Unable to start Nifiregistry after Enable Ranger Dependency

[#1]

Unable to start Nifiregistry after Enable Ranger Dependency

[#2]

Welcome to the community @muahmmed . To better assist you can you provide some additional details about the steps leading up to this issue and what you have tried already? CC @MattWho @emattos @Xiaomin @psy10 

[#3]

We would need to understand first if the issue is on the CM-agent or on the
Nifi-registry. Simply describing if the nifi-registry did not start at all
or did start but then failed would help in knowing if the issue is with
CM-agent or nifi-registry itself.

[#4]

@muahmmed 

We would need to know what is being logged in the nifi-registry-app.log during startup.

Thank you,
Matt

[#5]

Hello muahmmed, 
Can you pelase share the error/stack trace here? 

[#6]

I have raise the case number 1136446 to cloudera. 

Error: 

at org.apache.nifi.registry.NiFiRegistry.main(NiFiRegistry.java:159)

2025-10-13 15:25:15,938 INFO org.apache.nifi.registry.ranger.RangerAuthorizer: initializing base plugin

2025-10-13 15:25:15,991 INFO org.apache.ranger.authorization.hadoop.config.RangerConfiguration: addResourceIfReadable(ranger-nifi-registry-audit.xml): resource file is file:/run/cloudera-scm-agent/process/1546361847-nifiregistry-NIFI_REGISTRY_SERVER/ranger-nifi-registry-audit.xml

2025-10-13 15:25:16,082 INFO org.apache.ranger.authorization.hadoop.config.RangerConfiguration: addResourceIfReadable(ranger-nifi-registry-security.xml): resource file is file:/run/cloudera-scm-agent/process/1546361847-nifiregistry-NIFI_REGISTRY_SERVER/ranger-nifi-registry-security.xml

2025-10-13 15:25:16,082 INFO org.apache.ranger.authorization.hadoop.config.RangerConfiguration: addResourceIfReadable(ranger-nifi-registry-policymgr-ssl.xml): resource file is file:/run/cloudera-scm-agent/process/1546361847-nifiregistry-NIFI_REGISTRY_SERVER/ranger-nifi-registry-policymgr-ssl.xml

2025-10-13 15:25:16,160 ERROR org.apache.ranger.authorization.hadoop.config.RangerConfiguration: addResourceIfReadable(ranger-nifi-registry-CFM_nifiregistry-audit.xml): couldn't find resource file location

2025-10-13 15:25:16,161 ERROR org.apache.ranger.authorization.hadoop.config.RangerConfiguration: addResourceIfReadable(ranger-nifi-registry-CFM_nifiregistry-security.xml): couldn't find resource file location

2025-10-13 15:25:16,162 ERROR org.apache.ranger.authorization.hadoop.config.RangerConfiguration: addResourceIfReadable(ranger-nifi-registry-CFM_nifiregistry-policymgr-ssl.xml): couldn't find resource file location

2025-10-13 15:25:16,164 INFO org.apache.ranger.authorization.hadoop.config.RangerPluginConfig: PolicyEngineOptions: { evaluatorType: auto, evaluateDelegateAdminOnly: false, disableContextEnrichers: false, disableCustomConditions: false, disableTagPolicyEvaluation: false, disablePolicyRefresher: false, disableTagRetriever: false, enableTagEnricherWithLocalRefresher: false, disableTrieLookupPrefilter: false, optimizeTrieForRetrieval: false, cacheAuditResult: false, disableRoleResolution: true, optimizeTrieForSpace: false, optimizeTagTrieForRetrieval: false, optimizeTagTrieForSpace: false, enableResourceMatcherReuse: true }

2025-10-13 15:38:47,189 WARN org.springframework.boot.web.servlet.context.AnnotationConfigServletWebServerApplicationContext: Exception encountered during context initialization - cancelling refresh attempt: org.springframework.beans.factory.UnsatisfiedDependencyException: Error creating bean with name 'accessPolicyResource' defined in file [/var/lib/nifiregistry/work/jetty/nifi-registry-web-api-1.28.1.2.1.7.2000-69.war/webapp/WEB-INF/classes/org/apache/nifi/registry/web/api/AccessPolicyResource.class]: Unsatisfied dependency expressed through constructor parameter 0; nested exception is org.springframework.beans.factory.UnsatisfiedDependencyException: Error creating bean with name 'standardServiceFacade' defined in file [/var/lib/nifiregistry/work/jetty/nifi-registry-web-api-1.28.1.2.1.7.2000-69.war/webapp/WEB-INF/classes/org/apache/nifi/registry/web/service/StandardServiceFacade.class]: Unsatisfied dependency expressed through constructor parameter 2; nested exception is org.springframework.beans.factory.UnsatisfiedDependencyException: Error creating bean with name 'authorizationService' defined in URL [jar:file:/var/lib/nifiregistry/work/jetty/nifi-registry-web-api-1.28.1.2.1.7.2000-69.war/webapp/WEB-INF/lib/nifi-registry-framework-1.28.1.2.1.7.2000-69.jar!/org/apache/nifi/registry/service/AuthorizationService.class]: Unsatisfied dependency expressed through constructor parameter 1; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'getAuthorizer' defined in class path resource [org/apache/nifi/registry/security/authorization/AuthorizerFactory.class]: Bean instantiation via factory method failed; nested exception is org.springframework.beans.BeanInstantiationException: Failed to instantiate [org.apache.nifi.registry.security.authorization.Authorizer]: Factory method 'getAuthorizer' threw exception; nested exception is org.apache.nifi.registry.security.authorization.AuthorizerFactoryException: Failed to construct Authorizer.

2025-10-13 15:38:47,191 INFO org.apache.nifi.registry.event.EventService: Shutting down event consumer...

2025-10-13 15:38:47,191 INFO org.apache.nifi.registry.event.EventService: Event consumer shutdown!

2025-10-13 15:38:47,191 WARN org.apache.nifi.registry.event.EventService: Interrupted while polling event queue

2025-10-13 15:38:47,192 INFO com.zaxxer.hikari.HikariDataSource: HikariPool-1 - Shutdown initiated...

2025-10-13 15:38:47,196 INFO com.zaxxer.hikari.HikariDataSource: HikariPool-1 - Shutdown completed.

2025-10-13 15:38:47,212 INFO org.springframework.boot.autoconfigure.logging.ConditionEvaluationReportLoggingListener: 

Error starting ApplicationContext. To display the conditions report re-run your application with 'debug' enabled.

2025-10-13 15:38:47,252 ERROR org.springframework.boot.SpringApplication: Application run failed

org.springframework.beans.factory.UnsatisfiedDependencyException: Error creating bean with name 'accessPolicyResource' defined in file [/var/lib/nifiregistry/work/jetty/nifi-registry-web-api-1.28.1.2.1.7.2000-69.war/webapp/WEB-INF/classes/org/apache/nifi/registry/web/api/AccessPolicyResource.class]: Unsatisfied dependency expressed through constructor parameter 0; nested exception is org.springframework.beans.factory.UnsatisfiedDependencyException: Error creating bean with name 'standardServiceFacade' defined in file [/var/lib/nifiregistry/work/jetty/nifi-registry-web-api-1.28.1.2.1.7.2000-69.war/webapp/WEB-INF/classes/org/apache/nifi/registry/web/service/StandardServiceFacade.class]: Unsatisfied dependency expressed through constructor parameter 2; nested exception is org.springframework.beans.factory.UnsatisfiedDependencyException: Error creating bean with name 'authorizationService' defined in URL [jar:file:/var/lib/nifiregistry/work/jetty/nifi-registry-web-api-1.28.1.2.1.7.2000-69.war/webapp/WEB-INF/lib/nifi-registry-framework-1.28.1.2.1.7.2000-69.jar!/org/apache/nifi/registry/service/AuthorizationService.class]: Unsatisfied dependency expressed through constructor parameter 1; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'getAuthorizer' defined in class path resource [org/apache/nifi/registry/security/authorization/AuthorizerFactory.class]: Bean instantiation via factory method failed; nested exception is org.springframework.beans.BeanInstantiationException: Failed to instantiate [org.apache.nifi.registry.security.authorization.Authorizer]: Factory method 'getAuthorizer' threw exception; nested exception is org.apache.nifi.registry.security.authorization.AuthorizerFactoryException: Failed to construct Authorizer.

at org.springframework.beans.factory.support.ConstructorResolver.createArgumentArray(ConstructorResolver.java:794)

at org.springframework.beans.factory.support.ConstructorResolver.autowireConstructor(ConstructorResolver.java:220)

at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.autowireConstructor(AbstractAutowireCapableBeanFactory.java:1372)

at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.createBeanInstance(AbstractAutowireCapableBeanFactory.java:1222)

at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.doCreateBean(AbstractAutowireCapableBeanFactory.java:582)

at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.createBean(AbstractAutowireCapableBeanFactory.java:542)

at org.springframework.beans.factory.support.AbstractBeanFactory.lambda$doGetBean$0(AbstractBeanFactory.java:336)

at org.springframework.beans.factory.support.DefaultSingletonBeanRegistry.getSingleton(DefaultSingletonBeanRegistry.java:234)

at org.springframework.beans.factory.support.AbstractBeanFactory.doGetBean(AbstractBeanFactory.java:334)

at org.springframework.beans.factory.support.AbstractBeanFactory.getBean(AbstractBeanFactory.java:209)

at org.springframework.beans.factory.support.DefaultListableBeanFactory.preInstantiateSingletons(DefaultListableBeanFactory.java:955)

at org.springframework.context.support.AbstractApplicationContext.finishBeanFactoryInitialization(AbstractApplicationContext.java:932)

at org.springframework.context.support.AbstractApplicationContext.refresh(AbstractApplicationContext.java:591)

at org.springframework.boot.web.servlet.context.ServletWebServerApplicationContext.refresh(ServletWebServerApplicationContext.java:147)

at org.springframework.boot.SpringApplication.refresh(SpringApplication.java:732)

at org.springframework.boot.SpringApplication.refreshContext(SpringApplication.java:409)

at org.springframework.boot.SpringApplication.run(SpringApplication.java:308)

at org.springframework.boot.web.servlet.support.SpringBootServletInitializer.run(SpringBootServletInitializer.java:175)

at org.springframework.boot.web.servlet.support.SpringBootServletInitializer.createRootApplicationContext(SpringBootServletInitializer.java:155)

at org.springframework.boot.web.servlet.support.SpringBootServletInitializer.onStartup(SpringBootServletInitializer.java:97)

at org.springframework.web.SpringServletContainerInitializer.onStartup(SpringServletContainerInitializer.java:174)

at org.eclipse.jetty.plus.annotation.ContainerInitializer.callStartup(ContainerInitializer.java:142)

at org.eclipse.jetty.annotations.ServletContainerInitializersStarter.doStart(ServletContainerInitializersStarter.java:64)

at org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:73)

at org.eclipse.jetty.servlet.ServletContextHandler.startContext(ServletContextHandler.java:356)

at org.eclipse.jetty.webapp.WebAppContext.startWebapp(WebAppContext.java:1449)

at org.eclipse.jetty.webapp.WebAppContext.startContext(WebAppContext.java:1414)

at org.eclipse.jetty.server.handler.ContextHandler.doStart(ContextHandler.java:916)

at org.eclipse.jetty.servlet.ServletContextHandler.doStart(ServletContextHandler.java:288)

at org.eclipse.jetty.webapp.WebAppContext.doStart(WebAppContext.java:524)

at org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:73)

at org.eclipse.jetty.util.component.ContainerLifeCycle.start(ContainerLifeCycle.java:169)

at org.eclipse.jetty.util.component.ContainerLifeCycle.doStart(ContainerLifeCycle.java:117)

at org.eclipse.jetty.server.handler.AbstractHandler.doStart(AbstractHandler.java:97)

at org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:73)

at org.eclipse.jetty.util.component.ContainerLifeCycle.start(ContainerLifeCycle.java:169)

at org.eclipse.jetty.server.Server.start(Server.java:423)

at org.eclipse.jetty.util.component.ContainerLifeCycle.doStart(ContainerLifeCycle.java:110)

at org.eclipse.jetty.server.handler.AbstractHandler.doStart(AbstractHandler.java:97)

at org.eclipse.jetty.server.Server.doStart(Server.java:387)

at org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:73)

at org.apache.nifi.registry.jetty.JettyServer.start(JettyServer.java:93)

at org.apache.nifi.registry.NiFiRegistry.<init>(NiFiRegistry.java:110)

at org.apache.nifi.registry.NiFiRegistry.main(NiFiRegistry.java:159)

Caused by: org.springframework.beans.factory.UnsatisfiedDependencyException: Error creating bean with name 'standardServiceFacade' defined in file [/var/lib/nifiregistry/work/jetty/nifi-registry-web-api-1.28.1.2.1.7.2000-69.war/webapp/WEB-INF/classes/org/apache/nifi/registry/web/service/StandardServiceFacade.class]: Unsatisfied dependency expressed through constructor parameter 2; nested exception is org.springframework.beans.factory.UnsatisfiedDependencyException: Error creating bean with name 'authorizationService' defined in URL [jar:file:/var/lib/nifiregistry/work/jetty/nifi-registry-web-api-1.28.1.2.1.7.2000-69.war/webapp/WEB-INF/lib/nifi-registry-framework-1.28.1.2.1.7.2000-69.jar!/org/apache/nifi/registry/service/AuthorizationService.class]: Unsatisfied dependency expressed through constructor parameter 1; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'getAuthorizer' defined in class path resource [org/apache/nifi/registry/security/authorization/AuthorizerFactory.class]: Bean instantiation via factory method failed; nested exception is org.springframework.beans.BeanInstantiationException: Failed to instantiate [org.apache.nifi.registry.security.authorization.Authorizer]: Factory method 'getAuthorizer' threw exception; nested exception is org.apache.nifi.registry.security.authorization.AuthorizerFactoryException: Failed to construct Authorizer.

at org.springframework.beans.factory.support.ConstructorResolver.createArgumentArray(ConstructorResolver.java:794)

at org.springframework.beans.factory.support.ConstructorResolver.autowireConstructor(ConstructorResolver.java:220)

at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.autowireConstructor(AbstractAutowireCapableBeanFactory.java:1372)

at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.createBeanInstance(AbstractAutowireCapableBeanFactory.java:1222)

at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.doCreateBean(AbstractAutowireCapableBeanFactory.java:582)

at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.createBean(AbstractAutowireCapableBeanFactory.java:542)

at org.springframework.beans.factory.support.AbstractBeanFactory.lambda$doGetBean$0(AbstractBeanFactory.java:336)

at org.springframework.beans.factory.support.DefaultSingletonBeanRegistry.getSingleton(DefaultSingletonBeanRegistry.java:234)

at org.springframework.beans.factory.support.AbstractBeanFactory.doGetBean(AbstractBeanFactory.java:334)

at org.springframework.beans.factory.support.AbstractBeanFactory.getBean(AbstractBeanFactory.java:209)

at org.springframework.beans.factory.config.DependencyDescriptor.resolveCandidate(DependencyDescriptor.java:276)

at org.springframework.beans.factory.support.DefaultListableBeanFactory.doResolveDependency(DefaultListableBeanFactory.java:1391)

at org.springframework.beans.factory.support.DefaultListableBeanFactory.resolveDependency(DefaultListableBeanFactory.java:1311)

at org.springframework.beans.factory.support.ConstructorResolver.resolveAutowiredArgument(ConstructorResolver.java:904)

at org.springframework.beans.factory.support.ConstructorResolver.createArgumentArray(ConstructorResolver.java:781)

... 43 common frames omitted

Caused by: org.springframework.beans.factory.UnsatisfiedDependencyException: Error creating bean with name 'authorizationService' defined in URL [jar:file:/var/lib/nifiregistry/work/jetty/nifi-registry-web-api-1.28.1.2.1.7.2000-69.war/webapp/WEB-INF/lib/nifi-registry-framework-1.28.1.2.1.7.2000-69.jar!/org/apache/nifi/registry/service/AuthorizationService.class]: Unsatisfied dependency expressed through constructor parameter 1; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'getAuthorizer' defined in class path resource [org/apache/nifi/registry/security/authorization/AuthorizerFactory.class]: Bean instantiation via factory method failed; nested exception is org.springframework.beans.BeanInstantiationException: Failed to instantiate [org.apache.nifi.registry.security.authorization.Authorizer]: Factory method 'getAuthorizer' threw exception; nested exception is org.apache.nifi.registry.security.authorization.AuthorizerFactoryException: Failed to construct Authorizer.

at org.springframework.beans.factory.support.ConstructorResolver.createArgumentArray(ConstructorResolver.java:794)

at org.springframework.beans.factory.support.ConstructorResolver.autowireConstructor(ConstructorResolver.java:220)

at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.autowireConstructor(AbstractAutowireCapableBeanFactory.java:1372)

at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.createBeanInstance(AbstractAutowireCapableBeanFactory.java:1222)

at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.doCreateBean(AbstractAutowireCapableBeanFactory.java:582)

at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.createBean(AbstractAutowireCapableBeanFactory.java:542)

at org.springframework.beans.factory.support.AbstractBeanFactory.lambda$doGetBean$0(AbstractBeanFactory.java:336)

at org.springframework.beans.factory.support.DefaultSingletonBeanRegistry.getSingleton(DefaultSingletonBeanRegistry.java:234)

at org.springframework.beans.factory.support.AbstractBeanFactory.doGetBean(AbstractBeanFactory.java:334)

at org.springframework.beans.factory.support.AbstractBeanFactory.getBean(AbstractBeanFactory.java:209)

at org.springframework.beans.factory.config.DependencyDescriptor.resolveCandidate(DependencyDescriptor.java:276)

at org.springframework.beans.factory.support.DefaultListableBeanFactory.doResolveDependency(DefaultListableBeanFactory.java:1391)

at org.springframework.beans.factory.support.DefaultListableBeanFactory.resolveDependency(DefaultListableBeanFactory.java:1311)

at org.springframework.beans.factory.support.ConstructorResolver.resolveAutowiredArgument(ConstructorResolver.java:904)

at org.springframework.beans.factory.support.ConstructorResolver.createArgumentArray(ConstructorResolver.java:781)

... 57 common frames omitted

Caused by: org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'getAuthorizer' defined in class path resource [org/apache/nifi/registry/security/authorization/AuthorizerFactory.class]: Bean instantiation via factory method failed; nested exception is org.springframework.beans.BeanInstantiationException: Failed to instantiate [org.apache.nifi.registry.security.authorization.Authorizer]: Factory method 'getAuthorizer' threw exception; nested exception is org.apache.nifi.registry.security.authorization.AuthorizerFactoryException: Failed to construct Authorizer.

at org.springframework.beans.factory.support.ConstructorResolver.instantiate(ConstructorResolver.java:646)

at org.springframework.beans.factory.support.ConstructorResolver.instantiateUsingFactoryMethod(ConstructorResolver.java:477)

at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.instantiateUsingFactoryMethod(AbstractAutowireCapableBeanFactory.java:1352)

at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.createBeanInstance(AbstractAutowireCapableBeanFactory.java:1195)

at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.doCreateBean(AbstractAutowireCapableBeanFactory.java:582)

at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.createBean(AbstractAutowireCapableBeanFactory.java:542)

at org.springframework.beans.factory.support.AbstractBeanFactory.lambda$doGetBean$0(AbstractBeanFactory.java:336)

at org.springframework.beans.factory.support.DefaultSingletonBeanRegistry.getSingleton(DefaultSingletonBeanRegistry.java:234)

at org.springframework.beans.factory.support.AbstractBeanFactory.doGetBean(AbstractBeanFactory.java:334)

at org.springframework.beans.factory.support.AbstractBeanFactory.getBean(AbstractBeanFactory.java:209)

at org.springframework.beans.factory.config.DependencyDescriptor.resolveCandidate(DependencyDescriptor.java:276)

at org.springframework.beans.factory.support.DefaultListableBeanFactory.doResolveDependency(DefaultListableBeanFactory.java:1391)

at org.springframework.beans.factory.support.DefaultListableBeanFactory.resolveDependency(DefaultListableBeanFactory.java:1311)

at org.springframework.beans.factory.support.ConstructorResolver.resolveAutowiredArgument(ConstructorResolver.java:904)

at org.springframework.beans.factory.support.ConstructorResolver.createArgumentArray(ConstructorResolver.java:781)

... 71 common frames omitted

Caused by: org.springframework.beans.BeanInstantiationException: Failed to instantiate [org.apache.nifi.registry.security.authorization.Authorizer]: Factory method 'getAuthorizer' threw exception; nested exception is org.apache.nifi.registry.security.authorization.AuthorizerFactoryException: Failed to construct Authorizer.

at org.springframework.beans.factory.support.SimpleInstantiationStrategy.instantiate(SimpleInstantiationStrategy.java:185)

at org.springframework.beans.factory.support.ConstructorResolver.instantiate(ConstructorResolver.java:641)

... 85 common frames omitted

Caused by: org.apache.hadoop.security.KerberosAuthException: failure to login: for principal: nifiregistry/cld-mobpro-nf02.tahakom.com@TAHAKOM.COM from keytab /var/run/cloudera-scm-agent/process/1546361847-nifiregistry-NIFI_REGISTRY_SERVER/nifiregistry.keytab javax.security.auth.login.LoginException: java.lang.IllegalArgumentException: Illegal principal name nifiregistry/cld-mobpro-nf02.tahakom.com@TAHAKOM.COM: org.apache.hadoop.security.authentication.util.KerberosName$NoMatchingRule: No rules applied to nifiregistry/cld-mobpro-nf02.tahakom.com@TAHAKOM.COM

at org.apache.hadoop.security.UserGroupInformation.doSubjectLogin(UserGroupInformation.java:2027)

at org.apache.hadoop.security.UserGroupInformation.loginUserFromKeytabAndReturnUGI(UserGroupInformation.java:1361)

at org.apache.hadoop.security.UserGroupInformation.loginUserFromKeytab(UserGroupInformation.java:1140)

at org.apache.nifi.registry.ranger.RangerAuthorizer.onConfigured(RangerAuthorizer.java:170)

... 110 common frames omitted

Caused by: javax.security.auth.login.LoginException: java.lang.IllegalArgumentException: Illegal principal name nifiregistry/cld-mobpro-nf02.tahakom.com@TAHAKOM.COM: org.apache.hadoop.security.authentication.util.KerberosName$NoMatchingRule: No rules applied to nifiregistry/cld-mobpro-nf02.tahakom.com@TAHAKOM.COM

at org.apache.hadoop.security.UserGroupInformation$HadoopLoginModule.commit(UserGroupInformation.java:237)

Note: We use custom krb5.conf ( /etc/hadoop/krb/krb5.conf ).
I am able to kinit using below SPN with keytab.

nifiregistry/cld-mobpro-nf02.tahakom.com@TAHAKOM.COM from keytab /var/run/cloudera-scm-agent/process/1546361847-nifiregistry-NIFI_REGISTRY_SERVER/nifiregistry.keytab

Scenario: When we disable ranger, the nifiregistry comes alive. also we have nifi services on the same host where nifiregistry is and NiFi works fine.  We are running nifi & nifiregistry on compute cluster.

[#7]

@psy10 @cjervis @MattWho 

Case 1136446

We are using NiFi & NiFiRegistry on compute Cluster. NiFi seems to be working fine but unfortunately not Nifiregistry. once disable ranger dependency nifiregistry running.

Error:

2025-10-13 15:25:15,938 INFO org.apache.nifi.registry.ranger.RangerAuthorizer: initializing base plugin

2025-10-13 15:25:15,991 INFO org.apache.ranger.authorization.hadoop.config.RangerConfiguration: addResourceIfReadable(ranger-nifi-registry-audit.xml): resource file is file:/run/cloudera-scm-agent/process/1546361847-nifiregistry-NIFI_REGISTRY_SERVER/ranger-nifi-registry-audit.xml

2025-10-13 15:25:16,082 INFO org.apache.ranger.authorization.hadoop.config.RangerConfiguration: addResourceIfReadable(ranger-nifi-registry-security.xml): resource file is file:/run/cloudera-scm-agent/process/1546361847-nifiregistry-NIFI_REGISTRY_SERVER/ranger-nifi-registry-security.xml

2025-10-13 15:25:16,082 INFO org.apache.ranger.authorization.hadoop.config.RangerConfiguration: addResourceIfReadable(ranger-nifi-registry-policymgr-ssl.xml): resource file is file:/run/cloudera-scm-agent/process/1546361847-nifiregistry-NIFI_REGISTRY_SERVER/ranger-nifi-registry-policymgr-ssl.xml

2025-10-13 15:25:16,160 ERROR org.apache.ranger.authorization.hadoop.config.RangerConfiguration: addResourceIfReadable(ranger-nifi-registry-CFM_nifiregistry-audit.xml): couldn't find resource file location

2025-10-13 15:25:16,161 ERROR org.apache.ranger.authorization.hadoop.config.RangerConfiguration: addResourceIfReadable(ranger-nifi-registry-CFM_nifiregistry-security.xml): couldn't find resource file location

2025-10-13 15:25:16,162 ERROR org.apache.ranger.authorization.hadoop.config.RangerConfiguration: addResourceIfReadable(ranger-nifi-registry-CFM_nifiregistry-policymgr-ssl.xml): couldn't find resource file location

2025-10-13 15:25:16,164 INFO org.apache.ranger.authorization.hadoop.config.RangerPluginConfig: PolicyEngineOptions: { evaluatorType: auto, evaluateDelegateAdminOnly: false, disableContextEnrichers: false, disableCustomConditions: false, disableTagPolicyEvaluation: false, disablePolicyRefresher: false, disableTagRetriever: false, enableTagEnricherWithLocalRefresher: false, disableTrieLookupPrefilter: false, optimizeTrieForRetrieval: false, cacheAuditResult: false, disableRoleResolution: true, optimizeTrieForSpace: false, optimizeTagTrieForRetrieval: false, optimizeTagTrieForSpace: false, enableResourceMatcherReuse: true }

2025-10-13 15:38:47,189 WARN org.springframework.boot.web.servlet.context.AnnotationConfigServletWebServerApplicationContext: Exception encountered during context initialization - cancelling refresh attempt: org.springframework.beans.factory.UnsatisfiedDependencyException: Error creating bean with name 'accessPolicyResource' defined in file [/var/lib/nifiregistry/work/jetty/nifi-registry-web-api-1.28.1.2.1.7.2000-69.war/webapp/WEB-INF/classes/org/apache/nifi/registry/web/api/AccessPolicyResource.class]: Unsatisfied dependency expressed through constructor parameter 0; nested exception is org.springframework.beans.factory.UnsatisfiedDependencyException: Error creating bean with name 'standardServiceFacade' defined in file [/var/lib/nifiregistry/work/jetty/nifi-registry-web-api-1.28.1.2.1.7.2000-69.war/webapp/WEB-INF/classes/org/apache/nifi/registry/web/service/StandardServiceFacade.class]: Unsatisfied dependency expressed through constructor parameter 2; nested exception is org.springframework.beans.factory.UnsatisfiedDependencyException: Error creating bean with name 'authorizationService' defined in URL [jar:file:/var/lib/nifiregistry/work/jetty/nifi-registry-web-api-1.28.1.2.1.7.2000-69.war/webapp/WEB-INF/lib/nifi-registry-framework-1.28.1.2.1.7.2000-69.jar!/org/apache/nifi/registry/service/AuthorizationService.class]: Unsatisfied dependency expressed through constructor parameter 1; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'getAuthorizer' defined in class path resource [org/apache/nifi/registry/security/authorization/AuthorizerFactory.class]: Bean instantiation via factory method failed; nested exception is org.springframework.beans.BeanInstantiationException: Failed to instantiate [org.apache.nifi.registry.security.authorization.Authorizer]: Factory method 'getAuthorizer' threw exception; nested exception is org.apache.nifi.registry.security.authorization.AuthorizerFactoryException: Failed to construct Authorizer.

2025-10-13 15:38:47,191 INFO org.apache.nifi.registry.event.EventService: Shutting down event consumer...

2025-10-13 15:38:47,191 INFO org.apache.nifi.registry.event.EventService: Event consumer shutdown!

2025-10-13 15:38:47,191 WARN org.apache.nifi.registry.event.EventService: Interrupted while polling event queue

2025-10-13 15:38:47,192 INFO com.zaxxer.hikari.HikariDataSource: HikariPool-1 - Shutdown initiated...

2025-10-13 15:38:47,196 INFO com.zaxxer.hikari.HikariDataSource: HikariPool-1 - Shutdown completed.

2025-10-13 15:38:47,212 INFO org.springframework.boot.autoconfigure.logging.ConditionEvaluationReportLoggingListener: 

Error starting ApplicationContext. To display the conditions report re-run your application with 'debug' enabled.

2025-10-13 15:38:47,252 ERROR org.springframework.boot.SpringApplication: Application run failed

org.springframework.beans.factory.UnsatisfiedDependencyException: Error creating bean with name 'accessPolicyResource' defined in file [/var/lib/nifiregistry/work/jetty/nifi-registry-web-api-1.28.1.2.1.7.2000-69.war/webapp/WEB-INF/classes/org/apache/nifi/registry/web/api/AccessPolicyResource.class]: Unsatisfied dependency expressed through constructor parameter 0; nested exception is org.springframework.beans.factory.UnsatisfiedDependencyException: Error creating bean with name 'standardServiceFacade' defined in file [/var/lib/nifiregistry/work/jetty/nifi-registry-web-api-1.28.1.2.1.7.2000-69.war/webapp/WEB-INF/classes/org/apache/nifi/registry/web/service/StandardServiceFacade.class]: Unsatisfied dependency expressed through constructor parameter 2; nested exception is org.springframework.beans.factory.UnsatisfiedDependencyException: Error creating bean with name 'authorizationService' defined in URL [jar:file:/var/lib/nifiregistry/work/jetty/nifi-registry-web-api-1.28.1.2.1.7.2000-69.war/webapp/WEB-INF/lib/nifi-registry-framework-1.28.1.2.1.7.2000-69.jar!/org/apache/nifi/registry/service/AuthorizationService.class]: Unsatisfied dependency expressed through constructor parameter 1; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'getAuthorizer' defined in class path resource [org/apache/nifi/registry/security/authorization/AuthorizerFactory.class]: Bean instantiation via factory method failed; nested exception is org.springframework.beans.BeanInstantiationException: Failed to instantiate [org.apache.nifi.registry.security.authorization.Authorizer]: Factory method 'getAuthorizer' threw exception; nested exception is org.apache.nifi.registry.security.authorization.AuthorizerFactoryException: Failed to construct Authorizer.

at org.springframework.beans.factory.support.ConstructorResolver.createArgumentArray(ConstructorResolver.java:794)

at org.springframework.beans.factory.support.ConstructorResolver.autowireConstructor(ConstructorResolver.java:220)

at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.autowireConstructor(AbstractAutowireCapableBeanFactory.java:1372)

at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.createBeanInstance(AbstractAutowireCapableBeanFactory.java:1222)

at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.doCreateBean(AbstractAutowireCapableBeanFactory.java:582)

at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.createBean(AbstractAutowireCapableBeanFactory.java:542)

at org.springframework.beans.factory.support.AbstractBeanFactory.lambda$doGetBean$0(AbstractBeanFactory.java:336)

at org.springframework.beans.factory.support.DefaultSingletonBeanRegistry.getSingleton(DefaultSingletonBeanRegistry.java:234)

at org.springframework.beans.factory.support.AbstractBeanFactory.doGetBean(AbstractBeanFactory.java:334)

at org.springframework.beans.factory.support.AbstractBeanFactory.getBean(AbstractBeanFactory.java:209)

at org.springframework.beans.factory.support.DefaultListableBeanFactory.preInstantiateSingletons(DefaultListableBeanFactory.java:955)

at org.springframework.context.support.AbstractApplicationContext.finishBeanFactoryInitialization(AbstractApplicationContext.java:932)

at org.springframework.context.support.AbstractApplicationContext.refresh(AbstractApplicationContext.java:591)

at org.springframework.boot.web.servlet.context.ServletWebServerApplicationContext.refresh(ServletWebServerApplicationContext.java:147)

at org.springframework.boot.SpringApplication.refresh(SpringApplication.java:732)

at org.springframework.boot.SpringApplication.refreshContext(SpringApplication.java:409)

at org.springframework.boot.SpringApplication.run(SpringApplication.java:308)

at org.springframework.boot.web.servlet.support.SpringBootServletInitializer.run(SpringBootServletInitializer.java:175)

at org.springframework.boot.web.servlet.support.SpringBootServletInitializer.createRootApplicationContext(SpringBootServletInitializer.java:155)

at org.springframework.boot.web.servlet.support.SpringBootServletInitializer.onStartup(SpringBootServletInitializer.java:97)

at org.springframework.web.SpringServletContainerInitializer.onStartup(SpringServletContainerInitializer.java:174)

at org.eclipse.jetty.plus.annotation.ContainerInitializer.callStartup(ContainerInitializer.java:142)

at org.eclipse.jetty.annotations.ServletContainerInitializersStarter.doStart(ServletContainerInitializersStarter.java:64)

at org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:73)

at org.eclipse.jetty.servlet.ServletContextHandler.startContext(ServletContextHandler.java:356)

at org.eclipse.jetty.webapp.WebAppContext.startWebapp(WebAppContext.java:1449)

at org.eclipse.jetty.webapp.WebAppContext.startContext(WebAppContext.java:1414)

at org.eclipse.jetty.server.handler.ContextHandler.doStart(ContextHandler.java:916)

at org.eclipse.jetty.servlet.ServletContextHandler.doStart(ServletContextHandler.java:288)

at org.eclipse.jetty.webapp.WebAppContext.doStart(WebAppContext.java:524)

at org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:73)

at org.eclipse.jetty.util.component.ContainerLifeCycle.start(ContainerLifeCycle.java:169)

at org.eclipse.jetty.util.component.ContainerLifeCycle.doStart(ContainerLifeCycle.java:117)

at org.eclipse.jetty.server.handler.AbstractHandler.doStart(AbstractHandler.java:97)

at org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:73)

at org.eclipse.jetty.util.component.ContainerLifeCycle.start(ContainerLifeCycle.java:169)

at org.eclipse.jetty.server.Server.start(Server.java:423)

at org.eclipse.jetty.util.component.ContainerLifeCycle.doStart(ContainerLifeCycle.java:110)

at org.eclipse.jetty.server.handler.AbstractHandler.doStart(AbstractHandler.java:97)

at org.eclipse.jetty.server.Server.doStart(Server.java:387)

at org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:73)

at org.apache.nifi.registry.jetty.JettyServer.start(JettyServer.java:93)

at org.apache.nifi.registry.NiFiRegistry.<init>(NiFiRegistry.java:110)

at org.apache.nifi.registry.NiFiRegistry.main(NiFiRegistry.java:159)

Caused by: org.springframework.beans.factory.UnsatisfiedDependencyException: Error creating bean with name 'standardServiceFacade' defined in file [/var/lib/nifiregistry/work/jetty/nifi-registry-web-api-1.28.1.2.1.7.2000-69.war/webapp/WEB-INF/classes/org/apache/nifi/registry/web/service/StandardServiceFacade.class]: Unsatisfied dependency expressed through constructor parameter 2; nested exception is org.springframework.beans.factory.UnsatisfiedDependencyException: Error creating bean with name 'authorizationService' defined in URL [jar:file:/var/lib/nifiregistry/work/jetty/nifi-registry-web-api-1.28.1.2.1.7.2000-69.war/webapp/WEB-INF/lib/nifi-registry-framework-1.28.1.2.1.7.2000-69.jar!/org/apache/nifi/registry/service/AuthorizationService.class]: Unsatisfied dependency expressed through constructor parameter 1; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'getAuthorizer' defined in class path resource [org/apache/nifi/registry/security/authorization/AuthorizerFactory.class]: Bean instantiation via factory method failed; nested exception is org.springframework.beans.BeanInstantiationException: Failed to instantiate [org.apache.nifi.registry.security.authorization.Authorizer]: Factory method 'getAuthorizer' threw exception; nested exception is org.apache.nifi.registry.security.authorization.AuthorizerFactoryException: Failed to construct Authorizer.

at org.springframework.beans.factory.support.ConstructorResolver.createArgumentArray(ConstructorResolver.java:794)

at org.springframework.beans.factory.support.ConstructorResolver.autowireConstructor(ConstructorResolver.java:220)

at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.autowireConstructor(AbstractAutowireCapableBeanFactory.java:1372)

at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.createBeanInstance(AbstractAutowireCapableBeanFactory.java:1222)

at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.doCreateBean(AbstractAutowireCapableBeanFactory.java:582)

at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.createBean(AbstractAutowireCapableBeanFactory.java:542)

at org.springframework.beans.factory.support.AbstractBeanFactory.lambda$doGetBean$0(AbstractBeanFactory.java:336)

at org.springframew

Caused by: org.springframework.beans.BeanInstantiationException: Failed to instantiate [org.apache.nifi.registry.security.authorization.Authorizer]: Factory method 'getAuthorizer' threw exception; nested exception is org.apache.nifi.registry.security.authorization.AuthorizerFactoryException: Failed to construct Authorizer.

at org.springframework.beans.factory.support.SimpleInstantiationStrategy.instantiate(SimpleInstantiationStrategy.java:185)

at org.springframework.beans.factory.support.ConstructorResolver.instantiate(ConstructorResolver.java:641)

... 85 common frames omitted

Caused by: org.apache.nifi.registry.security.authorization.AuthorizerFactoryException: Failed to construct Authorizer.

at org.apache.nifi.registry.security.authorization.AuthorizerFactory.getAuthorizer(AuthorizerFactory.java:268)

at org.apache.nifi.registry.security.authorization.AuthorizerFactory$$EnhancerBySpringCGLIB$$682119f9.CGLIB$getAuthorizer$3(<generated>)

at org.apache.nifi.registry.security.authorization.AuthorizerFactory$$EnhancerBySpringCGLIB$$682119f9$$FastClassBySpringCGLIB$$38000600.invoke(<generated>)

at org.springframework.cglib.proxy.MethodProxy.invokeSuper(MethodProxy.java:244)

at org.springframework.context.annotation.ConfigurationClassEnhancer$BeanMethodInterceptor.intercept(ConfigurationClassEnhancer.java:331)

at org.apache.nifi.registry.security.authorization.AuthorizerFactory$$EnhancerBySpringCGLIB$$682119f9.getAuthorizer(<generated>)

at org.apache.nifi.registry.security.authorization.AuthorizerFactory$$FastClassBySpringCGLIB$$1266b595.invoke(<generated>)

at org.springframework.cglib.proxy.MethodProxy.invoke(MethodProxy.java:218)

at org.springframework.aop.framework.CglibAopProxy$CglibMethodInvocation.invokeJoinpoint(CglibAopProxy.java:792)

at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:163)

at org.springframework.aop.framework.CglibAopProxy$CglibMethodInvocation.proceed(CglibAopProxy.java:762)

at org.springframework.transaction.interceptor.TransactionInterceptor$1.proceedWithInvocation(TransactionInterceptor.java:123)

at org.springframework.transaction.interceptor.TransactionAspectSupport.invokeWithinTransaction(TransactionAspectSupport.java:388)

at org.springframework.transaction.interceptor.TransactionInterceptor.invoke(TransactionInterceptor.java:119)

at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:186)

at org.springframework.aop.framework.CglibAopProxy$CglibMethodInvocation.proceed(CglibAopProxy.java:762)

at org.springframework.aop.framework.CglibAopProxy$DynamicAdvisedInterceptor.intercept(CglibAopProxy.java:707)

at org.apache.nifi.registry.security.authorization.AuthorizerFactory$$EnhancerBySpringCGLIB$$fc932d61.getAuthorizer(<generated>)

at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke0(Native Method)

at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)

at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)

at java.base/java.lang.reflect.Method.invoke(Method.java:566)

at org.springframework.beans.factory.support.SimpleInstantiationStrategy.instantiate(SimpleInstantiationStrategy.java:154)

... 86 common frames omitted

Caused by: org.apache.nifi.registry.security.exception.SecurityProviderCreationException: Error creating RangerBasePlugin

at org.apache.nifi.registry.ranger.RangerAuthorizer.onConfigured(RangerAuthorizer.java:182)

at org.apache.nifi.registry.security.authorization.AuthorizerFactory$ManagedAuthorizerWrapper.onConfigured(AuthorizerFactory.java:830)

at org.apache.nifi.registry.security.authorization.AuthorizerFactory.getAuthorizer(AuthorizerFactory.java:261)

... 108 common frames omitted

Caused by: org.apache.hadoop.security.KerberosAuthException: failure to login: for principal: nifiregistry/cld-mobpro-nf02.tahakom.com@TAHAKOM.COM from keytab /var/run/cloudera-scm-agent/process/1546361847-nifiregistry-NIFI_REGISTRY_SERVER/nifiregistry.keytab javax.security.auth.login.LoginException: java.lang.IllegalArgumentException: Illegal principal name nifiregistry/cld-mobpro-nf02.tahakom.com@TAHAKOM.COM: org.apache.hadoop.security.authentication.util.KerberosName$NoMatchingRule: No rules applied to nifiregistry/cld-mobpro-nf02.tahakom.com@TAHAKOM.COM

at org.apache.hadoop.security.UserGroupInformation.doSubjectLogin(UserGroupInformation.java:2027)

at org.apache.hadoop.security.UserGroupInformation.loginUserFromKeytabAndReturnUGI(UserGroupInformation.java:1361)

at org.apache.hadoop.security.UserGroupInformation.loginUserFromKeytab(UserGroupInformation.java:1140)

at org.apache.nifi.registry.ranger.RangerAuthorizer.onConfigured(RangerAuthorizer.java:170)

... 110 common frames omitted

Caused by: javax.security.auth.login.LoginException: java.lang.IllegalArgumentException: Illegal principal name nifiregistry/cld-mobpro-nf02.tahakom.com@TAHAKOM.COM: org.apache.hadoop.security.authentication.util.KerberosName$NoMatchingRule: No rules applied to nifiregistry/cld-mobpro-nf02.tahakom.com@TAHAKOM.COM

at org.apache.hadoop.security.UserGroupInformation$HadoopLoginModule.commit(UserGroupInformation.java:237)

at java.base/javax.security.auth.login.LoginContext.invoke(LoginContext.java:750)

at java.base/javax.security.auth.login.LoginContext$4.run(LoginContext.java:672)

at java.base/javax.security.auth.login.LoginContext$4.run(LoginContext.java:670)

at java.base/java.security.AccessController.doPrivileged(Native Method)

at java.base/javax.security.auth.login.LoginContext.invokePriv(LoginContext.java:670)

at java.base/javax.security.auth.login.LoginContext.login(LoginContext.java:582)

at org.apache.hadoop.security.UserGroupInformation$HadoopLoginContext.login(UserGroupInformation.java:2106)

at org.apache.hadoop.security.UserGroupInformation.doSubjectLogin(UserGroupInformation.java:2017)

... 113 common frames omitted

Caused by: java.lang.IllegalArgumentException: Illegal principal name nifiregistry/cld-mobpro-nf02.tahakom.com@TAHAKOM.COM: org.apache.hadoop.security.authentication.util.KerberosName$NoMatchingRule: No rules applied to nifiregistry/cld-mobpro-nf02.tahakom.com@TAHAKOM.COM

at org.apache.hadoop.security.User.<init>(User.java:51)

at org.apache.hadoop.security.UserGroupInformation$HadoopLoginModule.commit(UserGroupInformation.java:235)

... 121 common frames omitted

Caused by: org.apache.hadoop.security.authentication.util.KerberosName$NoMatchingRule: No rules applied to nifiregistry/cld-mobpro-nf02.tahakom.com@TAHAKOM.COM

at org.apache.hadoop.security.authentication.util.KerberosName.getShortName(KerberosName.java:429)

at org.apache.hadoop.security.User.<init>(User.java:48)

... 122 common frames omitted