Support Questions
Find answers, ask questions, and share your expertise

Ranger admin fails with "java patch PatchPasswordEncryption_J10001 is being applied" error

New Contributor

I am configuring HDP 2.6.1 cluster in AWS using cloudbreak and RDS MySQL DB for Ranger and Hive. Hive works fine after providing the RDS MySQL endpoint and user information, but Ranger admin fails with error message as below

2018-10-09 14:25:07,606 [I] --------- Verifying Ranger DB connection --------- 2018-10-09 14:25:07,606 [I] Checking connection.. 2018-10-09 14:25:07,606 [JISQL] /usr/lib/jvm/java/bin/java -cp /usr/hdp/current/ranger-admin/ews/lib/mysql-connector-java-8.0.12.jar:/usr/hdp/current/ranger-admin/jisql/lib/* org.apache.util.sql.Jisql -driver mysqlconj -cstring jdbc:mysql://xxxxx/ranger -u 'rangerdba' -p '********' -noheader -trim -c \; -query "SELECT version();" Loading class `com.mysql.jdbc.Driver'. This is deprecated. The new driver class is `com.mysql.cj.jdbc.Driver'. The driver is automatically registered via the SPI and manual loading of the driver class is generally unnecessary. 2018-10-09 14:25:07,898 [I] Checking connection passed. 2018-10-09 14:25:07,899 [JISQL] /usr/lib/jvm/java/bin/java -cp /usr/hdp/current/ranger-admin/ews/lib/mysql-connector-java-8.0.12.jar:/usr/hdp/current/ranger-admin/jisql/lib/* org.apache.util.sql.Jisql -driver mysqlconj -cstring jdbc:mysql://xxxxx/ranger -u 'rangerdba' -p '********' -noheader -trim -c \; -query "select version from x_db_version_h where version = 'JAVA_PATCHES' and inst_by = 'Ranger 0.7.0.2.6.1.0-129' and active='Y';" Loading class `com.mysql.jdbc.Driver'. This is deprecated. The new driver class is `com.mysql.cj.jdbc.Driver'. The driver is automatically registered via the SPI and manual loading of the driver class is generally unnecessary. 2018-10-09 14:25:08,183 [I] ----------------- Applying java patches ------------ 2018-10-09 14:25:08,183 [JISQL] /usr/lib/jvm/java/bin/java -cp /usr/hdp/current/ranger-admin/ews/lib/mysql-connector-java-8.0.12.jar:/usr/hdp/current/ranger-admin/jisql/lib/* org.apache.util.sql.Jisql -driver mysqlconj -cstring jdbc:mysql://xxxxx/ranger -u 'rangerdba' -p '********' -noheader -trim -c \; -query "select version from x_db_version_h where version = 'J10001' and active = 'Y';" Loading class `com.mysql.jdbc.Driver'. This is deprecated. The new driver class is `com.mysql.cj.jdbc.Driver'. The driver is automatically registered via the SPI and manual loading of the driver class is generally unnecessary. 2018-10-09 14:25:08,474 [JISQL] /usr/lib/jvm/java/bin/java -cp /usr/hdp/current/ranger-admin/ews/lib/mysql-connector-java-8.0.12.jar:/usr/hdp/current/ranger-admin/jisql/lib/* org.apache.util.sql.Jisql -driver mysqlconj -cstring jdbc:mysql://xxxxx/ranger -u 'rangerdba' -p '********' -noheader -trim -c \; -query "select version from x_db_version_h where version = 'J10001' and active = 'N';" Loading class `com.mysql.jdbc.Driver'. This is deprecated. The new driver class is `com.mysql.cj.jdbc.Driver'. The driver is automatically registered via the SPI and manual loading of the driver class is generally unnecessary. 2018-10-09 14:25:08,762 [JISQL] /usr/lib/jvm/java/bin/java -cp /usr/hdp/current/ranger-admin/ews/lib/mysql-connector-java-8.0.12.jar:/usr/hdp/current/ranger-admin/jisql/lib/* org.apache.util.sql.Jisql -driver mysqlconj -cstring jdbc:mysql://xxxxx/ranger -u 'rangerdba' -p '********' -noheader -trim -c \; -query "insert into x_db_version_h (version, inst_at, inst_by, updated_at, updated_by,active) values ('J10001', now(), 'Ranger 0.7.0.2.6.1.0-129', now(), 'ip-xxx-xxx-xxx-xxx.ec2.internal','N') ;" Loading class `com.mysql.jdbc.Driver'. This is deprecated. The new driver class is `com.mysql.cj.jdbc.Driver'. The driver is automatically registered via the SPI and manual loading of the driver class is generally unnecessary. 2018-10-09 14:25:09,082 [I] java patch PatchPasswordEncryption_J10001 is being applied.. Loading class `com.mysql.jdbc.Driver'. This is deprecated. The new driver class is `com.mysql.cj.jdbc.Driver'. The driver is automatically registered via the SPI and manual loading of the driver class is generally unnecessary. [EL Severe]: 2018-10-09 14:25:41.877--ServerSession(893339434)--Exception [EclipseLink-4002] (Eclipse Persistence Services - 2.5.2.v20140319-9ad6abd): org.eclipse.persistence.exceptions.DatabaseException Internal Exception: java.sql.SQLException: Connections could not be acquired from the underlying database! Error Code: 0 [EL Severe]: ejb: 2018-10-09 14:25:41.886--ServerSession(893339434)--Exception [EclipseLink-4002] (Eclipse Persistence Services - 2.5.2.v20140319-9ad6abd): org.eclipse.persistence.exceptions.DatabaseException Internal Exception: java.sql.SQLException: Connections could not be acquired from the underlying database! Error Code: 0 [EL Severe]: 2018-10-09 14:26:01.794--ServerSession(893339434)--Exception [EclipseLink-4002] (Eclipse Persistence Services - 2.5.2.v20140319-9ad6abd): org.eclipse.persistence.exceptions.DatabaseException Internal Exception: java.sql.SQLException: Connections could not be acquired from the underlying database! Error Code: 0 [EL Severe]: ejb: 2018-10-09 14:26:01.794--ServerSession(893339434)--Exception [EclipseLink-4002] (Eclipse Persistence Services - 2.5.2.v20140319-9ad6abd): org.eclipse.persistence.exceptions.DatabaseException Internal Exception: java.sql.SQLException: Connections could not be acquired from the underlying database! Error Code: 0 2018-10-09 14:26:01,827 [JISQL] /usr/lib/jvm/java/bin/java -cp /usr/hdp/current/ranger-admin/ews/lib/mysql-connector-java-8.0.12.jar:/usr/hdp/current/ranger-admin/jisql/lib/* org.apache.util.sql.Jisql -driver mysqlconj -cstring jdbc:mysql://xxxxx/ranger -u 'rangerdba' -p '********' -noheader -trim -c \; -query "delete from x_db_version_h where version='J10001' and active='N' and updated_by='ip-xxx-xxx-xxx-xxx.ec2.internal';" Loading class `com.mysql.jdbc.Driver'. This is deprecated. The new driver class is `com.mysql.cj.jdbc.Driver'. The driver is automatically registered via the SPI and manual loading of the driver class is generally unnecessary. 2018-10-09 14:26:02,143 [E] applying java patch PatchPasswordEncryption_J10001 failed

On investigation, found that RDS MySQL has SSL enabled, whereas Ranger is connecting without SSL. (Reference https://community.hortonworks.com/content/supportkb/148592/errorjava-patch-patchpasswordencryption-j...

But unable to find how to disable the "have_ssl" and "have_openssl" in RDS MySQL.

Community help to resolve this issue is much appreciated.

0 REPLIES 0