[
https://issues.apache.org/jira/browse/RANGER-5240?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18004908#comment-18004908
]
Madhan Neethiraj commented on RANGER-5240:
------------------------------------------
[~gowri] - following error suggests that the plugin is not configured correctly:
{noformat}
Caused by: java.lang.IllegalArgumentException: bound must be positive
at java.util.Random.nextInt(Random.java:388) ~[?:1.8.0_452]
at
org.apache.ranger.plugin.util.RangerRESTClient.<init>(RangerRESTClient.java:113)
~[?:?]
{noformat}
Can you verify the following?
# configuration file {{ranger-hive-security.xml}} file is in the classpath,
like under /etc/hive/conf
# configuration {{ranger.plugin.hive.policy.rest.url}} set to Ranger admin URL
> After enabling the Ranger Hive plugin, everything works fine initially.
> However, after restarting HiveServer2, we are encountering the following
> error. Hiveserver is not starting.
> -----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
>
> Key: RANGER-5240
> URL: https://issues.apache.org/jira/browse/RANGER-5240
> Project: Ranger
> Issue Type: Task
> Components: Ranger
> Affects Versions: 3.0.0
> Environment: hadoop-hive-spark-hudi-tez-rangeradmin-ranger-hiveplugin
> Reporter: gowri shankar
> Priority: Blocker
>
> hadoop version: 3.4.1
> hive-4.0.1
> spark-3.4.4
> rangeradmin- 3.0.0
> ranger-usersync-3.0.0
> ranger-hive-plugin - 3.0.0
> Issue: After enabling the ranger hive plugin , hiveserver2 not starting .
> getting below error
> 2025-07-07T07:32:59,452 INFO [main] server.HiveServer2: Starting HiveServer2
> 2025-07-07T07:32:59,539 INFO [main] SessionState: Hive Session ID =
> feba569e-a8cf-4ed6-9aa9-f1d24365c571
> 2025-07-07T07:32:59,564 INFO [main] session.SessionState: Created HDFS
> directory: /tmp/hive/hadoop/feba569e-a8cf-4ed6-9aa9-f1d24365c571
> 2025-07-07T07:32:59,567 INFO [main] session.SessionState: Created local
> directory: /tmp/hadoop/feba569e-a8cf-4ed6-9aa9-f1d24365c571
> 2025-07-07T07:32:59,573 INFO [main] session.SessionState: Created HDFS
> directory: /tmp/hive/hadoop/feba569e-a8cf-4ed6-9aa9-f1d24365c571/_tmp_space.db
> 2025-07-07T07:32:59,574 WARN [main] authorizer.RangerHiveAuthorizerBase:
> RangerHiveAuthorizerBase.RangerHiveAuthorizerBase():
> hiveAuthenticator.getUserName() returned null/empty
> 2025-07-07T07:32:59,583 INFO [main] config.RangerPluginConfig:
> PolicyEngineOptions: \{ evaluatorType: auto, evaluateDelegateAdminOnly:
> false, disableContextEnrichers: false, disableCustomConditions: false,
> disableTagPolicyEvaluation: false, disablePolicyRefresher: false,
> disableTagRetriever: false, disableUserStoreRetriever: false,
> disableGdsInfoRetriever: false, enableTagEnricherWithLocalRefresher: false,
> enableUserStoreEnricherWithLocalRefresher: false, disableTrieLookupPrefilter:
> false, optimizeTrieForRetrieval: false, cacheAuditResult: false,
> disableRoleResolution: true, optimizeTrieForSpace: false,
> optimizeTagTrieForRetrieval: false, optimizeTagTrieForSpace: false,
> enableResourceMatcherReuse: true }
> 2025-07-07T07:32:59,583 INFO [main] service.RangerBasePlugin:
> ranger.plugin.hive.null_safe.supplier=v2
> 2025-07-07T07:32:59,585 INFO [main] server.HiveServer2: Shutting down
> HiveServer2
> 2025-07-07T07:32:59,585 INFO [main] server.HiveServer2:
> Stopping/Disconnecting tez sessions.
> 2025-07-07T07:32:59,585 WARN [main] server.HiveServer2: Error starting
> HiveServer2 on attempt 2, will retry in 60000ms
> java.lang.RuntimeException: Error applying authorization policy on hive
> configuration: bound must be positive
> at org.apache.hive.service.cli.CLIService.init(CLIService.java:122)
> ~[hive-service-4.0.1.jar:4.0.1]
> at
> org.apache.hive.service.CompositeService.init(CompositeService.java:59)
> ~[hive-service-4.0.1.jar:4.0.1]
> at org.apache.hive.service.server.HiveServer2.init(HiveServer2.java:241)
> ~[hive-service-4.0.1.jar:4.0.1]
> at
> org.apache.hive.service.server.HiveServer2.startHiveServer2(HiveServer2.java:1112)
> ~[hive-service-4.0.1.jar:4.0.1]
> at
> org.apache.hive.service.server.HiveServer2.access$1500(HiveServer2.java:144)
> ~[hive-service-4.0.1.jar:4.0.1]
> at
> org.apache.hive.service.server.HiveServer2$StartOptionExecutor.execute(HiveServer2.java:1474)
> ~[hive-service-4.0.1.jar:4.0.1]
> at org.apache.hive.service.server.HiveServer2.main(HiveServer2.java:1281)
> ~[hive-service-4.0.1.jar:4.0.1]
> at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
> ~[?:1.8.0_452]
> at
> sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
> ~[?:1.8.0_452]
> at
> sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
> ~[?:1.8.0_452]
> at java.lang.reflect.Method.invoke(Method.java:498) ~[?:1.8.0_452]
> at org.apache.hadoop.util.RunJar.run(RunJar.java:330)
> ~[hadoop-common-3.4.1.jar:?]
> at org.apache.hadoop.util.RunJar.main(RunJar.java:245)
> ~[hadoop-common-3.4.1.jar:?]
> Caused by: java.lang.IllegalArgumentException: bound must be positive
> at java.util.Random.nextInt(Random.java:388) ~[?:1.8.0_452]
> at
> org.apache.ranger.plugin.util.RangerRESTClient.<init>(RangerRESTClient.java:113)
> ~[?:?]
> at
> org.apache.ranger.admin.client.RangerAdminRESTClient.init(RangerAdminRESTClient.java:1044)
> ~[?:?]
> at
> org.apache.ranger.admin.client.RangerAdminRESTClient.init(RangerAdminRESTClient.java:119)
> ~[?:?]
> at
> org.apache.ranger.plugin.policyengine.RangerPluginContext.createAdminClient(RangerPluginContext.java:156)
> ~[?:?]
> at
> org.apache.ranger.plugin.util.PolicyRefresher.<init>(PolicyRefresher.java:85)
> ~[?:?]
> at
> org.apache.ranger.plugin.service.RangerBasePlugin.init(RangerBasePlugin.java:401)
> ~[?:?]
> at
> org.apache.ranger.authorization.hive.authorizer.RangerHiveAuthorizer$RangerHivePlugin.init(RangerHiveAuthorizer.java:3391)
> ~[?:?]
> at
> org.apache.ranger.authorization.hive.authorizer.RangerHiveAuthorizer.<init>(RangerHiveAuthorizer.java:164)
> ~[?:?]
> at
> org.apache.ranger.authorization.hive.authorizer.RangerHiveAuthorizerFactory.createHiveAuthorizer(RangerHiveAuthorizerFactory.java:37)
> ~[ranger-hive-plugin-shim-3.0.0-SNAPSHOT.jar:3.0.0-SNAPSHOT]
> at
> org.apache.ranger.authorization.hive.authorizer.RangerHiveAuthorizerFactory.createHiveAuthorizer(RangerHiveAuthorizerFactory.java:78)
> ~[ranger-hive-plugin-shim-3.0.0-SNAPSHOT.jar:3.0.0-SNAPSHOT]
> at
> org.apache.hadoop.hive.ql.session.SessionState.setupAuth(SessionState.java:1007)
> ~[hive-exec-4.0.1.jar:4.0.1]
> at
> org.apache.hadoop.hive.ql.session.SessionState.applyAuthorizationPolicy(SessionState.java:2058)
> ~[hive-exec-4.0.1.jar:4.0.1]
> at
> org.apache.hive.service.cli.CLIService.applyAuthorizationConfigPolicy(CLIService.java:135)
> ~[hive-service-4.0.1.jar:4.0.1]
> at org.apache.hive.service.cli.CLIService.init(CLIService.java:119)
> ~[hive-service-4.0.1.jar:4.0.1]
> ... 12 more
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
