HiveServer2 won't start after changing Ranger's admin password

[#1]

Hello

HDP 2.3.2

Ambari 2.1.2.1

After changing the admin password of Ranger - both in the ranger UI and in the ambari under Advanced ranger-env the HiveServer2 fails to start. Ranger starts flawlessly - but HiveServer2 (which has Ranger authorization enabled) doesn't. If i disable the Ranger authorization from Hive (switching to none) HiveServer2 will start.

The error in the ambari is:

Traceback (most recent call last):
  File "/var/lib/ambari-agent/cache/common-services/HIVE/0.12.0.2.0/package/scripts/hive_server.py", line 193, in <module>
    HiveServer().execute()
  File "/usr/lib/python2.6/site-packages/resource_management/libraries/script/script.py", line 216, in execute
    method(env)
  File "/var/lib/ambari-agent/cache/common-services/HIVE/0.12.0.2.0/package/scripts/hive_server.py", line 85, in start
    setup_ranger_hive(rolling_upgrade=rolling_restart)
  File "/var/lib/ambari-agent/cache/common-services/HIVE/0.12.0.2.0/package/scripts/setup_ranger_hive.py", line 50, in setup_ranger_hive
    hdp_version_override = hdp_version)                 
  File "/usr/lib/python2.6/site-packages/resource_management/libraries/functions/setup_ranger_plugin_xml.py", line 78, in setup_ranger_plugin
    policy_user)
  File "/usr/lib/python2.6/site-packages/resource_management/libraries/functions/ranger_functions.py", line 92, in create_ranger_repository
    repo = self.get_repository_by_name_urllib2(repo_name, component, 'true', ambari_username_password_for_ranger)
  File "/usr/lib/python2.6/site-packages/resource_management/libraries/functions/ranger_functions.py", line 57, in get_repository_by_name_urllib2
    response = json.loads(result.read())
  File "/usr/lib/python2.6/site-packages/ambari_simplejson/__init__.py", line 307, in loads
    return _default_decoder.decode(s)
  File "/usr/lib/python2.6/site-packages/ambari_simplejson/decoder.py", line 335, in decode
    obj, end = self.raw_decode(s, idx=_w(s, 0).end())
  File "/usr/lib/python2.6/site-packages/ambari_simplejson/decoder.py", line 353, in raw_decode
    raise ValueError("No JSON object could be decoded")

I've noticed there's a registered bug around this issue but it is unassigned and unresolved -https://issues.apache.org/jira/browse/AMBARI-13168

Any ideas how to workaround this issue ??

[#2]

@Adi Jabkowsky I see that you accepted the answer. Were you able to resolve the issue? Looking forward to see the final fix 🙂

[#3]

@Adi Jabkowsky

I changed admin user password for ranger in Ranger UI

Logged into the ambari and updated only following entry with new password

restarted Namenode ...No issues

log http://pastebin.com/vYDY8QtE

[#4]

I was referring to HiveServer2 - not Namenode. In my scenario the Ranger is managing Hive authorization. So unless Hive isn't set to use Ranger - you won't have this issue.

[#5]

@Adi Jabkowsky Did you update password in one location or 2 locations as described in official docs?

I changed the password entry only for admin setting as shared in my screenshot.

Restarted Hive process using ambari and no issues with Ranger auth

[#6]

I updated the 2 locations as described in official docs. Not just one.

[#7]

@Adi Jabkowsky That's the issue.

1st one is for Ranger UI admin password

2nd one is for Ambari admin user entry 😉 Rollback the 2nd password change (Put ambari admin password there)

[#8]

Please check if Hive is set for Ranger (Under Security just like in my screenshot). It might be set to NONE or SQLstdAuth

[#9]

@Adi Jabkowsky No, its Ranger

[#10]

@Adi Jabkowsky See this thread too https://community.hortonworks.com/questions/1929/changing-ranger-ui-password-causing-namenode-issue....

[#11]

Tried every combination including reverting back to the default admin password in Ranger - still no luck. HiveServer2 won't start as long as it it's Auth are configured using Ranger. "No JSON object could be decoded"

😞

Thx a million for trying !