[jira] [Updated] (RANGER-2435) Add support for sticky breadcrumbs.

[Nitin Galave (JIRA)]

 [ 
https://issues.apache.org/jira/browse/RANGER-2435?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Nitin Galave updated RANGER-2435:
-
Attachment: 0001-RANGER-2435-Add-support-for-sticky-breadcrumbs.patch

> Add support for sticky breadcrumbs.
> ---
>
> Key: RANGER-2435
> URL: https://issues.apache.org/jira/browse/RANGER-2435
> Project: Ranger
>  Issue Type: Bug
>  Components: Ranger
>Reporter: Nitin Galave
>Assignee: Nitin Galave
>Priority: Major
> Attachments: 0001-RANGER-2435-Add-support-for-sticky-breadcrumbs.patch
>
>
> The breadcrumb for Security zone name on policy creation/policy edit page 
> should be stagnant, and remain visible to user even if the page is scrolled 
> up/down.
> Currently, the security zone name goes out of view once the page is scrolled 
> down.
> This can be inconvenient to user who may want to check the zone under which 
> he is editing the policy.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

[jira] [Created] (RANGER-2435) Add support for sticky breadcrumbs.

[Nitin Galave (JIRA)]

Nitin Galave created RANGER-2435:


 Summary: Add support for sticky breadcrumbs.
 Key: RANGER-2435
 URL: https://issues.apache.org/jira/browse/RANGER-2435
 Project: Ranger
  Issue Type: Bug
  Components: Ranger
Reporter: Nitin Galave
Assignee: Nitin Galave


The breadcrumb for Security zone name on policy creation/policy edit page 
should be stagnant, and remain visible to user even if the page is scrolled 
up/down.
Currently, the security zone name goes out of view once the page is scrolled 
down.
This can be inconvenient to user who may want to check the zone under which he 
is editing the policy.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

[jira] [Commented] (RANGER-1629) Test Connection fails when creating Knox Service from Ranger Admin UI

[Massoud Mazar (JIRA)]

[ 
https://issues.apache.org/jira/browse/RANGER-1629?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16840974#comment-16840974
 ] 

Massoud Mazar commented on RANGER-1629:
---

I'm experiencing the same issue with Ranger 1.2.0 on Hortonworks HDP 3.1. When 
this cluster was setup, it did not have neither Ranger nor Know. Ranger was 
added later and was working fine. Then Knox was added after.

"Test Connection" succeeds when password is re-entered, but when password is 
already saved, it fails. Error message is the same:
{code:java}
2019-05-16 04:17:29,240 [timed-executor-pool-0] ERROR 
org.apache.ranger.plugin.util.PasswordUtils (PasswordUtils.java:147) - Unable 
to decrypt password due to error
javax.crypto.IllegalBlockSizeException: Input length must be multiple of 8 when 
decrypting with padded cipher
at com.sun.crypto.provider.CipherCore.doFinal(CipherCore.java:934)
at com.sun.crypto.provider.CipherCore.doFinal(CipherCore.java:845)
at com.sun.crypto.provider.PBES1Core.doFinal(PBES1Core.java:416)
at 
com.sun.crypto.provider.PBEWithMD5AndDESCipher.engineDoFinal(PBEWithMD5AndDESCipher.java:316)
at javax.crypto.Cipher.doFinal(Cipher.java:2165)
at org.apache.ranger.plugin.util.PasswordUtils.decrypt(PasswordUtils.java:132)
at 
org.apache.ranger.plugin.util.PasswordUtils.decryptPassword(PasswordUtils.java:120)
at 
org.apache.ranger.services.knox.client.KnoxClient.getTopologyList(KnoxClient.java:79)
at org.apache.ranger.services.knox.client.KnoxClient$2.call(KnoxClient.java:406)
at org.apache.ranger.services.knox.client.KnoxClient$2.call(KnoxClient.java:402)
at 
org.apache.ranger.services.knox.client.KnoxClient.timedTask(KnoxClient.java:431)
at 
org.apache.ranger.services.knox.client.KnoxClient.getKnoxResources(KnoxClient.java:410)
at 
org.apache.ranger.services.knox.client.KnoxClient.connectionTest(KnoxClient.java:315)
at 
org.apache.ranger.services.knox.client.KnoxResourceMgr.validateConfig(KnoxResourceMgr.java:42)
at 
org.apache.ranger.services.knox.RangerServiceKnox.validateConfig(RangerServiceKnox.java:56)
at 
org.apache.ranger.biz.ServiceMgr$ValidateCallable.actualCall(ServiceMgr.java:575)
at 
org.apache.ranger.biz.ServiceMgr$ValidateCallable.actualCall(ServiceMgr.java:562)
at org.apache.ranger.biz.ServiceMgr$TimedCallable.call(ServiceMgr.java:523)
at java.util.concurrent.FutureTask.run(FutureTask.java:266)
at 
java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)
at 
java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)
at java.lang.Thread.run(Thread.java:745)

2019-05-16 04:17:29,240 [timed-executor-pool-0] INFO  
apache.ranger.services.knox.client.KnoxClient (KnoxClient.java:81) - Password 
decryption failed; trying knox connection with received password string

2019-05-16 04:17:29,312 [timed-executor-pool-0] ERROR 
apache.ranger.services.knox.client.KnoxClient (KnoxClient.java:131) - Got 
invalid REST response from: 
https://redacted_fqdn:8443/gateway/admin/api/v1/topologies, responseStatus: 401
{code}
It appears as if when a password is freshly typed, it is not encrypted and test 
succeeds, but when it is saved it is encrypted with an encryption which is 
different than what decryption code uses.

> Test Connection fails when creating Knox Service from Ranger Admin UI
> -
>
> Key: RANGER-1629
> URL: https://issues.apache.org/jira/browse/RANGER-1629
> Project: Ranger
>  Issue Type: Bug
>  Components: admin
>Affects Versions: 0.7.0
>Reporter: Anirudh
>Priority: Blocker
>
> Knox setup with self-signed certificate. When creating service on Ranger 
> Admin UI for Knox, Test Connection gives error. 
> I followed the steps mentioned in RANGER-355. I'm using the CN printed from 
> the certificate in the place of  in the following 
> https://:8443/gateway/admin/api/v1/topologies/
> However, I'm not sure what values to enter for username and password while 
> creating service. When I click Test-Connection, I'm getting this error
> "Connection Failed.
> Unable to retrieve any topologies/services using given parameters. You can 
> still save the repository and start creating policies, but you would not be 
> able to use autocomplete for resource names. Check ranger_admin.log for more 
> info."
> and the ranger_admin.log contains
> "ERROR org.apache.ranger.plugin.util.PasswordUtils (PasswordUtils.java:156) - 
> Unable to decrypt password due to error
> javax.crypto.IllegalBlockSizeException: Input length must be multiple of 8 
> when decrypting with padded cipher
> at com.sun.crypto.provider.CipherCore.doFinal(CipherCore.java:922)
> at com.sun.crypto.provider.CipherCore.doFinal(CipherCore.java:833)
> at com.sun.crypto.provider.PBES1Core.doFinal(PBES1Core.java:416)
> at 
> com.sun.crypto.provider.PBEWithMD5AndDESCipher.engineDoFi

Re: Review Request 70649: RANGER-2429: Ranger KMS is not starting properly

[Pradeep Agrawal]

> On May 15, 2019, 6:17 p.m., Abhay Kulkarni wrote:
> > agents-common/src/main/java/org/apache/ranger/plugin/util/RangerSslHelper.java
> > Line 49 (original), 49 (patched)
> > 
> >
> > If MoreObjects package is included only for printing debug messages, 
> > please consider removing this dependency altogether.

I have create RANGER-2434 to consider removing dependecy of MoreObjects class. 
Please review other dependent classes mentioned there and add the 
suggestions(if any)


- Pradeep


---
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/70649/#review215282
---


On May 15, 2019, 12:49 p.m., Pradeep Agrawal wrote:
> 
> ---
> This is an automatically generated e-mail. To reply, visit:
> https://reviews.apache.org/r/70649/
> ---
> 
> (Updated May 15, 2019, 12:49 p.m.)
> 
> 
> Review request for ranger, Ankita Sinha, bhavik patel, Gautam Borad, Abhay 
> Kulkarni, Madhan Neethiraj, Mehul Parikh, Nikhil P, Nitin Galave, Ramesh 
> Mani, Sailaja Polavarapu, and Velmurugan Periasamy.
> 
> 
> Bugs: RANGER-2429
> https://issues.apache.org/jira/browse/RANGER-2429
> 
> 
> Repository: ranger
> 
> 
> Description
> ---
> 
> Ranger KMS start is failing with java.lang.NoClassDefFoundError as zookeeper, 
> common-codec jar is not available.
> 
> 
> Diffs
> -
> 
>   kms/pom.xml 856eebd91 
>   pom.xml c0a480c65 
> 
> 
> Diff: https://reviews.apache.org/r/70649/diff/2/
> 
> 
> Testing
> ---
> 
> Build Ranger with proposed changes and can see required jars in ranger-kms 
> module.
> After installation java.lang.NoClassDefFoundError is not coming and 
> ranger-kms is loading properly.
> 
> 
> Thanks,
> 
> Pradeep Agrawal
> 
>

[jira] [Created] (RANGER-2434) Remove dependency from com.google.common.base.Objects or MoreObjects

[Pradeep Agrawal (JIRA)]

Pradeep Agrawal created RANGER-2434:
---

 Summary: Remove dependency from com.google.common.base.Objects or 
MoreObjects
 Key: RANGER-2434
 URL: https://issues.apache.org/jira/browse/RANGER-2434
 Project: Ranger
  Issue Type: Bug
  Components: Ranger
Affects Versions: 2.0.0
Reporter: Pradeep Agrawal
Assignee: Pradeep Agrawal
 Fix For: 2.0.0


Dependent classes :

[https://github.com/apache/ranger/blob/master/hbase-agent/src/main/java/org/apache/ranger/authorization/hbase/AuthorizationSession.java]

[https://github.com/apache/ranger/blob/master/hbase-agent/src/main/java/org/apache/ranger/authorization/hbase/RangerAuthorizationCoprocessor.java]

[https://github.com/apache/ranger/blob/master/hbase-agent/src/main/java/org/apache/ranger/authorization/hbase/RangerAuthorizationFilter.java]

[https://github.com/apache/ranger/blob/master/agents-common/src/main/java/org/apache/ranger/plugin/util/RangerSslHelper.java]

 



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

[jira] [Commented] (RANGER-2432) Upgrade Hadoop Version to 3.1.1

[Pradeep Agrawal (JIRA)]

[ 
https://issues.apache.org/jira/browse/RANGER-2432?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16840970#comment-16840970
 ] 

Pradeep Agrawal commented on RANGER-2432:
-

Yes [~rmani]

> Upgrade Hadoop Version to 3.1.1 
> 
>
> Key: RANGER-2432
> URL: https://issues.apache.org/jira/browse/RANGER-2432
> Project: Ranger
>  Issue Type: Bug
>  Components: Ranger
>Affects Versions: 2.0.0
>Reporter: Pradeep Agrawal
>Assignee: Pradeep Agrawal
>Priority: Major
> Fix For: 2.0.0
>
>
> Proposal to upgrade Hadoop version to 3.1.1



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

[jira] [Comment Edited] (RANGER-2432) Upgrade Hadoop Version to 3.1.1

[Pradeep Agrawal (JIRA)]

[ 
https://issues.apache.org/jira/browse/RANGER-2432?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16840970#comment-16840970
 ] 

Pradeep Agrawal edited comment on RANGER-2432 at 5/16/19 4:06 AM:
--

Yes [~rmani]. If you have any suggestions please let me know.


was (Author: pradeep.agrawal):
Yes [~rmani]

> Upgrade Hadoop Version to 3.1.1 
> 
>
> Key: RANGER-2432
> URL: https://issues.apache.org/jira/browse/RANGER-2432
> Project: Ranger
>  Issue Type: Bug
>  Components: Ranger
>Affects Versions: 2.0.0
>Reporter: Pradeep Agrawal
>Assignee: Pradeep Agrawal
>Priority: Major
> Fix For: 2.0.0
>
>
> Proposal to upgrade Hadoop version to 3.1.1



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

Re: Review Request 70649: RANGER-2429: Ranger KMS is not starting properly

[Abhay Kulkarni]

---
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/70649/#review215282
---




agents-common/src/main/java/org/apache/ranger/plugin/util/RangerSslHelper.java
Line 49 (original), 49 (patched)


If MoreObjects package is included only for printing debug messages, please 
consider removing this dependency altogether.


- Abhay Kulkarni


On May 15, 2019, 12:49 p.m., Pradeep Agrawal wrote:
> 
> ---
> This is an automatically generated e-mail. To reply, visit:
> https://reviews.apache.org/r/70649/
> ---
> 
> (Updated May 15, 2019, 12:49 p.m.)
> 
> 
> Review request for ranger, Ankita Sinha, bhavik patel, Gautam Borad, Abhay 
> Kulkarni, Madhan Neethiraj, Mehul Parikh, Nikhil P, Nitin Galave, Ramesh 
> Mani, Sailaja Polavarapu, and Velmurugan Periasamy.
> 
> 
> Bugs: RANGER-2429
> https://issues.apache.org/jira/browse/RANGER-2429
> 
> 
> Repository: ranger
> 
> 
> Description
> ---
> 
> Ranger KMS start is failing with java.lang.NoClassDefFoundError as zookeeper, 
> common-codec jar is not available.
> 
> 
> Diffs
> -
> 
>   agents-common/pom.xml 27be45f9d 
>   
> agents-common/src/main/java/org/apache/ranger/plugin/util/RangerSslHelper.java
>  5fc3358c6 
>   kms/pom.xml 856eebd91 
>   pom.xml c0a480c65 
> 
> 
> Diff: https://reviews.apache.org/r/70649/diff/1/
> 
> 
> Testing
> ---
> 
> Build Ranger with proposed changes and can see required jars in ranger-kms 
> module.
> After installation java.lang.NoClassDefFoundError is not coming and 
> ranger-kms is loading properly.
> 
> 
> Thanks,
> 
> Pradeep Agrawal
> 
>

[jira] [Commented] (RANGER-2432) Upgrade Hadoop Version to 3.1.1

[Ramesh Mani (JIRA)]

[ 
https://issues.apache.org/jira/browse/RANGER-2432?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16840623#comment-16840623
 ] 

Ramesh Mani commented on RANGER-2432:
-

+1 for the proposal. [~pradeep.agrawal] are you planning to make the HBase and 
Hive Version changes also with this JIRA?

> Upgrade Hadoop Version to 3.1.1 
> 
>
> Key: RANGER-2432
> URL: https://issues.apache.org/jira/browse/RANGER-2432
> Project: Ranger
>  Issue Type: Bug
>  Components: Ranger
>Affects Versions: 2.0.0
>Reporter: Pradeep Agrawal
>Assignee: Pradeep Agrawal
>Priority: Major
> Fix For: 2.0.0
>
>
> Proposal to upgrade Hadoop version to 3.1.1



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

[jira] [Created] (RANGER-2433) Ranger base plugin `grant-` (the auto-generated grant name) may not be unique enough - Failing concurrent transactions

[Mahendra Korepu (JIRA)]

Mahendra Korepu created RANGER-2433:
---

 Summary:  Ranger base plugin `grant-` (the 
auto-generated grant name) may not be unique enough - Failing concurrent 
transactions
 Key: RANGER-2433
 URL: https://issues.apache.org/jira/browse/RANGER-2433
 Project: Ranger
  Issue Type: Bug
  Components: plugins
Reporter: Mahendra Korepu


When running concurrent grant transactions -  Ranger base plugin returns 
following error:

 
{code:java}
// ERROR: InternalException: HTTP 400 Error: Exception [EclipseLink-4002] 
(Eclipse Persistence Services - 2.5.2.v20140319-9ad6abd): 
org.eclipse.persistence.exceptions.DatabaseException
Internal Exception: org.postgresql.util.PSQLException: ERROR: duplicate key 
value violates unique constraint "x_policy_uk_name_service_zone"
Detail: Key (name, service, zone_id)=(grant-1557766372626, 4, 1) already exists.
Error Code: 0
Call: INSERT INTO x_policy (id, ADDED_BY_ID, CREATE_TIME, description, guid, 
is_audit_enabled, is_enabled, name, policy_options, policy_priority, 
policy_text, policy_type, resource_signature, service, UPDATE_TIME, UPD_BY_ID, 
version, zone_id) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
bind => [18 parameters bound]
Query: InsertObjectQuery(XXPolicy [id=6438])
Could not execute command: GRANT SELECT ON table db1.tbl1 TO GROUP usr_grp1
Start, End, Duration: 20190513-095246/20190513-095252/6322.754
{code}
Recommendation : some sort of unique number or string need to be appended to 
policy to avoid race conditions.

 



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

[jira] [Commented] (RANGER-2432) Upgrade Hadoop Version to 3.1.1

[Pradeep Agrawal (JIRA)]

[ 
https://issues.apache.org/jira/browse/RANGER-2432?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16840395#comment-16840395
 ] 

Pradeep Agrawal commented on RANGER-2432:
-

Other important changes required

HBase -> 2.0.2

Hive -> 3.1.0

 

> Upgrade Hadoop Version to 3.1.1 
> 
>
> Key: RANGER-2432
> URL: https://issues.apache.org/jira/browse/RANGER-2432
> Project: Ranger
>  Issue Type: Bug
>  Components: Ranger
>Affects Versions: 2.0.0
>Reporter: Pradeep Agrawal
>Assignee: Pradeep Agrawal
>Priority: Major
> Fix For: 2.0.0
>
>
> Proposal to upgrade Hadoop version to 3.1.1



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

[jira] [Commented] (RANGER-2432) Upgrade Hadoop Version to 3.1.1

[Pradeep Agrawal (JIRA)]

[ 
https://issues.apache.org/jira/browse/RANGER-2432?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16840391#comment-16840391
 ] 

Pradeep Agrawal commented on RANGER-2432:
-

Need to address dependencies given here : 
[https://mvnrepository.com/artifact/org.apache.hadoop/hadoop-common/3.1.1]

> Upgrade Hadoop Version to 3.1.1 
> 
>
> Key: RANGER-2432
> URL: https://issues.apache.org/jira/browse/RANGER-2432
> Project: Ranger
>  Issue Type: Bug
>  Components: Ranger
>Affects Versions: 2.0.0
>Reporter: Pradeep Agrawal
>Assignee: Pradeep Agrawal
>Priority: Major
> Fix For: 2.0.0
>
>
> Proposal to upgrade Hadoop version to 3.1.1



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

[jira] [Commented] (RANGER-2431) Upgrade Atlas version to 2.0.0

[Pradeep Agrawal (JIRA)]

[ 
https://issues.apache.org/jira/browse/RANGER-2431?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16840384#comment-16840384
 ] 

Pradeep Agrawal commented on RANGER-2431:
-

Since Atlas is using Hadoop 3.1.1. We should change hadoop version first

> Upgrade Atlas version to 2.0.0
> --
>
> Key: RANGER-2431
> URL: https://issues.apache.org/jira/browse/RANGER-2431
> Project: Ranger
>  Issue Type: Bug
>  Components: Ranger
>Reporter: Velmurugan Periasamy
>Assignee: Pradeep Agrawal
>Priority: Major
> Fix For: 2.0.0
>
>




--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

[jira] [Created] (RANGER-2432) Upgrade Hadoop Version to 3.1.1

[Pradeep Agrawal (JIRA)]

Pradeep Agrawal created RANGER-2432:
---

 Summary: Upgrade Hadoop Version to 3.1.1 
 Key: RANGER-2432
 URL: https://issues.apache.org/jira/browse/RANGER-2432
 Project: Ranger
  Issue Type: Bug
  Components: Ranger
Affects Versions: 2.0.0
Reporter: Pradeep Agrawal
Assignee: Pradeep Agrawal
 Fix For: 2.0.0


Proposal to upgrade Hadoop version to 3.1.1



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

Review Request 70649: RANGER-2429: Ranger KMS is not starting properly

[Pradeep Agrawal]

---
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/70649/
---

Review request for ranger, Ankita Sinha, bhavik patel, Gautam Borad, Abhay 
Kulkarni, Madhan Neethiraj, Mehul Parikh, Nikhil P, Nitin Galave, Ramesh Mani, 
Sailaja Polavarapu, and Velmurugan Periasamy.


Bugs: RANGER-2429
https://issues.apache.org/jira/browse/RANGER-2429


Repository: ranger


Description
---

Ranger KMS start is failing with java.lang.NoClassDefFoundError as zookeeper, 
common-codec jar is not available.


Diffs
-

  agents-common/pom.xml 27be45f9d 
  
agents-common/src/main/java/org/apache/ranger/plugin/util/RangerSslHelper.java 
5fc3358c6 
  kms/pom.xml 856eebd91 
  pom.xml c0a480c65 


Diff: https://reviews.apache.org/r/70649/diff/1/


Testing
---

Build Ranger with proposed changes and can see required jars in ranger-kms 
module.
After installation java.lang.NoClassDefFoundError is not coming and ranger-kms 
is loading properly.


Thanks,

Pradeep Agrawal

[jira] [Assigned] (RANGER-2431) Upgrade Atlas version to 2.0.0

[Pradeep Agrawal (JIRA)]

 [ 
https://issues.apache.org/jira/browse/RANGER-2431?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Pradeep Agrawal reassigned RANGER-2431:
---

Assignee: Pradeep Agrawal

> Upgrade Atlas version to 2.0.0
> --
>
> Key: RANGER-2431
> URL: https://issues.apache.org/jira/browse/RANGER-2431
> Project: Ranger
>  Issue Type: Bug
>  Components: Ranger
>Reporter: Velmurugan Periasamy
>Assignee: Pradeep Agrawal
>Priority: Major
> Fix For: 2.0.0
>
>




--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

[jira] [Created] (RANGER-2431) Upgrade Atlas version to 2.0.0

[Velmurugan Periasamy (JIRA)]

Velmurugan Periasamy created RANGER-2431:


 Summary: Upgrade Atlas version to 2.0.0
 Key: RANGER-2431
 URL: https://issues.apache.org/jira/browse/RANGER-2431
 Project: Ranger
  Issue Type: Bug
  Components: Ranger
Reporter: Velmurugan Periasamy
 Fix For: 2.0.0






--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

[jira] [Created] (RANGER-2430) Zoneadmin User is able to create policy for those services which is not associated to zone

[bhavik patel (JIRA)]

bhavik patel created RANGER-2430:


 Summary: Zoneadmin User is able to create policy for those 
services which is not associated to zone
 Key: RANGER-2430
 URL: https://issues.apache.org/jira/browse/RANGER-2430
 Project: Ranger
  Issue Type: Bug
  Components: Ranger
Reporter: bhavik patel
Assignee: bhavik patel


Steps to Reproduce:
1. Create a zone for HDFS service
Zone name: zone1
Zoneadmin user: zoneadmin1
2. Create a hbase policy with zone name as "zone1" through curl from zoneadmin 
user: zoneadmin1
3. It should not be allowed as hbase service is not associated with zone: zone1



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

[jira] [Updated] (RANGER-2429) Ranger KMS is not starting properly

[Pradeep Agrawal (JIRA)]

 [ 
https://issues.apache.org/jira/browse/RANGER-2429?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Pradeep Agrawal updated RANGER-2429:

Attachment: 0001-RANGER-2429-Ranger-KMS-is-not-starting-properly-due-.patch

> Ranger KMS is not starting properly
> ---
>
> Key: RANGER-2429
> URL: https://issues.apache.org/jira/browse/RANGER-2429
> Project: Ranger
>  Issue Type: Sub-task
>  Components: Ranger
>Affects Versions: 2.0.0
>Reporter: Pradeep Agrawal
>Assignee: Pradeep Agrawal
>Priority: Major
> Fix For: 2.0.0
>
> Attachments: 
> 0001-RANGER-2429-Ranger-KMS-is-not-starting-properly-due-.patch
>
>
> KMS start is giving following error : 
> {code:java}
> 2019-05-15 09:56:26,580 ERROR [/kms] - Exception starting filter authFilter
> java.lang.NoClassDefFoundError: 
> org/apache/zookeeper/KeeperException$NodeExistsException
> at 
> org.apache.hadoop.security.token.delegation.web.DelegationTokenAuthenticationFilter.initializeAuthHandler(DelegationTokenAuthenticationFilter.java:211)
> at 
> org.apache.hadoop.security.authentication.server.AuthenticationFilter.init(AuthenticationFilter.java:180)
> at 
> org.apache.hadoop.security.token.delegation.web.DelegationTokenAuthenticationFilter.init(DelegationTokenAuthenticationFilter.java:180)
> at 
> org.apache.catalina.core.ApplicationFilterConfig.initFilter(ApplicationFilterConfig.java:285)
> at 
> org.apache.catalina.core.ApplicationFilterConfig.getFilter(ApplicationFilterConfig.java:266)
> at 
> org.apache.catalina.core.ApplicationFilterConfig.(ApplicationFilterConfig.java:108)
> at 
> org.apache.catalina.core.StandardContext.filterStart(StandardContext.java:4997)
> at 
> org.apache.catalina.core.StandardContext.startInternal(StandardContext.java:5699)
> at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:145)
> at 
> org.apache.catalina.core.ContainerBase$StartChild.call(ContainerBase.java:1707)
> at 
> org.apache.catalina.core.ContainerBase$StartChild.call(ContainerBase.java:1697)
> at java.util.concurrent.FutureTask.run(FutureTask.java:266)
> at 
> java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
> at 
> java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
> at java.lang.Thread.run(Thread.java:748)
> Caused by: java.lang.ClassNotFoundException: 
> org.apache.zookeeper.KeeperException$NodeExistsException
> at java.net.URLClassLoader.findClass(URLClassLoader.java:382)
> at java.lang.ClassLoader.loadClass(ClassLoader.java:424)
> at sun.misc.Launcher$AppClassLoader.loadClass(Launcher.java:349)
> at java.lang.ClassLoader.loadClass(ClassLoader.java:357)
> ... 15 more
> {code}
>  



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

[jira] [Commented] (RANGER-2429) Ranger KMS is not starting properly

[Pradeep Agrawal (JIRA)]

[ 
https://issues.apache.org/jira/browse/RANGER-2429?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16840322#comment-16840322
 ] 

Pradeep Agrawal commented on RANGER-2429:
-

{code:java}
2019-05-15 10:39:37,036 ERROR [webservices-driver] - Servlet.service() for 
servlet [webservices-driver] in context with path [/kms] threw exception 
[Filter execution threw an exception] with root cause
java.lang.NoClassDefFoundError: org/apache/commons/codec/binary/Base64
at 
org.apache.hadoop.security.authentication.util.Signer.computeSignature(Signer.java:93)
at org.apache.hadoop.security.authentication.util.Signer.sign(Signer.java:55)
at 
org.apache.hadoop.security.authentication.server.AuthenticationFilter.doFilter(AuthenticationFilter.java:587)
at 
org.apache.hadoop.crypto.key.kms.server.KMSAuthenticationFilter.doFilter(KMSAuthenticationFilter.java:129)
at 
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:241)
{code}

> Ranger KMS is not starting properly
> ---
>
> Key: RANGER-2429
> URL: https://issues.apache.org/jira/browse/RANGER-2429
> Project: Ranger
>  Issue Type: Sub-task
>  Components: Ranger
>Affects Versions: 2.0.0
>Reporter: Pradeep Agrawal
>Assignee: Pradeep Agrawal
>Priority: Major
> Fix For: 2.0.0
>
>
> KMS start is giving following error : 
> {code:java}
> 2019-05-15 09:56:26,580 ERROR [/kms] - Exception starting filter authFilter
> java.lang.NoClassDefFoundError: 
> org/apache/zookeeper/KeeperException$NodeExistsException
> at 
> org.apache.hadoop.security.token.delegation.web.DelegationTokenAuthenticationFilter.initializeAuthHandler(DelegationTokenAuthenticationFilter.java:211)
> at 
> org.apache.hadoop.security.authentication.server.AuthenticationFilter.init(AuthenticationFilter.java:180)
> at 
> org.apache.hadoop.security.token.delegation.web.DelegationTokenAuthenticationFilter.init(DelegationTokenAuthenticationFilter.java:180)
> at 
> org.apache.catalina.core.ApplicationFilterConfig.initFilter(ApplicationFilterConfig.java:285)
> at 
> org.apache.catalina.core.ApplicationFilterConfig.getFilter(ApplicationFilterConfig.java:266)
> at 
> org.apache.catalina.core.ApplicationFilterConfig.(ApplicationFilterConfig.java:108)
> at 
> org.apache.catalina.core.StandardContext.filterStart(StandardContext.java:4997)
> at 
> org.apache.catalina.core.StandardContext.startInternal(StandardContext.java:5699)
> at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:145)
> at 
> org.apache.catalina.core.ContainerBase$StartChild.call(ContainerBase.java:1707)
> at 
> org.apache.catalina.core.ContainerBase$StartChild.call(ContainerBase.java:1697)
> at java.util.concurrent.FutureTask.run(FutureTask.java:266)
> at 
> java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
> at 
> java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
> at java.lang.Thread.run(Thread.java:748)
> Caused by: java.lang.ClassNotFoundException: 
> org.apache.zookeeper.KeeperException$NodeExistsException
> at java.net.URLClassLoader.findClass(URLClassLoader.java:382)
> at java.lang.ClassLoader.loadClass(ClassLoader.java:424)
> at sun.misc.Launcher$AppClassLoader.loadClass(Launcher.java:349)
> at java.lang.ClassLoader.loadClass(ClassLoader.java:357)
> ... 15 more
> {code}
>  



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

Re: Review Request 70629: RANGER-2414: Enhancements to support roles in Ranger policies

[Abhay Kulkarni]

> On May 14, 2019, 3:37 a.m., Madhan Neethiraj wrote:
> > agents-common/src/main/java/org/apache/ranger/plugin/policyevaluator/RangerDefaultPolicyEvaluator.java
> > Line 527 (original), 528 (patched)
> > 
> >
> > PolicyACLSummary has getRolesAccessInfo(), so it may not be necessary 
> > to skip policies that include 'roles'. Please review and update.

Opened https://issues.apache.org/jira/browse/RANGER-2428 to track this.


- Abhay


---
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/70629/#review215233
---


On May 15, 2019, 1:58 a.m., Abhay Kulkarni wrote:
> 
> ---
> This is an automatically generated e-mail. To reply, visit:
> https://reviews.apache.org/r/70629/
> ---
> 
> (Updated May 15, 2019, 1:58 a.m.)
> 
> 
> Review request for ranger, Madhan Neethiraj, Mehul Parikh, Nikhil P, Nitin 
> Galave, Pradeep Agrawal, Ramesh Mani, Sailaja Polavarapu, and Velmurugan 
> Periasamy.
> 
> 
> Bugs: RANGER-2414
> https://issues.apache.org/jira/browse/RANGER-2414
> 
> 
> Repository: ranger
> 
> 
> Description
> ---
> 
> Current Ranger policy model supports 
> authorization/column-masking/row-filtering for users/user-groups based on 
> various criteria like accessed-resource, resource-classifications, IP-address 
> and custom conditions. Given the wide-spread use of role-based authorization 
> in traditional enterprise applications (like RDBMS, J2EE), it will be very 
> useful for Ranger policy model to support 'roles' i.e. to be able to specify 
> authorization/column-masking/row-filtering for roles as well - in addition to 
> existing support for users and user-groups.
> 
> This patch provides an initial implementation of support for roles in Ranger.
> 
> 
> Diffs
> -
> 
>   
> agents-common/src/main/java/org/apache/ranger/plugin/errors/ValidationErrorCode.java
>  3111037ff 
>   
> agents-common/src/main/java/org/apache/ranger/plugin/model/RangerPolicy.java 
> 3cf509d7c 
>   agents-common/src/main/java/org/apache/ranger/plugin/model/RangerRole.java 
> PRE-CREATION 
>   
> agents-common/src/main/java/org/apache/ranger/plugin/model/validation/RangerPolicyValidator.java
>  990aab0c9 
>   
> agents-common/src/main/java/org/apache/ranger/plugin/policyengine/RangerPolicyEngine.java
>  9ed500c50 
>   
> agents-common/src/main/java/org/apache/ranger/plugin/policyengine/RangerPolicyEngineImpl.java
>  eab2c238e 
>   
> agents-common/src/main/java/org/apache/ranger/plugin/policyengine/RangerResourceACLs.java
>  eafbde246 
>   
> agents-common/src/main/java/org/apache/ranger/plugin/policyevaluator/RangerDefaultPolicyEvaluator.java
>  a57b39827 
>   
> agents-common/src/main/java/org/apache/ranger/plugin/policyevaluator/RangerDefaultPolicyItemEvaluator.java
>  45231e739 
>   
> agents-common/src/main/java/org/apache/ranger/plugin/policyevaluator/RangerOptimizedPolicyEvaluator.java
>  47b4921ad 
>   
> agents-common/src/main/java/org/apache/ranger/plugin/policyevaluator/RangerPolicyEvaluator.java
>  5400f71c4 
>   
> agents-common/src/main/java/org/apache/ranger/plugin/policyevaluator/RangerPolicyItemEvaluator.java
>  a6e24c609 
>   
> agents-common/src/main/java/org/apache/ranger/plugin/service/RangerAuthContext.java
>  5a18226fe 
>   agents-common/src/main/java/org/apache/ranger/plugin/store/RoleStore.java 
> PRE-CREATION 
>   
> agents-common/src/main/java/org/apache/ranger/plugin/util/RangerAccessRequestUtil.java
>  c20ccded6 
>   agents-common/src/main/java/org/apache/ranger/plugin/util/SearchFilter.java 
> e22249ac6 
>   
> agents-common/src/main/java/org/apache/ranger/plugin/util/ServicePolicies.java
>  cbd2cb012 
>   
> agents-common/src/test/java/org/apache/ranger/plugin/model/validation/TestRangerPolicyValidator.java
>  2c1de4eb8 
>   
> agents-common/src/test/java/org/apache/ranger/plugin/policyengine/TestPolicyACLs.java
>  e92a2e658 
>   
> agents-common/src/test/java/org/apache/ranger/plugin/policyengine/TestPolicyEngine.java
>  5a47ba401 
>   agents-common/src/test/resources/policyengine/test_aclprovider_default.json 
> b4c4def85 
>   
> agents-common/src/test/resources/policyengine/test_policyengine_with_roles.json
>  PRE-CREATION 
>   security-admin/db/mysql/optimized/current/ranger_core_db_mysql.sql 
> 769afb56a 
>   security-admin/db/mysql/patches/041-create-role-schema.sql PRE-CREATION 
>   security-admin/db/oracle/optimized/current/ranger_core_db_oracle.sql 
> 9a9e36b09 
>   security-admin/db/oracle/patches/041-create-role-schema.sql PRE-CREATION 
>   security-admin/db/postgres/optimized/current/ranger_core_db_postgres.sql 
> df4201d89 
>   security-admin/db/postgres/patches/041-create-role-schema.sql PRE-CREATION 
>   
> security-admin/db/sqlanywhere/op

[jira] [Updated] (RANGER-2429) Ranger KMS is not starting properly

[Pradeep Agrawal (JIRA)]

 [ 
https://issues.apache.org/jira/browse/RANGER-2429?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Pradeep Agrawal updated RANGER-2429:

Description: 
KMS start is giving following error : 
{code:java}
2019-05-15 09:56:26,580 ERROR [/kms] - Exception starting filter authFilter
java.lang.NoClassDefFoundError: 
org/apache/zookeeper/KeeperException$NodeExistsException
at 
org.apache.hadoop.security.token.delegation.web.DelegationTokenAuthenticationFilter.initializeAuthHandler(DelegationTokenAuthenticationFilter.java:211)
at 
org.apache.hadoop.security.authentication.server.AuthenticationFilter.init(AuthenticationFilter.java:180)
at 
org.apache.hadoop.security.token.delegation.web.DelegationTokenAuthenticationFilter.init(DelegationTokenAuthenticationFilter.java:180)
at 
org.apache.catalina.core.ApplicationFilterConfig.initFilter(ApplicationFilterConfig.java:285)
at 
org.apache.catalina.core.ApplicationFilterConfig.getFilter(ApplicationFilterConfig.java:266)
at 
org.apache.catalina.core.ApplicationFilterConfig.(ApplicationFilterConfig.java:108)
at 
org.apache.catalina.core.StandardContext.filterStart(StandardContext.java:4997)
at 
org.apache.catalina.core.StandardContext.startInternal(StandardContext.java:5699)
at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:145)
at 
org.apache.catalina.core.ContainerBase$StartChild.call(ContainerBase.java:1707)
at 
org.apache.catalina.core.ContainerBase$StartChild.call(ContainerBase.java:1697)
at java.util.concurrent.FutureTask.run(FutureTask.java:266)
at 
java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
at 
java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
at java.lang.Thread.run(Thread.java:748)
Caused by: java.lang.ClassNotFoundException: 
org.apache.zookeeper.KeeperException$NodeExistsException
at java.net.URLClassLoader.findClass(URLClassLoader.java:382)
at java.lang.ClassLoader.loadClass(ClassLoader.java:424)
at sun.misc.Launcher$AppClassLoader.loadClass(Launcher.java:349)
at java.lang.ClassLoader.loadClass(ClassLoader.java:357)
... 15 more
{code}
 

  was:
KMS start is failing with following error : 

Caused by: java.lang.NoSuchMethodError: 
com.google.common.base.Objects.toStringHelper(Ljava/lang/Class;)Lcom/google/common/base/Objects$ToStringHelper;

 

It seems ToStringHelper() method has been moved from 
com.google.common.base.Objects; to com.google.common.base.MoreObjects.

 


> Ranger KMS is not starting properly
> ---
>
> Key: RANGER-2429
> URL: https://issues.apache.org/jira/browse/RANGER-2429
> Project: Ranger
>  Issue Type: Sub-task
>  Components: Ranger
>Affects Versions: 2.0.0
>Reporter: Pradeep Agrawal
>Assignee: Pradeep Agrawal
>Priority: Major
> Fix For: 2.0.0
>
>
> KMS start is giving following error : 
> {code:java}
> 2019-05-15 09:56:26,580 ERROR [/kms] - Exception starting filter authFilter
> java.lang.NoClassDefFoundError: 
> org/apache/zookeeper/KeeperException$NodeExistsException
> at 
> org.apache.hadoop.security.token.delegation.web.DelegationTokenAuthenticationFilter.initializeAuthHandler(DelegationTokenAuthenticationFilter.java:211)
> at 
> org.apache.hadoop.security.authentication.server.AuthenticationFilter.init(AuthenticationFilter.java:180)
> at 
> org.apache.hadoop.security.token.delegation.web.DelegationTokenAuthenticationFilter.init(DelegationTokenAuthenticationFilter.java:180)
> at 
> org.apache.catalina.core.ApplicationFilterConfig.initFilter(ApplicationFilterConfig.java:285)
> at 
> org.apache.catalina.core.ApplicationFilterConfig.getFilter(ApplicationFilterConfig.java:266)
> at 
> org.apache.catalina.core.ApplicationFilterConfig.(ApplicationFilterConfig.java:108)
> at 
> org.apache.catalina.core.StandardContext.filterStart(StandardContext.java:4997)
> at 
> org.apache.catalina.core.StandardContext.startInternal(StandardContext.java:5699)
> at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:145)
> at 
> org.apache.catalina.core.ContainerBase$StartChild.call(ContainerBase.java:1707)
> at 
> org.apache.catalina.core.ContainerBase$StartChild.call(ContainerBase.java:1697)
> at java.util.concurrent.FutureTask.run(FutureTask.java:266)
> at 
> java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
> at 
> java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
> at java.lang.Thread.run(Thread.java:748)
> Caused by: java.lang.ClassNotFoundException: 
> org.apache.zookeeper.KeeperException$NodeExistsException
> at java.net.URLClassLoader.findClass(URLClassLoader.java:382)
> at java.lang.ClassLoader.loadClass(ClassLoader.java:424)
> at sun.misc.Launcher$AppClassLoader.loadClass(Launcher.java:349)
> at java.lang.ClassLoader.loadClass(ClassLoader.java:357)
> ... 15 more
> {code}
>  



--
Thi

[jira] [Updated] (RANGER-2429) Ranger KMS is not starting properly

[Pradeep Agrawal (JIRA)]

 [ 
https://issues.apache.org/jira/browse/RANGER-2429?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Pradeep Agrawal updated RANGER-2429:

Summary: Ranger KMS is not starting properly  (was: Ranger KMS is not 
starting probably)

> Ranger KMS is not starting properly
> ---
>
> Key: RANGER-2429
> URL: https://issues.apache.org/jira/browse/RANGER-2429
> Project: Ranger
>  Issue Type: Sub-task
>  Components: Ranger
>Affects Versions: 2.0.0
>Reporter: Pradeep Agrawal
>Assignee: Pradeep Agrawal
>Priority: Major
> Fix For: 2.0.0
>
>
> KMS start is failing with following error : 
> Caused by: java.lang.NoSuchMethodError: 
> com.google.common.base.Objects.toStringHelper(Ljava/lang/Class;)Lcom/google/common/base/Objects$ToStringHelper;
>  
> It seems ToStringHelper() method has been moved from 
> com.google.common.base.Objects; to com.google.common.base.MoreObjects.
>  



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

[jira] [Updated] (RANGER-2429) Ranger KMS is not starting probably

[Pradeep Agrawal (JIRA)]

 [ 
https://issues.apache.org/jira/browse/RANGER-2429?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Pradeep Agrawal updated RANGER-2429:

Summary: Ranger KMS is not starting probably  (was: Ranger KMS start is 
failing due to changes in upgraded guava library)

> Ranger KMS is not starting probably
> ---
>
> Key: RANGER-2429
> URL: https://issues.apache.org/jira/browse/RANGER-2429
> Project: Ranger
>  Issue Type: Sub-task
>  Components: Ranger
>Affects Versions: 2.0.0
>Reporter: Pradeep Agrawal
>Assignee: Pradeep Agrawal
>Priority: Major
> Fix For: 2.0.0
>
>
> KMS start is failing with following error : 
> Caused by: java.lang.NoSuchMethodError: 
> com.google.common.base.Objects.toStringHelper(Ljava/lang/Class;)Lcom/google/common/base/Objects$ToStringHelper;
>  
> It seems ToStringHelper() method has been moved from 
> com.google.common.base.Objects; to com.google.common.base.MoreObjects.
>  



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)