[jira] [Created] (RANGER-4201) Hbase master can't start due to ranger-hbase-plugin jersey jar conflict
caijialiang created RANGER-4201: --- Summary: Hbase master can't start due to ranger-hbase-plugin jersey jar conflict Key: RANGER-4201 URL: https://issues.apache.org/jira/browse/RANGER-4201 Project: Ranger Issue Type: Bug Components: Ranger Affects Versions: 2.4.0, 2.3.0 Reporter: caijialiang hbase version 2.4.13 ranger version 2.4 hbase master can't start after installed ranger-hbase-plugin {code:java} ERROR [master/gs-server-13481:16000:becomeActiveMaster] master.HMaster: * ABORTING master gs-server-13481,16000,1681377561702: The coprocessor org.apache.ranger.authorization.hbase.RangerAuthorizationCoprocessor threw java.lang.ExceptionInIniti alizerError * java.lang.ExceptionInInitializerError at com.sun.jersey.core.spi.factory.MessageBodyFactory.initReaders(MessageBodyFactory.java:182) at com.sun.jersey.core.spi.factory.MessageBodyFactory.initReaders(MessageBodyFactory.java:175) at com.sun.jersey.core.spi.factory.MessageBodyFactory.init(MessageBodyFactory.java:162) at com.sun.jersey.api.client.Client.init(Client.java:343) at com.sun.jersey.api.client.Client.access$000(Client.java:119) at com.sun.jersey.api.client.Client$1.f(Client.java:192) at com.sun.jersey.api.client.Client$1.f(Client.java:188) at com.sun.jersey.spi.inject.Errors.processWithErrors(Errors.java:193) at com.sun.jersey.api.client.Client.(Client.java:188) at com.sun.jersey.api.client.Client.(Client.java:171) at com.sun.jersey.api.client.Client.create(Client.java:683) at org.apache.ranger.plugin.util.RangerRESTClient.buildClient(RangerRESTClient.java:228) at org.apache.ranger.plugin.util.RangerRESTClient.getClient(RangerRESTClient.java:193) at org.apache.ranger.plugin.util.RangerRESTClient.get(RangerRESTClient.java:473) at org.apache.ranger.admin.client.RangerAdminRESTClient.getRangerRolesDownloadResponse(RangerAdminRESTClient.java:1340) at org.apache.ranger.admin.client.RangerAdminRESTClient.getRolesIfUpdatedWithCred(RangerAdminRESTClient.java:1202) at org.apache.ranger.admin.client.RangerAdminRESTClient.getRolesIfUpdated(RangerAdminRESTClient.java:167) at org.apache.ranger.plugin.util.RangerRolesProvider.loadUserGroupRolesFromAdmin(RangerRolesProvider.java:183) at org.apache.ranger.plugin.util.RangerRolesProvider.loadUserGroupRoles(RangerRolesProvider.java:123) at org.apache.ranger.plugin.util.PolicyRefresher.loadRoles(PolicyRefresher.java:495) at org.apache.ranger.plugin.util.PolicyRefresher.startRefresher(PolicyRefresher.java:144) at org.apache.ranger.plugin.service.RangerBasePlugin.init(RangerBasePlugin.java:245) at org.apache.ranger.authorization.hbase.RangerAuthorizationCoprocessor.start(RangerAuthorizationCoprocessor.java:1120) at org.apache.ranger.authorization.hbase.RangerAuthorizationCoprocessor.start(RangerAuthorizationCoprocessor.java:160) at org.apache.hadoop.hbase.coprocessor.BaseEnvironment.startup(BaseEnvironment.java:69) at org.apache.hadoop.hbase.coprocessor.CoprocessorHost.checkAndLoadInstance(CoprocessorHost.java:285) at org.apache.hadoop.hbase.coprocessor.CoprocessorHost.loadSystemCoprocessors(CoprocessorHost.java:171) at org.apache.hadoop.hbase.master.MasterCoprocessorHost.(MasterCoprocessorHost.java:155) at org.apache.hadoop.hbase.master.HMaster.initializeCoprocessorHost(HMaster.java:3870) at org.apache.hadoop.hbase.master.HMaster.finishActiveMasterInitialization(HMaster.java:902) at org.apache.hadoop.hbase.master.HMaster.startActiveMasterManager(HMaster.java:2175) at org.apache.hadoop.hbase.master.HMaster.lambda$run$0(HMaster.java:520) at java.lang.Thread.run(Thread.java:748) Caused by: java.lang.RuntimeException: java.lang.ClassNotFoundException: org.glassfish.jersey.internal.RuntimeDelegateImpl at javax.ws.rs.ext.RuntimeDelegate.findDelegate(RuntimeDelegate.java:130) at javax.ws.rs.ext.RuntimeDelegate.getInstance(RuntimeDelegate.java:97) at javax.ws.rs.core.MediaType.valueOf(MediaType.java:172) at com.sun.jersey.core.header.MediaTypes.(MediaTypes.java:65) ... 33 more Caused by: java.lang.ClassNotFoundException: org.glassfish.jersey.internal.RuntimeDelegateImpl at java.net.URLClassLoader.findClass(URLClassLoader.java:381) at java.lang.ClassLoader.loadClass(ClassLoader.java:424) at sun.misc.Launcher$AppClassLoader.loadClass(Launcher.java:338) at java.lang.ClassLoader.loadClass(ClassLoader.java:357) at java.lang.Class.forName0(Native Method) at java.lang.Class.forName(Class.java:264) at javax.ws.rs.ext.FactoryFinder.newInstance(FactoryFinder.java:87) at javax.ws.rs.ext.FactoryFinder.
[jira] [Created] (RANGER-4202) return error using hadoop key roll command, when you set certian key ACL in rangeradmin.
rickboker created RANGER-4202: - Summary: return error using hadoop key roll command, when you set certian key ACL in rangeradmin. Key: RANGER-4202 URL: https://issues.apache.org/jira/browse/RANGER-4202 Project: Ranger Issue Type: Bug Components: kms Affects Versions: 2.3.0 Reporter: rickboker I set access policy as {quote}{keyname: key1 user: user1 permissions: create get delete rollover } {quote} and when I use this user to rollover or delete key by hadoop command it will return error. ERROR INFORMATION: {quote}Rolling key version from KeyProvider: org.apache.hadoop.crypto.key.kms.LoadBalancingKMSClientP for key name: key1 Cannot roll key: key1 within KeyProvider: org.apache.hadoop.crypto.key.kms.LoadBalancingKMSC roll [-provider ] [-strict] [-help]: The roll subcommand creates a new version for the specified key within the provider indicated using the -provider argument. If -strict is supplied, fail immediately if the provider requires a password and none is given. Executing command failed with the following exception: AuthorizationException: User:user1 {quote} -- This message was sent by Atlassian Jira (v8.20.10#820010)
[jira] [Updated] (RANGER-4202) return error using hadoop key roll command, when you set certian key ACL in rangeradmin.
[ https://issues.apache.org/jira/browse/RANGER-4202?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] rickboker updated RANGER-4202: -- Description: I set access policy as {quote} {keyname: key1 user: user1 permissions:get create delete rollover }{quote} and when I use this user to rollover or delete key by hadoop command it will return error. ERROR INFORMATION: {quote}Rolling key version from KeyProvider: org.apache.hadoop.crypto.key.kms.LoadBalancingKMSClientP for key name: key1 Cannot roll key: key1 within KeyProvider: org.apache.hadoop.crypto.key.kms.LoadBalancingKMSC roll [-provider ] [-strict] [-help]: The roll subcommand creates a new version for the specified key within the provider indicated using the -provider argument. If -strict is supplied, fail immediately if the provider requires a password and none is given. Executing command failed with the following exception: AuthorizationException: User:user1 {quote} was: I set access policy as {quote}{keyname: key1 user: user1 permissions: create get delete rollover } {quote} and when I use this user to rollover or delete key by hadoop command it will return error. ERROR INFORMATION: {quote}Rolling key version from KeyProvider: org.apache.hadoop.crypto.key.kms.LoadBalancingKMSClientP for key name: key1 Cannot roll key: key1 within KeyProvider: org.apache.hadoop.crypto.key.kms.LoadBalancingKMSC roll [-provider ] [-strict] [-help]: The roll subcommand creates a new version for the specified key within the provider indicated using the -provider argument. If -strict is supplied, fail immediately if the provider requires a password and none is given. Executing command failed with the following exception: AuthorizationException: User:user1 {quote} > return error using hadoop key roll command, when you set certian key ACL in > rangeradmin. > > > Key: RANGER-4202 > URL: https://issues.apache.org/jira/browse/RANGER-4202 > Project: Ranger > Issue Type: Bug > Components: kms >Affects Versions: 2.3.0 >Reporter: rickboker >Priority: Major > > I set access policy as > {quote} {keyname: key1 > user: user1 > permissions:get create delete rollover > }{quote} > and when I use this user to rollover or delete key by hadoop command it will > return error. > ERROR INFORMATION: > {quote}Rolling key version from KeyProvider: > org.apache.hadoop.crypto.key.kms.LoadBalancingKMSClientP > for key name: key1 > Cannot roll key: key1 within KeyProvider: > org.apache.hadoop.crypto.key.kms.LoadBalancingKMSC > roll [-provider ] [-strict] [-help]: > The roll subcommand creates a new version for the specified key > within the provider indicated using the -provider argument. > If -strict is supplied, fail immediately if the provider requires > a password and none is given. > Executing command failed with the following exception: > AuthorizationException: User:user1 > {quote} -- This message was sent by Atlassian Jira (v8.20.10#820010)
[jira] [Updated] (RANGER-4202) return error using hadoop key roll command, when you set certian key ACL in rangeradmin.
[ https://issues.apache.org/jira/browse/RANGER-4202?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] rickboker updated RANGER-4202: -- Description: I set access policy as {quote}keyname: key1 user:user1 permisssons: get create delete rollover{quote} and when I use this user to rollover or delete key by hadoop command it will return error. ERROR INFORMATION: {quote}Rolling key version from KeyProvider: org.apache.hadoop.crypto.key.kms.LoadBalancingKMSClientP for key name: key1 Cannot roll key: key1 within KeyProvider: org.apache.hadoop.crypto.key.kms.LoadBalancingKMSC roll [-provider ] [-strict] [-help]: The roll subcommand creates a new version for the specified key within the provider indicated using the -provider argument. If -strict is supplied, fail immediately if the provider requires a password and none is given. Executing command failed with the following exception: AuthorizationException: User:user1 {quote} was: I set access policy as {quote} {keyname: key1 user: user1 permissions:get create delete rollover }{quote} and when I use this user to rollover or delete key by hadoop command it will return error. ERROR INFORMATION: {quote}Rolling key version from KeyProvider: org.apache.hadoop.crypto.key.kms.LoadBalancingKMSClientP for key name: key1 Cannot roll key: key1 within KeyProvider: org.apache.hadoop.crypto.key.kms.LoadBalancingKMSC roll [-provider ] [-strict] [-help]: The roll subcommand creates a new version for the specified key within the provider indicated using the -provider argument. If -strict is supplied, fail immediately if the provider requires a password and none is given. Executing command failed with the following exception: AuthorizationException: User:user1 {quote} > return error using hadoop key roll command, when you set certian key ACL in > rangeradmin. > > > Key: RANGER-4202 > URL: https://issues.apache.org/jira/browse/RANGER-4202 > Project: Ranger > Issue Type: Bug > Components: kms >Affects Versions: 2.3.0 >Reporter: rickboker >Priority: Major > > I set access policy as > {quote}keyname: key1 > user:user1 > permisssons: get create delete rollover{quote} > > and when I use this user to rollover or delete key by hadoop command it will > return error. > ERROR INFORMATION: > {quote}Rolling key version from KeyProvider: > org.apache.hadoop.crypto.key.kms.LoadBalancingKMSClientP > for key name: key1 > Cannot roll key: key1 within KeyProvider: > org.apache.hadoop.crypto.key.kms.LoadBalancingKMSC > roll [-provider ] [-strict] [-help]: > The roll subcommand creates a new version for the specified key > within the provider indicated using the -provider argument. > If -strict is supplied, fail immediately if the provider requires > a password and none is given. > Executing command failed with the following exception: > AuthorizationException: User:user1 > {quote} -- This message was sent by Atlassian Jira (v8.20.10#820010)
Re: Review Request 74410: RANGER-4198: fix to do SHAPSHOT deploy for - [BUILD] [JDK11] - Added Unix Native Authenticator' as part of jdk11 profile in pom.xml.
--- This is an automatically generated e-mail. To reply, visit: https://reviews.apache.org/r/74410/#review225407 --- Ship it! Ship It! - Madhan Neethiraj On April 21, 2023, 11:37 a.m., Selvamohan Neethiraj wrote: > > --- > This is an automatically generated e-mail. To reply, visit: > https://reviews.apache.org/r/74410/ > --- > > (Updated April 21, 2023, 11:37 a.m.) > > > Review request for ranger, Ankita Sinha, Don Bosco Durai, Abhay Kulkarni, > Madhan Neethiraj, Ramesh Mani, and Velmurugan Periasamy. > > > Bugs: RANGER-4198 > https://issues.apache.org/jira/browse/RANGER-4198 > > > Repository: ranger > > > Description > --- > > Added Unix Native Authenticator' as part of jdk11 profile in pom.xml and > tested via ci-builds.apache.org > > > Diffs > - > > pom.xml a2cf8a639 > > > Diff: https://reviews.apache.org/r/74410/diff/1/ > > > Testing > --- > > tested via > https://ci-builds.apache.org/job/Ranger/job/ranger-master-snapshot-publish/774/ > > > Thanks, > > Selvamohan Neethiraj > >
[jira] [Reopened] (RANGER-4142) Update Apache Ranger website with 2.4.0
[ https://issues.apache.org/jira/browse/RANGER-4142?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Selvamohan Neethiraj reopened RANGER-4142: -- > Update Apache Ranger website with 2.4.0 > > > Key: RANGER-4142 > URL: https://issues.apache.org/jira/browse/RANGER-4142 > Project: Ranger > Issue Type: Sub-task > Components: Ranger >Reporter: Selvamohan Neethiraj >Assignee: Selvamohan Neethiraj >Priority: Major > Attachments: > 0001-RANGER-4142-added-docs-update-for-2.4.0-release-in-r.patch > > -- This message was sent by Atlassian Jira (v8.20.10#820010)
[jira] [Updated] (RANGER-4201) Hbase master can't start due to ranger-hbase-plugin jersey jar conflict
[ https://issues.apache.org/jira/browse/RANGER-4201?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] caijialiang updated RANGER-4201: Description: hbase version 2.4.13 ranger version 2.4 hbase master can't start after installed ranger-hbase-plugin {code:java} ERROR [master/gs-server-13481:16000:becomeActiveMaster] master.HMaster: * ABORTING master gs-server-13481,16000,1681377561702: The coprocessor org.apache.ranger.authorization.hbase.RangerAuthorizationCoprocessor threw java.lang.ExceptionInIniti alizerError * java.lang.ExceptionInInitializerError at com.sun.jersey.core.spi.factory.MessageBodyFactory.initReaders(MessageBodyFactory.java:182) at com.sun.jersey.core.spi.factory.MessageBodyFactory.initReaders(MessageBodyFactory.java:175) at com.sun.jersey.core.spi.factory.MessageBodyFactory.init(MessageBodyFactory.java:162) at com.sun.jersey.api.client.Client.init(Client.java:343) at com.sun.jersey.api.client.Client.access$000(Client.java:119) at com.sun.jersey.api.client.Client$1.f(Client.java:192) at com.sun.jersey.api.client.Client$1.f(Client.java:188) at com.sun.jersey.spi.inject.Errors.processWithErrors(Errors.java:193) at com.sun.jersey.api.client.Client.(Client.java:188) at com.sun.jersey.api.client.Client.(Client.java:171) at com.sun.jersey.api.client.Client.create(Client.java:683) at org.apache.ranger.plugin.util.RangerRESTClient.buildClient(RangerRESTClient.java:228) at org.apache.ranger.plugin.util.RangerRESTClient.getClient(RangerRESTClient.java:193) at org.apache.ranger.plugin.util.RangerRESTClient.get(RangerRESTClient.java:473) at org.apache.ranger.admin.client.RangerAdminRESTClient.getRangerRolesDownloadResponse(RangerAdminRESTClient.java:1340) at org.apache.ranger.admin.client.RangerAdminRESTClient.getRolesIfUpdatedWithCred(RangerAdminRESTClient.java:1202) at org.apache.ranger.admin.client.RangerAdminRESTClient.getRolesIfUpdated(RangerAdminRESTClient.java:167) at org.apache.ranger.plugin.util.RangerRolesProvider.loadUserGroupRolesFromAdmin(RangerRolesProvider.java:183) at org.apache.ranger.plugin.util.RangerRolesProvider.loadUserGroupRoles(RangerRolesProvider.java:123) at org.apache.ranger.plugin.util.PolicyRefresher.loadRoles(PolicyRefresher.java:495) at org.apache.ranger.plugin.util.PolicyRefresher.startRefresher(PolicyRefresher.java:144) at org.apache.ranger.plugin.service.RangerBasePlugin.init(RangerBasePlugin.java:245) at org.apache.ranger.authorization.hbase.RangerAuthorizationCoprocessor.start(RangerAuthorizationCoprocessor.java:1120) at org.apache.ranger.authorization.hbase.RangerAuthorizationCoprocessor.start(RangerAuthorizationCoprocessor.java:160) at org.apache.hadoop.hbase.coprocessor.BaseEnvironment.startup(BaseEnvironment.java:69) at org.apache.hadoop.hbase.coprocessor.CoprocessorHost.checkAndLoadInstance(CoprocessorHost.java:285) at org.apache.hadoop.hbase.coprocessor.CoprocessorHost.loadSystemCoprocessors(CoprocessorHost.java:171) at org.apache.hadoop.hbase.master.MasterCoprocessorHost.(MasterCoprocessorHost.java:155) at org.apache.hadoop.hbase.master.HMaster.initializeCoprocessorHost(HMaster.java:3870) at org.apache.hadoop.hbase.master.HMaster.finishActiveMasterInitialization(HMaster.java:902) at org.apache.hadoop.hbase.master.HMaster.startActiveMasterManager(HMaster.java:2175) at org.apache.hadoop.hbase.master.HMaster.lambda$run$0(HMaster.java:520) at java.lang.Thread.run(Thread.java:748) Caused by: java.lang.RuntimeException: java.lang.ClassNotFoundException: org.glassfish.jersey.internal.RuntimeDelegateImpl at javax.ws.rs.ext.RuntimeDelegate.findDelegate(RuntimeDelegate.java:130) at javax.ws.rs.ext.RuntimeDelegate.getInstance(RuntimeDelegate.java:97) at javax.ws.rs.core.MediaType.valueOf(MediaType.java:172) at com.sun.jersey.core.header.MediaTypes.(MediaTypes.java:65) ... 33 more Caused by: java.lang.ClassNotFoundException: org.glassfish.jersey.internal.RuntimeDelegateImpl at java.net.URLClassLoader.findClass(URLClassLoader.java:381) at java.lang.ClassLoader.loadClass(ClassLoader.java:424) at sun.misc.Launcher$AppClassLoader.loadClass(Launcher.java:338) at java.lang.ClassLoader.loadClass(ClassLoader.java:357) at java.lang.Class.forName0(Native Method) at java.lang.Class.forName(Class.java:264) at javax.ws.rs.ext.FactoryFinder.newInstance(FactoryFinder.java:87) at javax.ws.rs.ext.FactoryFinder.find(FactoryFinder.java:185) at javax.ws.rs.ext.RuntimeDelegate.findDelegate(RuntimeDelegate.java:112) ... 36 more {code} The HBase library depends on the javax.ws.rs-api-2.1.1.jar which loads
[jira] [Updated] (RANGER-4139) DOC SITE: ranger.apache.org - revamp site's look and feel
[ https://issues.apache.org/jira/browse/RANGER-4139?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Stalin Nadar updated RANGER-4139: - Attachment: 0001-RANGER-4139-Code-clean-up.patch > DOC SITE: ranger.apache.org - revamp site's look and feel > -- > > Key: RANGER-4139 > URL: https://issues.apache.org/jira/browse/RANGER-4139 > Project: Ranger > Issue Type: Improvement > Components: documentation >Affects Versions: 3.0.0, 2.4.0 >Reporter: Selvamohan Neethiraj >Assignee: Stalin Nadar >Priority: Major > Attachments: 0001-RANGER-4139-Code-clean-up.patch, > 0001-RANGER-4139-Updated-changes-with-both-patches.patch, image.png > > -- This message was sent by Atlassian Jira (v8.20.10#820010)