Hi
One method to debug it is:
1. get the TGT using kinit
2. use curl --negotiate ...
http://192.168.23.208:6080/service/xusers/groups/?pageSize=1000&startIndex=0
If it works then you can test POST.
<http://192.168.23.208:6080/service/xusers/groups/?pageSize=1000&startIndex=0>
Margus (margusja) Roo
http://margus.roo.ee
skype: margusja
+372 51 48 780
On 18/08/16 12:21, Aneela Saleem wrote:
Hi,
I am trying to setup ranger in kerberized environment, I have setup
ranger-admin and now trying to sync users. When i start usersync
service, Following exception is raised.
INFO PolicyMgrUserGroupBuilder [UnixUserSyncThread] - Using principal
= rangerusersync/hbase-master@PLATALYTICS and keytab =
/etc/security/keytabs/rangerusersync.keytab
18 Aug 2016 14:15:15 ERROR PolicyMgrUserGroupBuilder
[UnixUserSyncThread] - Failed to build Group List :
com.sun.jersey.api.client.UniformInterfaceException: GET
http://192.168.23.208:6080/service/xusers/groups/?pageSize=1000&startIndex=0
returned a response status of 401 Unauthorized
Then it fetches users from ldap and follwed by this exception
ERROR PolicyMgrUserGroupBuilder [UnixUserSyncThread] - Failed to add
User :
com.sun.jersey.api.client.UniformInterfaceException: POST
http://192.168.23.208:6080/service/users/default returned a response
status of 401 Unauthorized
at
com.sun.jersey.api.client.WebResource.handle(WebResource.java:686)
at
com.sun.jersey.api.client.WebResource.access$200(WebResource.java:74)
at
com.sun.jersey.api.client.WebResource$Builder.post(WebResource.java:568)
at
org.apache.ranger.unixusersync.process.PolicyMgrUserGroupBuilder.getMUser(PolicyMgrUserGroupBuilder.java:838)
at
org.apache.ranger.unixusersync.process.PolicyMgrUserGroupBuilder.access$800(PolicyMgrUserGroupBuilder.java:72)
at
org.apache.ranger.unixusersync.process.PolicyMgrUserGroupBuilder$5.run(PolicyMgrUserGroupBuilder.java:811)
at
org.apache.ranger.unixusersync.process.PolicyMgrUserGroupBuilder$5.run(PolicyMgrUserGroupBuilder.java:807)
at java.security.AccessController.doPrivileged(Native Method)
at javax.security.auth.Subject.doAs(Subject.java:356)
at
org.apache.ranger.unixusersync.process.PolicyMgrUserGroupBuilder.addMUser(PolicyMgrUserGroupBuilder.java:807)
at
org.apache.ranger.unixusersync.process.PolicyMgrUserGroupBuilder.addOrUpdateUser(PolicyMgrUserGroupBuilder.java:335)
at
org.apache.ranger.ldapusersync.process.LdapUserGroupBuilder.updateSink(LdapUserGroupBuilder.java:327)
at
org.apache.ranger.usergroupsync.UserGroupSync.run(UserGroupSync.java:58)
at java.lang.Thread.run(Thread.java:745)
Any suggestion?
Thanks
