gowri shankar created RANGER-5240:
-------------------------------------
Summary: After enabling the Ranger Hive plugin, everything works
fine initially. However, after restarting HiveServer2, we are encountering the
following error. Hiveserver is not starting.
Key: RANGER-5240
URL: https://issues.apache.org/jira/browse/RANGER-5240
Project: Ranger
Issue Type: Task
Components: Ranger
Affects Versions: 3.0.0
Environment: hadoop-hive-spark-hudi-tez-rangeradmin-ranger-hiveplugin
Reporter: gowri shankar
hadoop version: 3.4.1
hive-4.0.1
spark-3.4.4
rangeradmin- 3.0.0
ranger-usersync-3.0.0
ranger-hive-plugin - 3.0.0
Issue: After enabling the ranger hive plugin , hiveserver2 not starting .
getting below error
2025-07-07T07:32:59,452 INFO [main] server.HiveServer2: Starting HiveServer2
2025-07-07T07:32:59,539 INFO [main] SessionState: Hive Session ID =
feba569e-a8cf-4ed6-9aa9-f1d24365c571
2025-07-07T07:32:59,564 INFO [main] session.SessionState: Created HDFS
directory: /tmp/hive/hadoop/feba569e-a8cf-4ed6-9aa9-f1d24365c571
2025-07-07T07:32:59,567 INFO [main] session.SessionState: Created local
directory: /tmp/hadoop/feba569e-a8cf-4ed6-9aa9-f1d24365c571
2025-07-07T07:32:59,573 INFO [main] session.SessionState: Created HDFS
directory: /tmp/hive/hadoop/feba569e-a8cf-4ed6-9aa9-f1d24365c571/_tmp_space.db
2025-07-07T07:32:59,574 WARN [main] authorizer.RangerHiveAuthorizerBase:
RangerHiveAuthorizerBase.RangerHiveAuthorizerBase():
hiveAuthenticator.getUserName() returned null/empty
2025-07-07T07:32:59,583 INFO [main] config.RangerPluginConfig:
PolicyEngineOptions: \{ evaluatorType: auto, evaluateDelegateAdminOnly: false,
disableContextEnrichers: false, disableCustomConditions: false,
disableTagPolicyEvaluation: false, disablePolicyRefresher: false,
disableTagRetriever: false, disableUserStoreRetriever: false,
disableGdsInfoRetriever: false, enableTagEnricherWithLocalRefresher: false,
enableUserStoreEnricherWithLocalRefresher: false, disableTrieLookupPrefilter:
false, optimizeTrieForRetrieval: false, cacheAuditResult: false,
disableRoleResolution: true, optimizeTrieForSpace: false,
optimizeTagTrieForRetrieval: false, optimizeTagTrieForSpace: false,
enableResourceMatcherReuse: true }
2025-07-07T07:32:59,583 INFO [main] service.RangerBasePlugin:
ranger.plugin.hive.null_safe.supplier=v2
2025-07-07T07:32:59,585 INFO [main] server.HiveServer2: Shutting down
HiveServer2
2025-07-07T07:32:59,585 INFO [main] server.HiveServer2: Stopping/Disconnecting
tez sessions.
2025-07-07T07:32:59,585 WARN [main] server.HiveServer2: Error starting
HiveServer2 on attempt 2, will retry in 60000ms
java.lang.RuntimeException: Error applying authorization policy on hive
configuration: bound must be positive
at org.apache.hive.service.cli.CLIService.init(CLIService.java:122)
~[hive-service-4.0.1.jar:4.0.1]
at org.apache.hive.service.CompositeService.init(CompositeService.java:59)
~[hive-service-4.0.1.jar:4.0.1]
at org.apache.hive.service.server.HiveServer2.init(HiveServer2.java:241)
~[hive-service-4.0.1.jar:4.0.1]
at
org.apache.hive.service.server.HiveServer2.startHiveServer2(HiveServer2.java:1112)
~[hive-service-4.0.1.jar:4.0.1]
at
org.apache.hive.service.server.HiveServer2.access$1500(HiveServer2.java:144)
~[hive-service-4.0.1.jar:4.0.1]
at
org.apache.hive.service.server.HiveServer2$StartOptionExecutor.execute(HiveServer2.java:1474)
~[hive-service-4.0.1.jar:4.0.1]
at org.apache.hive.service.server.HiveServer2.main(HiveServer2.java:1281)
~[hive-service-4.0.1.jar:4.0.1]
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
~[?:1.8.0_452]
at
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
~[?:1.8.0_452]
at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
~[?:1.8.0_452]
at java.lang.reflect.Method.invoke(Method.java:498) ~[?:1.8.0_452]
at org.apache.hadoop.util.RunJar.run(RunJar.java:330)
~[hadoop-common-3.4.1.jar:?]
at org.apache.hadoop.util.RunJar.main(RunJar.java:245)
~[hadoop-common-3.4.1.jar:?]
Caused by: java.lang.IllegalArgumentException: bound must be positive
at java.util.Random.nextInt(Random.java:388) ~[?:1.8.0_452]
at
org.apache.ranger.plugin.util.RangerRESTClient.<init>(RangerRESTClient.java:113)
~[?:?]
at
org.apache.ranger.admin.client.RangerAdminRESTClient.init(RangerAdminRESTClient.java:1044)
~[?:?]
at
org.apache.ranger.admin.client.RangerAdminRESTClient.init(RangerAdminRESTClient.java:119)
~[?:?]
at
org.apache.ranger.plugin.policyengine.RangerPluginContext.createAdminClient(RangerPluginContext.java:156)
~[?:?]
at
org.apache.ranger.plugin.util.PolicyRefresher.<init>(PolicyRefresher.java:85)
~[?:?]
at
org.apache.ranger.plugin.service.RangerBasePlugin.init(RangerBasePlugin.java:401)
~[?:?]
at
org.apache.ranger.authorization.hive.authorizer.RangerHiveAuthorizer$RangerHivePlugin.init(RangerHiveAuthorizer.java:3391)
~[?:?]
at
org.apache.ranger.authorization.hive.authorizer.RangerHiveAuthorizer.<init>(RangerHiveAuthorizer.java:164)
~[?:?]
at
org.apache.ranger.authorization.hive.authorizer.RangerHiveAuthorizerFactory.createHiveAuthorizer(RangerHiveAuthorizerFactory.java:37)
~[ranger-hive-plugin-shim-3.0.0-SNAPSHOT.jar:3.0.0-SNAPSHOT]
at
org.apache.ranger.authorization.hive.authorizer.RangerHiveAuthorizerFactory.createHiveAuthorizer(RangerHiveAuthorizerFactory.java:78)
~[ranger-hive-plugin-shim-3.0.0-SNAPSHOT.jar:3.0.0-SNAPSHOT]
at
org.apache.hadoop.hive.ql.session.SessionState.setupAuth(SessionState.java:1007)
~[hive-exec-4.0.1.jar:4.0.1]
at
org.apache.hadoop.hive.ql.session.SessionState.applyAuthorizationPolicy(SessionState.java:2058)
~[hive-exec-4.0.1.jar:4.0.1]
at
org.apache.hive.service.cli.CLIService.applyAuthorizationConfigPolicy(CLIService.java:135)
~[hive-service-4.0.1.jar:4.0.1]
at org.apache.hive.service.cli.CLIService.init(CLIService.java:119)
~[hive-service-4.0.1.jar:4.0.1]
... 12 more
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
