https://community.cloudera.com/t5/Support-Questions/Ranger-hive-plugin-issue-Unable-to-get-client-certificate/m-p/227526#M189386 <P>Hi all</P><P>I have hdp 2.6.3 with ranger security ssl enabled and plugins(hdfs, yarn and hive) enabled</P><P>hive plugin not works here is hiveserver2.log:</P><PRE>2018-02-16 17:34:00,920 WARN [Thread-14]: client.RangerAdminRESTClient (RangerAdminRESTClient.java:getServicePoliciesIfUpdated(162)) - Error getting policies. secureMode=false, user=hive (auth:SIMPLE), response={"httpStatusCode":400,"statusCode":0}, serviceName=hive</PRE><P>and /var/log/ranger/admin/xa_portal.log:</P><PRE>2018-02-16 08:27:59,754 [http-bio-6182-exec-28] ERROR org.apache.ranger.common.ServiceUtil (ServiceUtil.java:1359) - Requested Service not found. serviceName=hive</PRE><P>I am almost 99% sure that all configurations have done correctly from ambari(because other plugins are working properly), also searched on google wondering what I have missed, but was not able to find useful information</P><P>P.S. I have configured ranger.plugin.hive.policy.rest.ssl.config.file = /usr/hdp/current/hive-client/conf/conf.server/ranger-policymgr-ssl.xml</P><P>which conatins all information about keystores and truststores, also I am sure that keystore file passwords are correct(checked many times)</P><P>here is the file ranger-policymgr-ssl.xml</P><PRE> &lt;configuration&gt; &lt;property&gt; &lt;name&gt;xasecure.policymgr.clientssl.keystore&lt;/name&gt; &lt;value&gt;/etc/security/key.jks&lt;/value&gt; &lt;/property&gt; &lt;property&gt; &lt;name&gt;xasecure.policymgr.clientssl.keystore.credential.file&lt;/name&gt; &lt;value&gt;jceks://file/etc/ranger/hive/cred.jceks&lt;/value&gt; &lt;/property&gt; &lt;property&gt; &lt;name&gt;xasecure.policymgr.clientssl.keystore.password&lt;/name&gt; &lt;value&gt;crypted&lt;/value&gt; &lt;/property&gt; &lt;property&gt; &lt;name&gt;xasecure.policymgr.clientssl.truststore&lt;/name&gt; &lt;value&gt;/etc/security/trust.jks&lt;/value&gt; &lt;/property&gt; &lt;property&gt; &lt;name&gt;xasecure.policymgr.clientssl.truststore.credential.file&lt;/name&gt; &lt;value&gt;jceks://file/etc/ranger/hive/cred.jceks&lt;/value&gt; &lt;/property&gt; &lt;property&gt; &lt;name&gt;xasecure.policymgr.clientssl.truststore.password&lt;/name&gt; &lt;value&gt;crypted&lt;/value&gt; &lt;/property&gt; </PRE><P>do you have any idea what I miss and how can I fix this?</P><P>Thank you</P> Fri, 16 Feb 2018 23:26:40 GMT shota 2018-02-16T23:26:40Z