Skip to main content
Ani1991
Bronze ⭐️⭐️⭐️
November 16, 2021
Solved

Ranger Service test connection failed

Tried testing the ranger service connection and it is getting failed  with message "JAAS configuration missing or not correct in Ranger"

 

Ranger-admin log:

2021-11-16 12:00:58,661 ERROR org.apache.ranger.services.kafka.RangerServiceKafka: <== RangerServiceKafka.validateConfig Error:java.lang.Exception: JAAS configuration missing or not correct in Ranger Kafka Service...bootstrap.servers,security.protocol,sasl.mechanism,kafka.keytab,kafka.principal
2021-11-16 12:00:58,661 ERROR org.apache.ranger.biz.ServiceMgr: TimedCallable.call: Error:java.lang.Exception: JAAS configuration missing or not correct in Ranger Kafka Service...bootstrap.servers,security.protocol,sasl.mechanism,kafka.keytab,kafka.principal
2021-11-16 12:00:58,662 ERROR org.apache.ranger.biz.ServiceMgr: ==> ServiceMgr.validateConfig Error:org.apache.ranger.plugin.client.HadoopException: java.lang.Exception: JAAS configuration missing or not correct in Ranger Kafka Service...bootstrap.servers,security.protocol,sasl.mechanism,kafka.keytab,kafka.principal

 

Is jaas file created automatically on ranger.?

 

cloudMaanger: 7.5.1

Parcel Version: 7.1.7-1.cdh7.1.7.p0.15945976

Ani1991_0-1637066624397.png

 

arunek95
arunek95Answer
Gold ⭐️
November 18, 2021

Hi @Ani1991 ,

Suspecting Kerberos related parameters are incorrectly configured in the Kafka service repo in Ranger.

Can you please try the below solution :

 

 

-- Ranager Admin UI > edit kafka service repo cm_kafka > Add configs in "Add New Configurations"

-- Add below configs. (Change the config accordingly) for protocol

 

bootstrap.servers <kafkaBroker>:Port

security.protocol SASL_PLAINTEXT

sasl.mechanism GSSAPI

kafka.keytab <keytab>

kafka.principal <prinicipal>

 

This config needs a kafka keytab  path , copy kafka keytab to ranger admin host with ranger:ranger permissions set.

1 reply

arunek95
Gold ⭐️
arunek95Answer
Gold ⭐️
November 18, 2021

Hi @Ani1991 ,

Suspecting Kerberos related parameters are incorrectly configured in the Kafka service repo in Ranger.

Can you please try the below solution :

 

 

-- Ranager Admin UI > edit kafka service repo cm_kafka > Add configs in "Add New Configurations"

-- Add below configs. (Change the config accordingly) for protocol

 

bootstrap.servers <kafkaBroker>:Port

security.protocol SASL_PLAINTEXT

sasl.mechanism GSSAPI

kafka.keytab <keytab>

kafka.principal <prinicipal>

 

This config needs a kafka keytab  path , copy kafka keytab to ranger admin host with ranger:ranger permissions set.

Translate