hi Madhan! I have compiled ranger master branch code. Both the hbase and hbase-admin have same versions. I have hbase version 1.1.2.
Thanks On Sat, Dec 5, 2015 at 9:20 PM, Madhan Neethiraj <[email protected]> wrote: > Aneela, > > It looks like the Ranger HBase plugin used in this environment is from an > earlier version than the Ranger Admin. Can you please send the version > details to troubleshoot this further? > > While we look at fixing the issue in the code, you should be able to > continue by using Ranger HBase plugin from the same version as Ranger Admin. > > Thanks, > Madhan > > From: Aneela Saleem <[email protected]> > Reply-To: "[email protected]" < > [email protected]> > Date: Saturday, December 5, 2015 at 7:43 AM > To: "[email protected]" <[email protected]> > Subject: Hbase policy issue > > Hi! > > I have made a policy on hbase table *emp *with column family *f1 * and > column *name.* > I gave mike user the permission of read and roger have all permissions. > > But when i scan table using user mike or roger even. It does not allow > *ERROR: org.apache.hadoop.hbase.security.AccessDeniedException: > Insufficient permissions for user ‘roger',action: scannerOpen, > tableName:emp, family:f1* > > No audits are being shown and hbase logs have following exception > > 2015-12-05 20:42:32,976 ERROR [Thread-75] util.PolicyRefresher: > PolicyRefresher(serviceName=hbasedev): failed to refresh policies. Will > continue to use last known version of policies (-1) > com.sun.jersey.api.client.ClientHandlerException: > org.codehaus.jackson.map.exc.UnrecognizedPropertyException: Unrecognized > field "isEnabled" (Class > org.apache.ranger.plugin.model.RangerPolicy$RangerPolicyItem), not marked > as ignorable > at [Source: > sun.net.www.protocol.http.HttpURLConnection$HttpInputStream@28826668; > line: 1, column: 938] (through reference chain: > org.apache.ranger.plugin.util.ServicePolicies["policies"]->org.apache.ranger.plugin.model.RangerPolicy["policyItems"]->org.apache.ranger.plugin.model.RangerPolicyItem["isEnabled"]) > at > com.sun.jersey.api.client.ClientResponse.getEntity(ClientResponse.java:563) > at > com.sun.jersey.api.client.ClientResponse.getEntity(ClientResponse.java:506) > at > org.apache.ranger.admin.client.RangerAdminRESTClient.getServicePoliciesIfUpdated(RangerAdminRESTClient.java:76) > at > org.apache.ranger.plugin.util.PolicyRefresher.loadPolicyfromPolicyAdmin(PolicyRefresher.java:205) > at > org.apache.ranger.plugin.util.PolicyRefresher.loadPolicy(PolicyRefresher.java:175) > at > org.apache.ranger.plugin.util.PolicyRefresher.run(PolicyRefresher.java:154) > Caused by: org.codehaus.jackson.map.exc.UnrecognizedPropertyException: > Unrecognized field "isEnabled" (Class > org.apache.ranger.plugin.model.RangerPolicy$RangerPolicyItem), not marked > as ignorable > at [Source: > sun.net.www.protocol.http.HttpURLConnection$HttpInputStream@28826668; > line: 1, column: 938] (through reference chain: > org.apache.ranger.plugin.util.ServicePolicies["policies"]->org.apache.ranger.plugin.model.RangerPolicy["policyItems"]->org.apache.ranger.plugin.model.RangerPolicyItem["isEnabled"]) > at > org.codehaus.jackson.map.exc.UnrecognizedPropertyException.from(UnrecognizedPropertyException.java:53) > at > org.codehaus.jackson.map.deser.StdDeserializationContext.unknownFieldException(StdDeserializationContext.java:267) > at > org.codehaus.jackson.map.deser.std.StdDeserializer.reportUnknownProperty(StdDeserializer.java:673) > at > org.codehaus.jackson.map.deser.std.StdDeserializer.handleUnknownProperty(StdDeserializer.java:659) > at > org.codehaus.jackson.map.deser.BeanDeserializer.handleUnknownProperty(BeanDeserializer.java:1365) > at > org.codehaus.jackson.map.deser.BeanDeserializer._handleUnknown(BeanDeserializer.java:725) > at > org.codehaus.jackson.map.deser.BeanDeserializer.deserializeFromObject(BeanDeserializer.java:703) > at > org.codehaus.jackson.map.deser.BeanDeserializer.deserialize(BeanDeserializer.java:580) > at > org.codehaus.jackson.map.deser.std.CollectionDeserializer.deserialize(CollectionDeserializer.java:217) > at > org.codehaus.jackson.map.deser.std.CollectionDeserializer.deserialize(CollectionDeserializer.java:194) > at > org.codehaus.jackson.map.deser.std.CollectionDeserializer.deserialize(CollectionDeserializer.java:30) > at > org.codehaus.jackson.map.deser.SettableBeanProperty.deserialize(SettableBeanProperty.java:299) > at > org.codehaus.jackson.map.deser.SettableBeanProperty$FieldProperty.deserializeAndSet(SettableBeanProperty.java:579) > at > org.codehaus.jackson.map.deser.BeanDeserializer.deserializeFromObject(BeanDeserializer.java:697) > at > org.codehaus.jackson.map.deser.BeanDeserializer.deserialize(BeanDeserializer.java:580) > at > org.codehaus.jackson.map.deser.std.CollectionDeserializer.deserialize(CollectionDeserializer.java:217) > at > org.codehaus.jackson.map.deser.std.CollectionDeserializer.deserialize(CollectionDeserializer.java:194) > at > org.codehaus.jackson.map.deser.std.CollectionDeserializer.deserialize(CollectionDeserializer.java:30) > at > org.codehaus.jackson.map.deser.SettableBeanProperty.deserialize(SettableBeanProperty.java:299) > at > org.codehaus.jackson.map.deser.SettableBeanProperty$FieldProperty.deserializeAndSet(SettableBeanProperty.java:579) > at > org.codehaus.jackson.map.deser.BeanDeserializer.deserializeFromObject(BeanDeserializer.java:697) > at > org.codehaus.jackson.map.deser.BeanDeserializer.deserialize(BeanDeserializer.java:580) > at > org.codehaus.jackson.map.ObjectMapper._readValue(ObjectMapper.java:2704) > at > org.codehaus.jackson.map.ObjectMapper.readValue(ObjectMapper.java:1315) > at > org.codehaus.jackson.jaxrs.JacksonJsonProvider.readFrom(JacksonJsonProvider.java:419) > at > com.sun.jersey.api.client.ClientResponse.getEntity(ClientResponse.java:553) > ... 5 more > 2015-12-05 20:42:32,977 WARN [Thread-75] util.PolicyRefresher: cache file > does not exist or not readble > '/etc/ranger/hbasedev/policycache/hbaseRegional_hbasedev.json' > > > > Thanks > -- Regards: HAFIZ MUJADID
