question Re: Ranger HDFS Policy not Syncing - No Trusted Cert Found in Archives of Support Questions (Read Only)

Ranger HDFS Policy not Syncing - No Trusted Cert Found

nicholas_pilegg — Tue, 31 Jan 2017 00:43:01 GMT

Hello,

After rolling out SSL to the Ranger Admin Page, I noticed my policy changes weren't syncing with the name nodes. I found I needed to setup the plugin for SSL. I followed these procedures (https://docs.hortonworks.com/HDPDocuments/HDP2/HDP-2.5.0/bk_security/content/ch04s19s02s04s01.html) and had nothing. After looking at the namenode logs I see the error message saying:

com.sun.jersey.api.client.ClientHandlerException: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: No trusted certificate found at com.sun.jersey.client.urlconnection.URLConnectionClientHandler.handle(URLConnectionClientHandler.java:149)

I am not quite sure where else to look.

Nick

Re: Ranger HDFS Policy not Syncing - No Trusted Cert Found

apappu — Tue, 31 Jan 2017 01:38:09 GMT

@Nick Pileggi

Yes, you will have to put the Ranger Cert into HDFS truststore,. also by default it enables 2 way SSL between Ranger admin and HDFS plug-in.

Some time back I have written article here with complete steps.

https://community.hortonworks.com/articles/68150/configuring-ranger-ranger-hdfs-plugin-for-ssl-with.html

Re: Ranger HDFS Policy not Syncing - No Trusted Cert Found

vperiasamy — Tue, 31 Jan 2017 02:19:53 GMT

If you enable SSL on ranger, you need to update the truststore.

Please refer http://docs.hortonworks.com/HDPDocuments/HDP2/HDP-2.5.3/bk_security/content/configure_ambari_ranger_ssl.html

Re: Ranger HDFS Policy not Syncing - No Trusted Cert Found

nicholas_pilegg — Tue, 31 Jan 2017 02:25:55 GMT

@apappu

That was the hint I needed. It appears I had a keystore set for my HDFS ranger truststore. So no matter what I did, I would be unable to fix it. Once I corrected that issue, I see my namenode pulling the policy. Glad it was something stupid.

Nick