[jira] [Created] (RANGER-4201) Hbase master can't start due to ranger-hbase-plugin jersey jar conflict

2023-04-23 Thread caijialiang (Jira)
caijialiang created RANGER-4201:
---

 Summary: Hbase master can't start due to  ranger-hbase-plugin 
jersey jar conflict
 Key: RANGER-4201
 URL: https://issues.apache.org/jira/browse/RANGER-4201
 Project: Ranger
  Issue Type: Bug
  Components: Ranger
Affects Versions: 2.4.0, 2.3.0
Reporter: caijialiang


hbase version 2.4.13

ranger version 2.4

hbase  master can't start after installed ranger-hbase-plugin 

 
{code:java}
ERROR [master/gs-server-13481:16000:becomeActiveMaster] master.HMaster: * 
ABORTING master gs-server-13481,16000,1681377561702: The coprocessor 
org.apache.ranger.authorization.hbase.RangerAuthorizationCoprocessor threw 
java.lang.ExceptionInIniti
alizerError *
java.lang.ExceptionInInitializerError
        at 
com.sun.jersey.core.spi.factory.MessageBodyFactory.initReaders(MessageBodyFactory.java:182)
        at 
com.sun.jersey.core.spi.factory.MessageBodyFactory.initReaders(MessageBodyFactory.java:175)
        at 
com.sun.jersey.core.spi.factory.MessageBodyFactory.init(MessageBodyFactory.java:162)
        at com.sun.jersey.api.client.Client.init(Client.java:343)
        at com.sun.jersey.api.client.Client.access$000(Client.java:119)
        at com.sun.jersey.api.client.Client$1.f(Client.java:192)
        at com.sun.jersey.api.client.Client$1.f(Client.java:188)
        at com.sun.jersey.spi.inject.Errors.processWithErrors(Errors.java:193)
        at com.sun.jersey.api.client.Client.(Client.java:188)
        at com.sun.jersey.api.client.Client.(Client.java:171)
        at com.sun.jersey.api.client.Client.create(Client.java:683)
        at 
org.apache.ranger.plugin.util.RangerRESTClient.buildClient(RangerRESTClient.java:228)
        at 
org.apache.ranger.plugin.util.RangerRESTClient.getClient(RangerRESTClient.java:193)
        at 
org.apache.ranger.plugin.util.RangerRESTClient.get(RangerRESTClient.java:473)
        at 
org.apache.ranger.admin.client.RangerAdminRESTClient.getRangerRolesDownloadResponse(RangerAdminRESTClient.java:1340)
        at 
org.apache.ranger.admin.client.RangerAdminRESTClient.getRolesIfUpdatedWithCred(RangerAdminRESTClient.java:1202)
        at 
org.apache.ranger.admin.client.RangerAdminRESTClient.getRolesIfUpdated(RangerAdminRESTClient.java:167)
        at 
org.apache.ranger.plugin.util.RangerRolesProvider.loadUserGroupRolesFromAdmin(RangerRolesProvider.java:183)
        at 
org.apache.ranger.plugin.util.RangerRolesProvider.loadUserGroupRoles(RangerRolesProvider.java:123)
        at 
org.apache.ranger.plugin.util.PolicyRefresher.loadRoles(PolicyRefresher.java:495)
        at 
org.apache.ranger.plugin.util.PolicyRefresher.startRefresher(PolicyRefresher.java:144)
        at 
org.apache.ranger.plugin.service.RangerBasePlugin.init(RangerBasePlugin.java:245)
        at 
org.apache.ranger.authorization.hbase.RangerAuthorizationCoprocessor.start(RangerAuthorizationCoprocessor.java:1120)
        at 
org.apache.ranger.authorization.hbase.RangerAuthorizationCoprocessor.start(RangerAuthorizationCoprocessor.java:160)
        at 
org.apache.hadoop.hbase.coprocessor.BaseEnvironment.startup(BaseEnvironment.java:69)
        at 
org.apache.hadoop.hbase.coprocessor.CoprocessorHost.checkAndLoadInstance(CoprocessorHost.java:285)
        at 
org.apache.hadoop.hbase.coprocessor.CoprocessorHost.loadSystemCoprocessors(CoprocessorHost.java:171)
        at 
org.apache.hadoop.hbase.master.MasterCoprocessorHost.(MasterCoprocessorHost.java:155)
        at 
org.apache.hadoop.hbase.master.HMaster.initializeCoprocessorHost(HMaster.java:3870)
        at 
org.apache.hadoop.hbase.master.HMaster.finishActiveMasterInitialization(HMaster.java:902)
        at 
org.apache.hadoop.hbase.master.HMaster.startActiveMasterManager(HMaster.java:2175)
        at org.apache.hadoop.hbase.master.HMaster.lambda$run$0(HMaster.java:520)
        at java.lang.Thread.run(Thread.java:748)
Caused by: java.lang.RuntimeException: java.lang.ClassNotFoundException: 
org.glassfish.jersey.internal.RuntimeDelegateImpl
        at 
javax.ws.rs.ext.RuntimeDelegate.findDelegate(RuntimeDelegate.java:130)
        at javax.ws.rs.ext.RuntimeDelegate.getInstance(RuntimeDelegate.java:97)
        at javax.ws.rs.core.MediaType.valueOf(MediaType.java:172)
        at com.sun.jersey.core.header.MediaTypes.(MediaTypes.java:65)
        ... 33 more
Caused by: java.lang.ClassNotFoundException: 
org.glassfish.jersey.internal.RuntimeDelegateImpl
        at java.net.URLClassLoader.findClass(URLClassLoader.java:381)
        at java.lang.ClassLoader.loadClass(ClassLoader.java:424)
        at sun.misc.Launcher$AppClassLoader.loadClass(Launcher.java:338)
        at java.lang.ClassLoader.loadClass(ClassLoader.java:357)
        at java.lang.Class.forName0(Native Method)
        at java.lang.Class.forName(Class.java:264)
        at javax.ws.rs.ext.FactoryFinder.newInstance(FactoryFinder.java:87)
        at javax.ws.rs.ext.FactoryFinder.

[jira] [Created] (RANGER-4202) return error using hadoop key roll command, when you set certian key ACL in rangeradmin.

2023-04-23 Thread rickboker (Jira)
rickboker created RANGER-4202:
-

 Summary: return error using hadoop key roll command, when you set 
certian key ACL in rangeradmin.
 Key: RANGER-4202
 URL: https://issues.apache.org/jira/browse/RANGER-4202
 Project: Ranger
  Issue Type: Bug
  Components: kms
Affects Versions: 2.3.0
Reporter: rickboker


I set access policy as
{quote}{keyname: key1

user: user1

permissions: create get delete rollover

}
{quote}
and when I use this user to rollover or delete key by hadoop command it will 
return error.

ERROR INFORMATION:
{quote}Rolling key version from KeyProvider: 
org.apache.hadoop.crypto.key.kms.LoadBalancingKMSClientP
  for key name: key1
Cannot roll key: key1 within KeyProvider: 
org.apache.hadoop.crypto.key.kms.LoadBalancingKMSC
roll  [-provider ] [-strict] [-help]:

The roll subcommand creates a new version for the specified key
within the provider indicated using the -provider argument.
If -strict is supplied, fail immediately if the provider requires
a password and none is given.
Executing command failed with the following exception: AuthorizationException: 
User:user1
{quote}



--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[jira] [Updated] (RANGER-4202) return error using hadoop key roll command, when you set certian key ACL in rangeradmin.

2023-04-23 Thread rickboker (Jira)


 [ 
https://issues.apache.org/jira/browse/RANGER-4202?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

rickboker updated RANGER-4202:
--
Description: 
I set access policy as
{quote} {keyname: key1
user: user1
permissions:get create delete rollover
}{quote}
and when I use this user to rollover or delete key by hadoop command it will 
return error.

ERROR INFORMATION:
{quote}Rolling key version from KeyProvider: 
org.apache.hadoop.crypto.key.kms.LoadBalancingKMSClientP
  for key name: key1
Cannot roll key: key1 within KeyProvider: 
org.apache.hadoop.crypto.key.kms.LoadBalancingKMSC
roll  [-provider ] [-strict] [-help]:

The roll subcommand creates a new version for the specified key
within the provider indicated using the -provider argument.
If -strict is supplied, fail immediately if the provider requires
a password and none is given.
Executing command failed with the following exception: AuthorizationException: 
User:user1
{quote}

  was:
I set access policy as
{quote}{keyname: key1

user: user1

permissions: create get delete rollover

}
{quote}
and when I use this user to rollover or delete key by hadoop command it will 
return error.

ERROR INFORMATION:
{quote}Rolling key version from KeyProvider: 
org.apache.hadoop.crypto.key.kms.LoadBalancingKMSClientP
  for key name: key1
Cannot roll key: key1 within KeyProvider: 
org.apache.hadoop.crypto.key.kms.LoadBalancingKMSC
roll  [-provider ] [-strict] [-help]:

The roll subcommand creates a new version for the specified key
within the provider indicated using the -provider argument.
If -strict is supplied, fail immediately if the provider requires
a password and none is given.
Executing command failed with the following exception: AuthorizationException: 
User:user1
{quote}


> return error using hadoop key roll command, when you set certian key ACL in 
> rangeradmin.
> 
>
> Key: RANGER-4202
> URL: https://issues.apache.org/jira/browse/RANGER-4202
> Project: Ranger
>  Issue Type: Bug
>  Components: kms
>Affects Versions: 2.3.0
>Reporter: rickboker
>Priority: Major
>
> I set access policy as
> {quote} {keyname: key1
> user: user1
> permissions:get create delete rollover
> }{quote}
> and when I use this user to rollover or delete key by hadoop command it will 
> return error.
> ERROR INFORMATION:
> {quote}Rolling key version from KeyProvider: 
> org.apache.hadoop.crypto.key.kms.LoadBalancingKMSClientP
>   for key name: key1
> Cannot roll key: key1 within KeyProvider: 
> org.apache.hadoop.crypto.key.kms.LoadBalancingKMSC
> roll  [-provider ] [-strict] [-help]:
> The roll subcommand creates a new version for the specified key
> within the provider indicated using the -provider argument.
> If -strict is supplied, fail immediately if the provider requires
> a password and none is given.
> Executing command failed with the following exception: 
> AuthorizationException: User:user1
> {quote}



--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[jira] [Updated] (RANGER-4202) return error using hadoop key roll command, when you set certian key ACL in rangeradmin.

2023-04-23 Thread rickboker (Jira)


 [ 
https://issues.apache.org/jira/browse/RANGER-4202?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

rickboker updated RANGER-4202:
--
Description: 
I set access policy as
{quote}keyname: key1
user:user1
permisssons: get create delete rollover{quote}
 
and when I use this user to rollover or delete key by hadoop command it will 
return error.

ERROR INFORMATION:
{quote}Rolling key version from KeyProvider: 
org.apache.hadoop.crypto.key.kms.LoadBalancingKMSClientP
  for key name: key1
Cannot roll key: key1 within KeyProvider: 
org.apache.hadoop.crypto.key.kms.LoadBalancingKMSC
roll  [-provider ] [-strict] [-help]:

The roll subcommand creates a new version for the specified key
within the provider indicated using the -provider argument.
If -strict is supplied, fail immediately if the provider requires
a password and none is given.
Executing command failed with the following exception: AuthorizationException: 
User:user1
{quote}

  was:
I set access policy as
{quote} {keyname: key1
user: user1
permissions:get create delete rollover
}{quote}
and when I use this user to rollover or delete key by hadoop command it will 
return error.

ERROR INFORMATION:
{quote}Rolling key version from KeyProvider: 
org.apache.hadoop.crypto.key.kms.LoadBalancingKMSClientP
  for key name: key1
Cannot roll key: key1 within KeyProvider: 
org.apache.hadoop.crypto.key.kms.LoadBalancingKMSC
roll  [-provider ] [-strict] [-help]:

The roll subcommand creates a new version for the specified key
within the provider indicated using the -provider argument.
If -strict is supplied, fail immediately if the provider requires
a password and none is given.
Executing command failed with the following exception: AuthorizationException: 
User:user1
{quote}


> return error using hadoop key roll command, when you set certian key ACL in 
> rangeradmin.
> 
>
> Key: RANGER-4202
> URL: https://issues.apache.org/jira/browse/RANGER-4202
> Project: Ranger
>  Issue Type: Bug
>  Components: kms
>Affects Versions: 2.3.0
>Reporter: rickboker
>Priority: Major
>
> I set access policy as
> {quote}keyname: key1
> user:user1
> permisssons: get create delete rollover{quote}
>  
> and when I use this user to rollover or delete key by hadoop command it will 
> return error.
> ERROR INFORMATION:
> {quote}Rolling key version from KeyProvider: 
> org.apache.hadoop.crypto.key.kms.LoadBalancingKMSClientP
>   for key name: key1
> Cannot roll key: key1 within KeyProvider: 
> org.apache.hadoop.crypto.key.kms.LoadBalancingKMSC
> roll  [-provider ] [-strict] [-help]:
> The roll subcommand creates a new version for the specified key
> within the provider indicated using the -provider argument.
> If -strict is supplied, fail immediately if the provider requires
> a password and none is given.
> Executing command failed with the following exception: 
> AuthorizationException: User:user1
> {quote}



--
This message was sent by Atlassian Jira
(v8.20.10#820010)


Re: Review Request 74410: RANGER-4198: fix to do SHAPSHOT deploy for - [BUILD] [JDK11] - Added Unix Native Authenticator' as part of jdk11 profile in pom.xml.

2023-04-23 Thread Madhan Neethiraj

---
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/74410/#review225407
---


Ship it!




Ship It!

- Madhan Neethiraj


On April 21, 2023, 11:37 a.m., Selvamohan Neethiraj wrote:
> 
> ---
> This is an automatically generated e-mail. To reply, visit:
> https://reviews.apache.org/r/74410/
> ---
> 
> (Updated April 21, 2023, 11:37 a.m.)
> 
> 
> Review request for ranger, Ankita Sinha, Don Bosco Durai, Abhay Kulkarni, 
> Madhan Neethiraj, Ramesh Mani, and Velmurugan Periasamy.
> 
> 
> Bugs: RANGER-4198
> https://issues.apache.org/jira/browse/RANGER-4198
> 
> 
> Repository: ranger
> 
> 
> Description
> ---
> 
> Added Unix Native Authenticator' as part of jdk11 profile in pom.xml and 
> tested via ci-builds.apache.org
> 
> 
> Diffs
> -
> 
>   pom.xml a2cf8a639 
> 
> 
> Diff: https://reviews.apache.org/r/74410/diff/1/
> 
> 
> Testing
> ---
> 
> tested via 
> https://ci-builds.apache.org/job/Ranger/job/ranger-master-snapshot-publish/774/
> 
> 
> Thanks,
> 
> Selvamohan Neethiraj
> 
>



[jira] [Reopened] (RANGER-4142) Update Apache Ranger website with 2.4.0

2023-04-23 Thread Selvamohan Neethiraj (Jira)


 [ 
https://issues.apache.org/jira/browse/RANGER-4142?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Selvamohan Neethiraj reopened RANGER-4142:
--

> Update Apache Ranger website with 2.4.0 
> 
>
> Key: RANGER-4142
> URL: https://issues.apache.org/jira/browse/RANGER-4142
> Project: Ranger
>  Issue Type: Sub-task
>  Components: Ranger
>Reporter: Selvamohan Neethiraj
>Assignee: Selvamohan Neethiraj
>Priority: Major
> Attachments: 
> 0001-RANGER-4142-added-docs-update-for-2.4.0-release-in-r.patch
>
>




--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[jira] [Updated] (RANGER-4201) Hbase master can't start due to ranger-hbase-plugin jersey jar conflict

2023-04-23 Thread caijialiang (Jira)


 [ 
https://issues.apache.org/jira/browse/RANGER-4201?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

caijialiang updated RANGER-4201:

Description: 
hbase version 2.4.13

ranger version 2.4

hbase  master can't start after installed ranger-hbase-plugin 

 
{code:java}
ERROR [master/gs-server-13481:16000:becomeActiveMaster] master.HMaster: * 
ABORTING master gs-server-13481,16000,1681377561702: The coprocessor 
org.apache.ranger.authorization.hbase.RangerAuthorizationCoprocessor threw 
java.lang.ExceptionInIniti
alizerError *
java.lang.ExceptionInInitializerError
        at 
com.sun.jersey.core.spi.factory.MessageBodyFactory.initReaders(MessageBodyFactory.java:182)
        at 
com.sun.jersey.core.spi.factory.MessageBodyFactory.initReaders(MessageBodyFactory.java:175)
        at 
com.sun.jersey.core.spi.factory.MessageBodyFactory.init(MessageBodyFactory.java:162)
        at com.sun.jersey.api.client.Client.init(Client.java:343)
        at com.sun.jersey.api.client.Client.access$000(Client.java:119)
        at com.sun.jersey.api.client.Client$1.f(Client.java:192)
        at com.sun.jersey.api.client.Client$1.f(Client.java:188)
        at com.sun.jersey.spi.inject.Errors.processWithErrors(Errors.java:193)
        at com.sun.jersey.api.client.Client.(Client.java:188)
        at com.sun.jersey.api.client.Client.(Client.java:171)
        at com.sun.jersey.api.client.Client.create(Client.java:683)
        at 
org.apache.ranger.plugin.util.RangerRESTClient.buildClient(RangerRESTClient.java:228)
        at 
org.apache.ranger.plugin.util.RangerRESTClient.getClient(RangerRESTClient.java:193)
        at 
org.apache.ranger.plugin.util.RangerRESTClient.get(RangerRESTClient.java:473)
        at 
org.apache.ranger.admin.client.RangerAdminRESTClient.getRangerRolesDownloadResponse(RangerAdminRESTClient.java:1340)
        at 
org.apache.ranger.admin.client.RangerAdminRESTClient.getRolesIfUpdatedWithCred(RangerAdminRESTClient.java:1202)
        at 
org.apache.ranger.admin.client.RangerAdminRESTClient.getRolesIfUpdated(RangerAdminRESTClient.java:167)
        at 
org.apache.ranger.plugin.util.RangerRolesProvider.loadUserGroupRolesFromAdmin(RangerRolesProvider.java:183)
        at 
org.apache.ranger.plugin.util.RangerRolesProvider.loadUserGroupRoles(RangerRolesProvider.java:123)
        at 
org.apache.ranger.plugin.util.PolicyRefresher.loadRoles(PolicyRefresher.java:495)
        at 
org.apache.ranger.plugin.util.PolicyRefresher.startRefresher(PolicyRefresher.java:144)
        at 
org.apache.ranger.plugin.service.RangerBasePlugin.init(RangerBasePlugin.java:245)
        at 
org.apache.ranger.authorization.hbase.RangerAuthorizationCoprocessor.start(RangerAuthorizationCoprocessor.java:1120)
        at 
org.apache.ranger.authorization.hbase.RangerAuthorizationCoprocessor.start(RangerAuthorizationCoprocessor.java:160)
        at 
org.apache.hadoop.hbase.coprocessor.BaseEnvironment.startup(BaseEnvironment.java:69)
        at 
org.apache.hadoop.hbase.coprocessor.CoprocessorHost.checkAndLoadInstance(CoprocessorHost.java:285)
        at 
org.apache.hadoop.hbase.coprocessor.CoprocessorHost.loadSystemCoprocessors(CoprocessorHost.java:171)
        at 
org.apache.hadoop.hbase.master.MasterCoprocessorHost.(MasterCoprocessorHost.java:155)
        at 
org.apache.hadoop.hbase.master.HMaster.initializeCoprocessorHost(HMaster.java:3870)
        at 
org.apache.hadoop.hbase.master.HMaster.finishActiveMasterInitialization(HMaster.java:902)
        at 
org.apache.hadoop.hbase.master.HMaster.startActiveMasterManager(HMaster.java:2175)
        at org.apache.hadoop.hbase.master.HMaster.lambda$run$0(HMaster.java:520)
        at java.lang.Thread.run(Thread.java:748)
Caused by: java.lang.RuntimeException: java.lang.ClassNotFoundException: 
org.glassfish.jersey.internal.RuntimeDelegateImpl
        at 
javax.ws.rs.ext.RuntimeDelegate.findDelegate(RuntimeDelegate.java:130)
        at javax.ws.rs.ext.RuntimeDelegate.getInstance(RuntimeDelegate.java:97)
        at javax.ws.rs.core.MediaType.valueOf(MediaType.java:172)
        at com.sun.jersey.core.header.MediaTypes.(MediaTypes.java:65)
        ... 33 more
Caused by: java.lang.ClassNotFoundException: 
org.glassfish.jersey.internal.RuntimeDelegateImpl
        at java.net.URLClassLoader.findClass(URLClassLoader.java:381)
        at java.lang.ClassLoader.loadClass(ClassLoader.java:424)
        at sun.misc.Launcher$AppClassLoader.loadClass(Launcher.java:338)
        at java.lang.ClassLoader.loadClass(ClassLoader.java:357)
        at java.lang.Class.forName0(Native Method)
        at java.lang.Class.forName(Class.java:264)
        at javax.ws.rs.ext.FactoryFinder.newInstance(FactoryFinder.java:87)
        at javax.ws.rs.ext.FactoryFinder.find(FactoryFinder.java:185)
        at 
javax.ws.rs.ext.RuntimeDelegate.findDelegate(RuntimeDelegate.java:112)
        ... 36 more
 {code}
 

The HBase library depends on the javax.ws.rs-api-2.1.1.jar which loads

[jira] [Updated] (RANGER-4139) DOC SITE: ranger.apache.org - revamp site's look and feel

2023-04-23 Thread Stalin Nadar (Jira)


 [ 
https://issues.apache.org/jira/browse/RANGER-4139?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Stalin Nadar updated RANGER-4139:
-
Attachment: 0001-RANGER-4139-Code-clean-up.patch

> DOC SITE: ranger.apache.org - revamp site's look and feel 
> --
>
> Key: RANGER-4139
> URL: https://issues.apache.org/jira/browse/RANGER-4139
> Project: Ranger
>  Issue Type: Improvement
>  Components: documentation
>Affects Versions: 3.0.0, 2.4.0
>Reporter: Selvamohan Neethiraj
>Assignee: Stalin Nadar
>Priority: Major
> Attachments: 0001-RANGER-4139-Code-clean-up.patch, 
> 0001-RANGER-4139-Updated-changes-with-both-patches.patch, image.png
>
>




--
This message was sent by Atlassian Jira
(v8.20.10#820010)