I'm attempting to set up 2 way SSL between Ranger Admin and the Ranger HDFS Plugin.
Ranger Admin works without issue, but the HDFS plugin is not able to communicate properly to Ranger Admin via SSL, and Ranger HDFS policies do not get applied. Main error message from /var/log/ranger/admin/xa_portal.log:
[http-xxx-xxxx-exec-1] INFO org.apache.ranger.common.RESTErrorUtil (RESTErrorUtil.java:345) - Request failed. loginId=null, logMessage=VXResponse={org.apache.ranger.view.VXResponse@7bed9b22statusCode={1} msgDesc={Unauthorized access - unable to get client certificate} messageList={[VXMessage={org.apache.ranger.view.VXMessage@72ecb1bfname={OPER_NOT_ALLOWED_FOR_ENTITY} rbKey={xa.error.oper_not_allowed_for_state} message={Operation not allowed for entity} objectId={null} fieldName={null} }]} }javax.ws.rs.WebApplicationException
Is there something in particular I am missing?
References for steps followed:
1)
https://docs.cloudera.com/HDPDocuments/HDP3/HDP-3.1.5/configuring-wire-encryption/content/self_signe...
2)
https://www.youtube.com/watch?v=g6m-LII4zjE&feature=emb_title
3)
https://www.ibm.com/support/knowledgecenter/SSPT3X_4.2.0/com.ibm.swg.im.infosphere.biginsights.admin...
Thanks
Braz
