https://community.cloudera.com/t5/Support-Questions/How-to-make-kafka-plugin-communicate-with-policy-manager-url/m-p/368308#M240123 <P><a href="https://community.cloudera.com/t5/user/viewprofilepage/user-id/102134">@aleezeh</a>&nbsp;Letus know if you also getting this error&nbsp;</P><PRE><SPAN>unable to find valid certification path to requested target.</SPAN></PRE><P>If yes there could be chances that kafka truststore does not have ranger admin certificate you can import the ranger admin certificate to kafka truststore.&nbsp;</P><P>&nbsp;</P><DIV class="c-virtual_list__item c-virtual_list__item--initial-activeitem"><DIV class="c-message_kit__background c-message_kit__background--hovered c-message_kit__background--highlight p-message_pane_message__message c-message_kit__message"><DIV class="c-message_kit__hover c-message_kit__hover--hovered"><DIV class="c-message_kit__actions c-message_kit__actions--default"><DIV class="c-message_kit__gutter"><DIV class="c-message_kit__gutter__right"><DIV class="c-message_kit__blocks c-message_kit__blocks--rich_text"><DIV class="c-message__message_blocks c-message__message_blocks--rich_text"><DIV class="p-block_kit_renderer"><DIV class="p-block_kit_renderer__block_wrapper p-block_kit_renderer__block_wrapper--first"><DIV class="p-rich_text_block"><PRE>keytool -importcert -file /tmp/ranger.cer -keystore kafka_plugin_truststore.jks</PRE></DIV></DIV></DIV></DIV></DIV></DIV></DIV></DIV></DIV></DIV></DIV><P>&nbsp;</P><P><BR />If you found that the provided solution(s) assisted you with your query, please take a moment to login and click Accept as Solution below each response that helped.</P> Wed, 12 Apr 2023 09:07:46 GMT Kartik_Agarwal 2023-04-12T09:07:46Z https://community.cloudera.com/t5/Support-Questions/How-to-make-kafka-plugin-communicate-with-policy-manager-url/m-p/366439#M239580 <P>Im trying to make kafka ranger plugin communicate with the policy manager url over ssl, i have the truststore and keystore jks file but im getting PKIX path building failed, i know this error usually is visible when the files are not in the right place. I am using original ranger repository, please let me know where are we supposed to keep the files?</P> Mon, 20 Mar 2023 06:44:32 GMT https://community.cloudera.com/t5/Support-Questions/How-to-make-kafka-plugin-communicate-with-policy-manager-url/m-p/366439#M239580 aleezeh 2023-03-20T06:44:32Z https://community.cloudera.com/t5/Support-Questions/How-to-make-kafka-plugin-communicate-with-policy-manager-url/m-p/366467#M239589 <P>If its a CDP env, this article&nbsp; :&nbsp;<A href="https://docs.cloudera.com/cdp-private-cloud-base/7.1.6/security-ranger-configuring-advanced/topics/security-ranger-configure-tls-ssl.html" target="_blank">https://docs.cloudera.com/cdp-private-cloud-base/7.1.6/security-ranger-configuring-advanced/topics/security-ranger-configure-tls-ssl.html</A>&nbsp;might help with steps.&nbsp;</P> Mon, 20 Mar 2023 08:58:00 GMT https://community.cloudera.com/t5/Support-Questions/How-to-make-kafka-plugin-communicate-with-policy-manager-url/m-p/366467#M239589 xsmehul 2023-03-20T08:58:00Z https://community.cloudera.com/t5/Support-Questions/How-to-make-kafka-plugin-communicate-with-policy-manager-url/m-p/368308#M240123 <P><a href="https://community.cloudera.com/t5/user/viewprofilepage/user-id/102134">@aleezeh</a>&nbsp;Letus know if you also getting this error&nbsp;</P><PRE><SPAN>unable to find valid certification path to requested target.</SPAN></PRE><P>If yes there could be chances that kafka truststore does not have ranger admin certificate you can import the ranger admin certificate to kafka truststore.&nbsp;</P><P>&nbsp;</P><DIV class="c-virtual_list__item c-virtual_list__item--initial-activeitem"><DIV class="c-message_kit__background c-message_kit__background--hovered c-message_kit__background--highlight p-message_pane_message__message c-message_kit__message"><DIV class="c-message_kit__hover c-message_kit__hover--hovered"><DIV class="c-message_kit__actions c-message_kit__actions--default"><DIV class="c-message_kit__gutter"><DIV class="c-message_kit__gutter__right"><DIV class="c-message_kit__blocks c-message_kit__blocks--rich_text"><DIV class="c-message__message_blocks c-message__message_blocks--rich_text"><DIV class="p-block_kit_renderer"><DIV class="p-block_kit_renderer__block_wrapper p-block_kit_renderer__block_wrapper--first"><DIV class="p-rich_text_block"><PRE>keytool -importcert -file /tmp/ranger.cer -keystore kafka_plugin_truststore.jks</PRE></DIV></DIV></DIV></DIV></DIV></DIV></DIV></DIV></DIV></DIV></DIV><P>&nbsp;</P><P><BR />If you found that the provided solution(s) assisted you with your query, please take a moment to login and click Accept as Solution below each response that helped.</P> Wed, 12 Apr 2023 09:07:46 GMT https://community.cloudera.com/t5/Support-Questions/How-to-make-kafka-plugin-communicate-with-policy-manager-url/m-p/368308#M240123 Kartik_Agarwal 2023-04-12T09:07:46Z