762a5b52a9d40a6f15441c4adeb76f0b045476 -
> dsmiley - 2024-01-13 00:49:10]
> at
> org.apache.solr.servlet.CoreContainerProvider.init(CoreContainerProvider.java:246)
> ~[solr-core-9.4.1.jar:9.4.1 57762a5b52a9d40a6f15441c4adeb76f0b045476 -
> dsmiley - 2024-01-13 00:49:10]
> at
> org.apache.solr.servlet.CoreContainerProvider.contextInitialized(CoreContainerProvider.java:116)
> ~[solr-core-9.4.1.jar:9.4.1 57762a5b52a9d40a6f15441c4adeb76f0b045476 -
> dsmiley - 2024-01-13 00:49:10]
> at
> org.eclipse.jetty.server.handler.ContextHandler.callContextInitialized(ContextHandler.java:1049)
> ~[jetty-server-10.0.19.jar:10.0.19]
> at
> org.eclipse.jetty.servlet.ServletContextHandler.callContextInitialized(ServletContextHandler.java:624)
> ~[jetty-servlet-10.0.19.jar:10.0.19]
> at
> org.eclipse.jetty.server.handler.ContextHandler.contextInitialized(ContextHandler.java:984)
> ~[jetty-server-10.0.19.jar:10.0.19]
> at
> org.eclipse.jetty.servlet.ServletHandler.initialize(ServletHandler.java:740)
> ~[jetty-servlet-10.0.19.jar:10.0.19]
> at
> org.eclipse.jetty.servlet.ServletContextHandler.startContext(ServletContextHandler.java:392)
> ~[jetty-servlet-10.0.19.jar:10.0.19]
> at
> org.eclipse.jetty.webapp.WebAppContext.startContext(WebAppContext.java:1304)
> ~[jetty-webapp-10.0.19.jar:10.0.19]
> at
> org.eclipse.jetty.server.handler.ContextHandler.doStart(ContextHandler.java:901)
> ~[jetty-server-10.0.19.jar:10.0.19]
> at
> org.eclipse.jetty.servlet.ServletContextHandler.doStart(ServletContextHandler.java:306)
> ~[jetty-servlet-10.0.19.jar:10.0.19]
> at
> org.eclipse.jetty.webapp.WebAppContext.doStart(WebAppContext.java:532)
> ~[jetty-webapp-10.0.19.jar:10.0.19]
> at
> org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:93)
> ~[jetty-util-10.0.19.jar:10.0.19]
> at
> org.eclipse.jetty.util.component.ContainerLifeCycle.start(ContainerLifeCycle.java:171)
> ~[jetty-util-10.0.19.jar:10.0.19]
> at
> org.eclipse.jetty.util.component.ContainerLifeCycle.doStart(ContainerLifeCycle.java:121)
> ~[jetty-util-10.0.19.jar:10.0.19]
> at
> org.eclipse.jetty.server.handler.AbstractHandler.doStart(AbstractHandler.java:89)
> ~[jetty-server-10.0.19.jar:10.0.19]
> at
> org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:93)
> ~[jetty-util-10.0.19.jar:10.0.19]
> at
> org.eclipse.jetty.util.component.ContainerLifeCycle.start(ContainerLifeCycle.java:171)
> ~[jetty-util-10.0.19.jar:10.0.19]
> at
> org.eclipse.jetty.util.component.ContainerLifeCycle.doStart(ContainerLifeCycle.java:114)
> ~[jetty-util-10.0.19.jar:10.0.19]
> at
> org.eclipse.jetty.server.handler.AbstractHandler.doStart(AbstractHandler.java:89)
> ~[jetty-server-10.0.19.jar:10.0.19]
> at
> org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:93)
> ~[jetty-util-10.0.19.jar:10.0.19]
> at
> org.eclipse.jetty.util.component.ContainerLifeCycle.start(ContainerLifeCycle.java:171)
> ~[jetty-util-10.0.19.jar:10.0.19]
> at
> org.eclipse.jetty.util.component.ContainerLifeCycle.doStart(ContainerLifeCycle.java:121)
> ~[jetty-util-10.0.19.jar:10.0.19]
> at
> org.eclipse.jetty.server.handler.AbstractHandler.doStart(AbstractHandler.java:89)
> ~[jetty-server-10.0.19.jar:10.0.19]
> at
> org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:93)
> ~[jetty-util-10.0.19.jar:10.0.19]
> at
> org.eclipse.jetty.util.component.ContainerLifeCycle.start(ContainerLifeCycle.java:171)
> ~[jetty-util-10.0.19.jar:10.0.19]
> at
> org.eclipse.jetty.util.component.ContainerLifeCycle.doStart(ContainerLifeCycle.java:114)
> ~[jetty-util-10.0.19.jar:10.0.19]
> at
> org.eclipse.jetty.server.handler.AbstractHandler.doStart(AbstractHandler.java:89)
> ~[jetty-server-10.0.19.jar:10.0.19]
> at
> org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:93)
> ~[jetty-util-10.0.19.jar:10.0.19]
> at
> org.eclipse.jetty.util.component.ContainerLifeCycle.start(ContainerLifeCycle.java:171)
> ~[jetty-util-10.0.19.jar:10.0.19]
> at
> org.eclipse.jetty.util.component.ContainerLifeCycle.doStart(ContainerLifeCycle.java:114)
> ~[jetty-util-10.0.19.jar:10.0.19]
> at
> org.eclipse.jetty.server.handler.AbstractHandler.doStart(AbstractHandler.java:89)
> ~[jetty-server-10.0.19.jar:10.0.19]
> at
> org.eclipse.jetty.server.handler.gzip.GzipHandler.doStart(GzipHandler.java:221)
> ~[jetty-server-10.0.19.jar:10.0.19]
> at
> org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:93)
> ~[jetty-util-10.0.19.jar:10.0.19]
> at
> org.eclipse.jetty.util.component.ContainerLifeCycle.start(ContainerLifeCycle.java:171)
> ~[jetty-util-10.0.19.jar:10.0.19]
> at org.eclipse.jetty.server.Server.start(Server.java:470)
> ~[jetty-server-10.0.19.jar:10.0.19]
> at
> org.eclipse.jetty.util.component.ContainerLifeCycle.doStart(ContainerLifeCycle.java:114)
> ~[jetty-util-10.0.19.jar:10.0.19]
> at
> org.eclipse.jetty.server.handler.AbstractHandler.doStart(AbstractHandler.java:89)
> ~[jetty-server-10.0.19.jar:10.0.19]
> at org.eclipse.jetty.server.Server.doStart(Server.java:415)
> ~[jetty-server-10.0.19.jar:10.0.19]
> at
> org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:93)
> ~[jetty-util-10.0.19.jar:10.0.19]
> at
> org.eclipse.jetty.xml.XmlConfiguration.main(XmlConfiguration.java:1919)
> ~[jetty-xml-10.0.19.jar:10.0.19]
> at
> java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke0(Native
> Method) ~[?:?]
> at
> java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke(Unknown
> Source) ~[?:?]
> at
> java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(Unknown
> Source) ~[?:?]
> at java.base/java.lang.reflect.Method.invoke(Unknown Source) ~[?:?]
> at org.eclipse.jetty.start.Main.invokeMain(Main.java:229)
> ~[start.jar:10.0.19]
> at org.eclipse.jetty.start.Main.start(Main.java:528)
> ~[start.jar:10.0.19]
> at org.eclipse.jetty.start.Main.main(Main.java:76) ~[start.jar:10.0.19]
> Caused by: org.apache.hadoop.security.KerberosAuthException: failure to
> login: for principal: solr/[email protected] from keytab
> /etc/keytabs/solr.keytab javax.security.auth.login.LoginException
> at
> org.apache.hadoop.security.UserGroupInformation.doSubjectLogin(UserGroupInformation.java:2070)
> ~[hadoop-common-3.3.5.jar:?]
> at
> org.apache.hadoop.security.UserGroupInformation.loginUserFromKeytabAndReturnUGI(UserGroupInformation.java:1398)
> ~[hadoop-common-3.3.5.jar:?]
> at
> org.apache.hadoop.security.UserGroupInformation.loginUserFromKeytab(UserGroupInformation.java:1136)
> ~[hadoop-common-3.3.5.jar:?]
> at
> org.apache.ranger.audit.provider.MiscUtil.setUGIFromJAASConfig(MiscUtil.java:694)
> ~[?:?]
> at
> org.apache.ranger.plugin.service.RangerBasePlugin.<init>(RangerBasePlugin.java:181)
> ~[?:?]
> ... 55 more
> Caused by: javax.security.auth.login.LoginException
> at
> [email protected]/com.sun.security.auth.module.Krb5LoginModule.attemptAuthentication(Unknown
> Source) ~[jdk.security.auth:?]
> at
> [email protected]/com.sun.security.auth.module.Krb5LoginModule.login(Unknown
> Source) ~[jdk.security.auth:?]
> at java.base/javax.security.auth.login.LoginContext.invoke(Unknown
> Source) ~[?:?]
> at java.base/javax.security.auth.login.LoginContext$4.run(Unknown
> Source) ~[?:?]
> at java.base/javax.security.auth.login.LoginContext$4.run(Unknown
> Source) ~[?:?]
> at java.base/java.security.AccessController.doPrivileged(Unknown
> Source) ~[?:?]
> at java.base/javax.security.auth.login.LoginContext.invokePriv(Unknown
> Source) ~[?:?]
> at java.base/javax.security.auth.login.LoginContext.login(Unknown
> Source) ~[?:?]
> at
> org.apache.hadoop.security.UserGroupInformation$HadoopLoginContext.login(UserGroupInformation.java:2154)
> ~[hadoop-common-3.3.5.jar:?]
> at
> org.apache.hadoop.security.UserGroupInformation.doSubjectLogin(UserGroupInformation.java:2053)
> ~[hadoop-common-3.3.5.jar:?]
> at
> org.apache.hadoop.security.UserGroupInformation.loginUserFromKeytabAndReturnUGI(UserGroupInformation.java:1398)
> ~[hadoop-common-3.3.5.jar:?]
> at
> org.apache.hadoop.security.UserGroupInformation.loginUserFromKeytab(UserGroupInformation.java:1136)
> ~[hadoop-common-3.3.5.jar:?]
> at
> org.apache.ranger.audit.provider.MiscUtil.setUGIFromJAASConfig(MiscUtil.java:694)
> ~[?:?]
> at
> org.apache.ranger.plugin.service.RangerBasePlugin.<init>(RangerBasePlugin.java:181)
> ~[?:?]
> ... 55 more
> Caused by: java.net.PortUnreachableException
> at java.base/sun.nio.ch.DatagramChannelImpl.receive0(Native Method)
> ~[?:?]
> at
> java.base/sun.nio.ch.DatagramChannelImpl.receiveIntoNativeBuffer(Unknown
> Source) ~[?:?]
> at java.base/sun.nio.ch.DatagramChannelImpl.receive(Unknown Source)
> ~[?:?]
> at
> java.base/sun.nio.ch.DatagramChannelImpl.trustedBlockingReceive(Unknown
> Source) ~[?:?]
> at java.base/sun.nio.ch.DatagramChannelImpl.blockingReceive(Unknown
> Source) ~[?:?]
> at java.base/sun.nio.ch.DatagramSocketAdaptor.receive(Unknown Source)
> ~[?:?]
> at java.base/java.net.DatagramSocket.receive(Unknown Source) ~[?:?]
> at
> java.security.jgss/sun.security.krb5.internal.UDPClient.receive(Unknown
> Source) ~[java.security.jgss:?]
> at
> java.security.jgss/sun.security.krb5.KdcComm$KdcCommunication.run(Unknown
> Source) ~[java.security.jgss:?]
> at
> java.security.jgss/sun.security.krb5.KdcComm$KdcCommunication.run(Unknown
> Source) ~[java.security.jgss:?]
> at java.base/java.security.AccessController.doPrivileged(Unknown
> Source) ~[?:?]
> at java.security.jgss/sun.security.krb5.KdcComm.send(Unknown Source)
> ~[java.security.jgss:?]
> at java.security.jgss/sun.security.krb5.KdcComm.sendIfPossible(Unknown
> Source) ~[java.security.jgss:?]
> at java.security.jgss/sun.security.krb5.KdcComm.send(Unknown Source)
> ~[java.security.jgss:?]
> at java.security.jgss/sun.security.krb5.KdcComm.send(Unknown Source)
> ~[java.security.jgss:?]
> at java.security.jgss/sun.security.krb5.KrbAsReqBuilder.send(Unknown
> Source) ~[java.security.jgss:?]
> at java.security.jgss/sun.security.krb5.KrbAsReqBuilder.action(Unknown
> Source) ~[java.security.jgss:?]
> at
> [email protected]/com.sun.security.auth.module.Krb5LoginModule.attemptAuthentication(Unknown
> Source) ~[jdk.security.auth:?]
> at
> [email protected]/com.sun.security.auth.module.Krb5LoginModule.login(Unknown
> Source) ~[jdk.security.auth:?]
> at java.base/javax.security.auth.login.LoginContext.invoke(Unknown
> Source) ~[?:?]
> at java.base/javax.security.auth.login.LoginContext$4.run(Unknown
> Source) ~[?:?]
> at java.base/javax.security.auth.login.LoginContext$4.run(Unknown
> Source) ~[?:?]
> at java.base/java.security.AccessController.doPrivileged(Unknown
> Source) ~[?:?]
> at java.base/javax.security.auth.login.LoginContext.invokePriv(Unknown
> Source) ~[?:?]
> at java.base/javax.security.auth.login.LoginContext.login(Unknown
> Source) ~[?:?]
> at
> org.apache.hadoop.security.UserGroupInformation$HadoopLoginContext.login(UserGroupInformation.java:2154)
> ~[hadoop-common-3.3.5.jar:?]
> at
> org.apache.hadoop.security.UserGroupInformation.doSubjectLogin(UserGroupInformation.java:2053)
> ~[hadoop-common-3.3.5.jar:?]
> at
> org.apache.hadoop.security.UserGroupInformation.loginUserFromKeytabAndReturnUGI(UserGroupInformation.java:1398)
> ~[hadoop-common-3.3.5.jar:?]
> at
> org.apache.hadoop.security.UserGroupInformation.loginUserFromKeytab(UserGroupInformation.java:1136)
> ~[hadoop-common-3.3.5.jar:?]
> at
> org.apache.ranger.audit.provider.MiscUtil.setUGIFromJAASConfig(MiscUtil.java:694)
> ~[?:?]
> at
> org.apache.ranger.plugin.service.RangerBasePlugin.<init>(RangerBasePlugin.java:181)
> ~[?:?]
> ... 55 more
> {noformat}
> This issue is not seen after a restart of {{ranger-solr}} pod. Ranger plugin
> should be resilient to initialization failures.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
