vikaskr22 opened a new pull request, #1051: URL: https://github.com/apache/ranger/pull/1051
Ranger-KMS APIs (including dev_kms TestConnection) were breaking due to authentication & authorisation error after kerberos implementation in Docker env. This PR contains fix for following: Enabled KMS to run in kerberos: KMS uses kms-site.xml in it's authentication flow, not core-site.xml. So included kms-site.xml with correct config. Updated KDC entrypoint to generate HTTP.keytab for KMS , It is required for SPNEGO. Corrected hadoop_auth_local rule as per kerberos principal Updated dev_kms KMS URL connection Fixed Class loading errors due to duplicate jars being added in ews/lib & WEB-INF/lib After kerberos fix, it was throwing following error: ``` 2026-06-09 07:19:48,155 ERROR [http-nio-9292-exec-9] o.a.c.c.C.[.[.[.[webservices-driver] (DirectJDKLog.java:170) - Servlet.service() for servlet [webservices-driver] in context with path [] threw exception [org.glassfish.jersey.server.ContainerException: java.lang.NoClassDefFoundError: Could not initialize class org.apache.ranger.plugin.util.JsonUtilsV2] with root cause java.lang.ExceptionInInitializerError: Exception java.lang.LinkageError: loader constraint violation: loader 'app' wants to load class com.fasterxml.jackson.databind.ObjectMapper. A different class with the same name was previously loaded by org.apache.catalina.loader.ParallelWebappClassLoader @54336c81. (com.fasterxml.jackson.databind.ObjectMapper is in unnamed module of loader org.apache.catalina.loader.ParallelWebappClassLoader @54336c81, parent loader 'app') [in thread "http-nio-9292-exec-3"] at java.base/java.lang.ClassLoader.defineClass1(Native Method) at java.base/java.lang.ClassLoader.defineClass(ClassLoader.java:1017) ……………………………………… ……………………………………… at org.apache.ranger.plugin.util.JsonUtilsV2.<clinit>(JsonUtilsV2.java:34) at org.apache.hadoop.crypto.key.kms.server.KMSJSONWriter.writeTo(KMSJSONWriter.java:61) at org.glassfish.jersey.message.internal.WriterInterceptorExecutor$TerminalWriterInterceptor.invokeWriteTo(WriterInterceptorExecutor.java:242) at …………….. ………………………….. at org.glassfish.jersey.internal.Errors.process(Errors.java:244) ``` As per my analysis, it happened due to duplicate jackson-*:jar jars available inside distro/kms.xml . Once inside "ews/webapp/WEB-INF/lib/" and once inside "ews/lib". RCA: "[ranger-common-utils](https://issues.apache.org/jira/browse/RANGER-common-utils)" was part of "ews/lib" and Jackson jars were part of both moduleSets. JsonUtilsV2.java tries to load com.fasterxml.jackson.databind.ObjectMapper . It's part of Jackson jars and it was already loaded by another class loader. That is, once it gets loaded by the app loader, then the webapp loader tries to load it again → loader constraint violation → JsonUtilsV2 cannot initialize. Fix: : Removed [ranger-common-utils](https://issues.apache.org/jira/browse/RANGER-common-utils) dependency & Jackson-*.jar from ews/lib and added [ranger-common-utils](https://issues.apache.org/jira/browse/RANGER-common-utils) inside "ews/webapp/WEB-INF/lib/". How was this patch tested? -mvn build is working setup docker env locally, KMS is UP & running. dev_kms Test connection is working now Zone key creation , rollover , delete etc. is working. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
