Our Community is getting an upgrade! To get everything ready for the relaunch, we’ll be placing the site in read-only mode starting September 21st.
We really appreciate your understanding while we get things set up behind the scenes. Catch up on all the exciting details about the move here.
Need help or have questions? Drop us a line at [email protected]

Support Questions

Find answers, ask questions, and share your expertise
Announcements
Share your experience with Cloudera on G2 and get a $25 Amazon Gift card.
Hi, I'm CLEO! Something exciting is coming to the Community. Stay Tuned!

Unable to start Nifiregistry after Enable Ranger Dependency

avatar
Visitor

Unable to start Nifiregistry after Enable Ranger Dependency

6 REPLIES 6

avatar
Community Manager

Welcome to the community @muahmmed . To better assist you can you provide some additional details about the steps leading up to this issue and what you have tried already? CC @MattWho @emattos @Xiaomin @psy10 

Keep the questions coming

avatar
Cloudera Employee
We would need to understand first if the issue is on the CM-agent or on the
Nifi-registry. Simply describing if the nifi-registry did not start at all
or did start but then failed would help in knowing if the issue is with
CM-agent or nifi-registry itself.

avatar
Master Mentor

@muahmmed 

We would need to know what is being logged in the nifi-registry-app.log during startup.

Thank you,
Matt

avatar
Cloudera Employee

Hello muahmmed, 
Can you pelase share the error/stack trace here? 

avatar
Frequent Visitor

I have raise the case number 1136446 to cloudera. 

Error: 

at org.apache.nifi.registry.NiFiRegistry.main(NiFiRegistry.java:159)
2025-10-13 15:25:15,938 INFO org.apache.nifi.registry.ranger.RangerAuthorizer: initializing base plugin
2025-10-13 15:25:15,991 INFO org.apache.ranger.authorization.hadoop.config.RangerConfiguration: addResourceIfReadable(ranger-nifi-registry-audit.xml): resource file is file:/run/cloudera-scm-agent/process/1546361847-nifiregistry-NIFI_REGISTRY_SERVER/ranger-nifi-registry-audit.xml
2025-10-13 15:25:16,082 INFO org.apache.ranger.authorization.hadoop.config.RangerConfiguration: addResourceIfReadable(ranger-nifi-registry-security.xml): resource file is file:/run/cloudera-scm-agent/process/1546361847-nifiregistry-NIFI_REGISTRY_SERVER/ranger-nifi-registry-security.xml
2025-10-13 15:25:16,082 INFO org.apache.ranger.authorization.hadoop.config.RangerConfiguration: addResourceIfReadable(ranger-nifi-registry-policymgr-ssl.xml): resource file is file:/run/cloudera-scm-agent/process/1546361847-nifiregistry-NIFI_REGISTRY_SERVER/ranger-nifi-registry-policymgr-ssl.xml
2025-10-13 15:25:16,160 ERROR org.apache.ranger.authorization.hadoop.config.RangerConfiguration: addResourceIfReadable(ranger-nifi-registry-CFM_nifiregistry-audit.xml): couldn't find resource file location
2025-10-13 15:25:16,161 ERROR org.apache.ranger.authorization.hadoop.config.RangerConfiguration: addResourceIfReadable(ranger-nifi-registry-CFM_nifiregistry-security.xml): couldn't find resource file location
2025-10-13 15:25:16,162 ERROR org.apache.ranger.authorization.hadoop.config.RangerConfiguration: addResourceIfReadable(ranger-nifi-registry-CFM_nifiregistry-policymgr-ssl.xml): couldn't find resource file location
2025-10-13 15:25:16,164 INFO org.apache.ranger.authorization.hadoop.config.RangerPluginConfig: PolicyEngineOptions: { evaluatorType: auto, evaluateDelegateAdminOnly: false, disableContextEnrichers: false, disableCustomConditions: false, disableTagPolicyEvaluation: false, disablePolicyRefresher: false, disableTagRetriever: false, enableTagEnricherWithLocalRefresher: false, disableTrieLookupPrefilter: false, optimizeTrieForRetrieval: false, cacheAuditResult: false, disableRoleResolution: true, optimizeTrieForSpace: false, optimizeTagTrieForRetrieval: false, optimizeTagTrieForSpace: false, enableResourceMatcherReuse: true }
2025-10-13 15:38:47,189 WARN org.springframework.boot.web.servlet.context.AnnotationConfigServletWebServerApplicationContext: Exception encountered during context initialization - cancelling refresh attempt: org.springframework.beans.factory.UnsatisfiedDependencyException: Error creating bean with name 'accessPolicyResource' defined in file [/var/lib/nifiregistry/work/jetty/nifi-registry-web-api-1.28.1.2.1.7.2000-69.war/webapp/WEB-INF/classes/org/apache/nifi/registry/web/api/AccessPolicyResource.class]: Unsatisfied dependency expressed through constructor parameter 0; nested exception is org.springframework.beans.factory.UnsatisfiedDependencyException: Error creating bean with name 'standardServiceFacade' defined in file [/var/lib/nifiregistry/work/jetty/nifi-registry-web-api-1.28.1.2.1.7.2000-69.war/webapp/WEB-INF/classes/org/apache/nifi/registry/web/service/StandardServiceFacade.class]: Unsatisfied dependency expressed through constructor parameter 2; nested exception is org.springframework.beans.factory.UnsatisfiedDependencyException: Error creating bean with name 'authorizationService' defined in URL [jar:file:/var/lib/nifiregistry/work/jetty/nifi-registry-web-api-1.28.1.2.1.7.2000-69.war/webapp/WEB-INF/lib/nifi-registry-framework-1.28.1.2.1.7.2000-69.jar!/org/apache/nifi/registry/service/AuthorizationService.class]: Unsatisfied dependency expressed through constructor parameter 1; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'getAuthorizer' defined in class path resource [org/apache/nifi/registry/security/authorization/AuthorizerFactory.class]: Bean instantiation via factory method failed; nested exception is org.springframework.beans.BeanInstantiationException: Failed to instantiate [org.apache.nifi.registry.security.authorization.Authorizer]: Factory method 'getAuthorizer' threw exception; nested exception is org.apache.nifi.registry.security.authorization.AuthorizerFactoryException: Failed to construct Authorizer.
2025-10-13 15:38:47,191 INFO org.apache.nifi.registry.event.EventService: Shutting down event consumer...
2025-10-13 15:38:47,191 INFO org.apache.nifi.registry.event.EventService: Event consumer shutdown!
2025-10-13 15:38:47,191 WARN org.apache.nifi.registry.event.EventService: Interrupted while polling event queue
2025-10-13 15:38:47,192 INFO com.zaxxer.hikari.HikariDataSource: HikariPool-1 - Shutdown initiated...
2025-10-13 15:38:47,196 INFO com.zaxxer.hikari.HikariDataSource: HikariPool-1 - Shutdown completed.
2025-10-13 15:38:47,212 INFO org.springframework.boot.autoconfigure.logging.ConditionEvaluationReportLoggingListener: 
 
Error starting ApplicationContext. To display the conditions report re-run your application with 'debug' enabled.
2025-10-13 15:38:47,252 ERROR org.springframework.boot.SpringApplication: Application run failed
org.springframework.beans.factory.UnsatisfiedDependencyException: Error creating bean with name 'accessPolicyResource' defined in file [/var/lib/nifiregistry/work/jetty/nifi-registry-web-api-1.28.1.2.1.7.2000-69.war/webapp/WEB-INF/classes/org/apache/nifi/registry/web/api/AccessPolicyResource.class]: Unsatisfied dependency expressed through constructor parameter 0; nested exception is org.springframework.beans.factory.UnsatisfiedDependencyException: Error creating bean with name 'standardServiceFacade' defined in file [/var/lib/nifiregistry/work/jetty/nifi-registry-web-api-1.28.1.2.1.7.2000-69.war/webapp/WEB-INF/classes/org/apache/nifi/registry/web/service/StandardServiceFacade.class]: Unsatisfied dependency expressed through constructor parameter 2; nested exception is org.springframework.beans.factory.UnsatisfiedDependencyException: Error creating bean with name 'authorizationService' defined in URL [jar:file:/var/lib/nifiregistry/work/jetty/nifi-registry-web-api-1.28.1.2.1.7.2000-69.war/webapp/WEB-INF/lib/nifi-registry-framework-1.28.1.2.1.7.2000-69.jar!/org/apache/nifi/registry/service/AuthorizationService.class]: Unsatisfied dependency expressed through constructor parameter 1; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'getAuthorizer' defined in class path resource [org/apache/nifi/registry/security/authorization/AuthorizerFactory.class]: Bean instantiation via factory method failed; nested exception is org.springframework.beans.BeanInstantiationException: Failed to instantiate [org.apache.nifi.registry.security.authorization.Authorizer]: Factory method 'getAuthorizer' threw exception; nested exception is org.apache.nifi.registry.security.authorization.AuthorizerFactoryException: Failed to construct Authorizer.
at org.springframework.beans.factory.support.ConstructorResolver.createArgumentArray(ConstructorResolver.java:794)
at org.springframework.beans.factory.support.ConstructorResolver.autowireConstructor(ConstructorResolver.java:220)
at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.autowireConstructor(AbstractAutowireCapableBeanFactory.java:1372)
at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.createBeanInstance(AbstractAutowireCapableBeanFactory.java:1222)
at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.doCreateBean(AbstractAutowireCapableBeanFactory.java:582)
at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.createBean(AbstractAutowireCapableBeanFactory.java:542)
at org.springframework.beans.factory.support.AbstractBeanFactory.lambda$doGetBean$0(AbstractBeanFactory.java:336)
at org.springframework.beans.factory.support.DefaultSingletonBeanRegistry.getSingleton(DefaultSingletonBeanRegistry.java:234)
at org.springframework.beans.factory.support.AbstractBeanFactory.doGetBean(AbstractBeanFactory.java:334)
at org.springframework.beans.factory.support.AbstractBeanFactory.getBean(AbstractBeanFactory.java:209)
at org.springframework.beans.factory.support.DefaultListableBeanFactory.preInstantiateSingletons(DefaultListableBeanFactory.java:955)
at org.springframework.context.support.AbstractApplicationContext.finishBeanFactoryInitialization(AbstractApplicationContext.java:932)
at org.springframework.context.support.AbstractApplicationContext.refresh(AbstractApplicationContext.java:591)
at org.springframework.boot.web.servlet.context.ServletWebServerApplicationContext.refresh(ServletWebServerApplicationContext.java:147)
at org.springframework.boot.SpringApplication.refresh(SpringApplication.java:732)
at org.springframework.boot.SpringApplication.refreshContext(SpringApplication.java:409)
at org.springframework.boot.SpringApplication.run(SpringApplication.java:308)
at org.springframework.boot.web.servlet.support.SpringBootServletInitializer.run(SpringBootServletInitializer.java:175)
at org.springframework.boot.web.servlet.support.SpringBootServletInitializer.createRootApplicationContext(SpringBootServletInitializer.java:155)
at org.springframework.boot.web.servlet.support.SpringBootServletInitializer.onStartup(SpringBootServletInitializer.java:97)
at org.springframework.web.SpringServletContainerInitializer.onStartup(SpringServletContainerInitializer.java:174)
at org.eclipse.jetty.plus.annotation.ContainerInitializer.callStartup(ContainerInitializer.java:142)
at org.eclipse.jetty.annotations.ServletContainerInitializersStarter.doStart(ServletContainerInitializersStarter.java:64)
at org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:73)
at org.eclipse.jetty.servlet.ServletContextHandler.startContext(ServletContextHandler.java:356)
at org.eclipse.jetty.webapp.WebAppContext.startWebapp(WebAppContext.java:1449)
at org.eclipse.jetty.webapp.WebAppContext.startContext(WebAppContext.java:1414)
at org.eclipse.jetty.server.handler.ContextHandler.doStart(ContextHandler.java:916)
at org.eclipse.jetty.servlet.ServletContextHandler.doStart(ServletContextHandler.java:288)
at org.eclipse.jetty.webapp.WebAppContext.doStart(WebAppContext.java:524)
at org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:73)
at org.eclipse.jetty.util.component.ContainerLifeCycle.start(ContainerLifeCycle.java:169)
at org.eclipse.jetty.util.component.ContainerLifeCycle.doStart(ContainerLifeCycle.java:117)
at org.eclipse.jetty.server.handler.AbstractHandler.doStart(AbstractHandler.java:97)
at org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:73)
at org.eclipse.jetty.util.component.ContainerLifeCycle.start(ContainerLifeCycle.java:169)
at org.eclipse.jetty.server.Server.start(Server.java:423)
at org.eclipse.jetty.util.component.ContainerLifeCycle.doStart(ContainerLifeCycle.java:110)
at org.eclipse.jetty.server.handler.AbstractHandler.doStart(AbstractHandler.java:97)
at org.eclipse.jetty.server.Server.doStart(Server.java:387)
at org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:73)
at org.apache.nifi.registry.jetty.JettyServer.start(JettyServer.java:93)
at org.apache.nifi.registry.NiFiRegistry.<init>(NiFiRegistry.java:110)
at org.apache.nifi.registry.NiFiRegistry.main(NiFiRegistry.java:159)
Caused by: org.springframework.beans.factory.UnsatisfiedDependencyException: Error creating bean with name 'standardServiceFacade' defined in file [/var/lib/nifiregistry/work/jetty/nifi-registry-web-api-1.28.1.2.1.7.2000-69.war/webapp/WEB-INF/classes/org/apache/nifi/registry/web/service/StandardServiceFacade.class]: Unsatisfied dependency expressed through constructor parameter 2; nested exception is org.springframework.beans.factory.UnsatisfiedDependencyException: Error creating bean with name 'authorizationService' defined in URL [jar:file:/var/lib/nifiregistry/work/jetty/nifi-registry-web-api-1.28.1.2.1.7.2000-69.war/webapp/WEB-INF/lib/nifi-registry-framework-1.28.1.2.1.7.2000-69.jar!/org/apache/nifi/registry/service/AuthorizationService.class]: Unsatisfied dependency expressed through constructor parameter 1; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'getAuthorizer' defined in class path resource [org/apache/nifi/registry/security/authorization/AuthorizerFactory.class]: Bean instantiation via factory method failed; nested exception is org.springframework.beans.BeanInstantiationException: Failed to instantiate [org.apache.nifi.registry.security.authorization.Authorizer]: Factory method 'getAuthorizer' threw exception; nested exception is org.apache.nifi.registry.security.authorization.AuthorizerFactoryException: Failed to construct Authorizer.
at org.springframework.beans.factory.support.ConstructorResolver.createArgumentArray(ConstructorResolver.java:794)
at org.springframework.beans.factory.support.ConstructorResolver.autowireConstructor(ConstructorResolver.java:220)
at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.autowireConstructor(AbstractAutowireCapableBeanFactory.java:1372)
at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.createBeanInstance(AbstractAutowireCapableBeanFactory.java:1222)
at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.doCreateBean(AbstractAutowireCapableBeanFactory.java:582)
at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.createBean(AbstractAutowireCapableBeanFactory.java:542)
at org.springframework.beans.factory.support.AbstractBeanFactory.lambda$doGetBean$0(AbstractBeanFactory.java:336)
at org.springframework.beans.factory.support.DefaultSingletonBeanRegistry.getSingleton(DefaultSingletonBeanRegistry.java:234)
at org.springframework.beans.factory.support.AbstractBeanFactory.doGetBean(AbstractBeanFactory.java:334)
at org.springframework.beans.factory.support.AbstractBeanFactory.getBean(AbstractBeanFactory.java:209)
at org.springframework.beans.factory.config.DependencyDescriptor.resolveCandidate(DependencyDescriptor.java:276)
at org.springframework.beans.factory.support.DefaultListableBeanFactory.doResolveDependency(DefaultListableBeanFactory.java:1391)
at org.springframework.beans.factory.support.DefaultListableBeanFactory.resolveDependency(DefaultListableBeanFactory.java:1311)
at org.springframework.beans.factory.support.ConstructorResolver.resolveAutowiredArgument(ConstructorResolver.java:904)
at org.springframework.beans.factory.support.ConstructorResolver.createArgumentArray(ConstructorResolver.java:781)
... 43 common frames omitted
Caused by: org.springframework.beans.factory.UnsatisfiedDependencyException: Error creating bean with name 'authorizationService' defined in URL [jar:file:/var/lib/nifiregistry/work/jetty/nifi-registry-web-api-1.28.1.2.1.7.2000-69.war/webapp/WEB-INF/lib/nifi-registry-framework-1.28.1.2.1.7.2000-69.jar!/org/apache/nifi/registry/service/AuthorizationService.class]: Unsatisfied dependency expressed through constructor parameter 1; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'getAuthorizer' defined in class path resource [org/apache/nifi/registry/security/authorization/AuthorizerFactory.class]: Bean instantiation via factory method failed; nested exception is org.springframework.beans.BeanInstantiationException: Failed to instantiate [org.apache.nifi.registry.security.authorization.Authorizer]: Factory method 'getAuthorizer' threw exception; nested exception is org.apache.nifi.registry.security.authorization.AuthorizerFactoryException: Failed to construct Authorizer.
at org.springframework.beans.factory.support.ConstructorResolver.createArgumentArray(ConstructorResolver.java:794)
at org.springframework.beans.factory.support.ConstructorResolver.autowireConstructor(ConstructorResolver.java:220)
at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.autowireConstructor(AbstractAutowireCapableBeanFactory.java:1372)
at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.createBeanInstance(AbstractAutowireCapableBeanFactory.java:1222)
at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.doCreateBean(AbstractAutowireCapableBeanFactory.java:582)
at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.createBean(AbstractAutowireCapableBeanFactory.java:542)
at org.springframework.beans.factory.support.AbstractBeanFactory.lambda$doGetBean$0(AbstractBeanFactory.java:336)
at org.springframework.beans.factory.support.DefaultSingletonBeanRegistry.getSingleton(DefaultSingletonBeanRegistry.java:234)
at org.springframework.beans.factory.support.AbstractBeanFactory.doGetBean(AbstractBeanFactory.java:334)
at org.springframework.beans.factory.support.AbstractBeanFactory.getBean(AbstractBeanFactory.java:209)
at org.springframework.beans.factory.config.DependencyDescriptor.resolveCandidate(DependencyDescriptor.java:276)
at org.springframework.beans.factory.support.DefaultListableBeanFactory.doResolveDependency(DefaultListableBeanFactory.java:1391)
at org.springframework.beans.factory.support.DefaultListableBeanFactory.resolveDependency(DefaultListableBeanFactory.java:1311)
at org.springframework.beans.factory.support.ConstructorResolver.resolveAutowiredArgument(ConstructorResolver.java:904)
at org.springframework.beans.factory.support.ConstructorResolver.createArgumentArray(ConstructorResolver.java:781)
... 57 common frames omitted
Caused by: org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'getAuthorizer' defined in class path resource [org/apache/nifi/registry/security/authorization/AuthorizerFactory.class]: Bean instantiation via factory method failed; nested exception is org.springframework.beans.BeanInstantiationException: Failed to instantiate [org.apache.nifi.registry.security.authorization.Authorizer]: Factory method 'getAuthorizer' threw exception; nested exception is org.apache.nifi.registry.security.authorization.AuthorizerFactoryException: Failed to construct Authorizer.
at org.springframework.beans.factory.support.ConstructorResolver.instantiate(ConstructorResolver.java:646)
at org.springframework.beans.factory.support.ConstructorResolver.instantiateUsingFactoryMethod(ConstructorResolver.java:477)
at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.instantiateUsingFactoryMethod(AbstractAutowireCapableBeanFactory.java:1352)
at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.createBeanInstance(AbstractAutowireCapableBeanFactory.java:1195)
at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.doCreateBean(AbstractAutowireCapableBeanFactory.java:582)
at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.createBean(AbstractAutowireCapableBeanFactory.java:542)
at org.springframework.beans.factory.support.AbstractBeanFactory.lambda$doGetBean$0(AbstractBeanFactory.java:336)
at org.springframework.beans.factory.support.DefaultSingletonBeanRegistry.getSingleton(DefaultSingletonBeanRegistry.java:234)
at org.springframework.beans.factory.support.AbstractBeanFactory.doGetBean(AbstractBeanFactory.java:334)
at org.springframework.beans.factory.support.AbstractBeanFactory.getBean(AbstractBeanFactory.java:209)
at org.springframework.beans.factory.config.DependencyDescriptor.resolveCandidate(DependencyDescriptor.java:276)
at org.springframework.beans.factory.support.DefaultListableBeanFactory.doResolveDependency(DefaultListableBeanFactory.java:1391)
at org.springframework.beans.factory.support.DefaultListableBeanFactory.resolveDependency(DefaultListableBeanFactory.java:1311)
at org.springframework.beans.factory.support.ConstructorResolver.resolveAutowiredArgument(ConstructorResolver.java:904)
at org.springframework.beans.factory.support.ConstructorResolver.createArgumentArray(ConstructorResolver.java:781)
... 71 common frames omitted
Caused by: org.springframework.beans.BeanInstantiationException: Failed to instantiate [org.apache.nifi.registry.security.authorization.Authorizer]: Factory method 'getAuthorizer' threw exception; nested exception is org.apache.nifi.registry.security.authorization.AuthorizerFactoryException: Failed to construct Authorizer.
at org.springframework.beans.factory.support.SimpleInstantiationStrategy.instantiate(SimpleInstantiationStrategy.java:185)
at org.springframework.beans.factory.support.ConstructorResolver.instantiate(ConstructorResolver.java:641)
... 85 common frames omitted
Caused by: org.apache.hadoop.security.KerberosAuthException: failure to login: for principal: nifiregistry/[email protected] from keytab /var/run/cloudera-scm-agent/process/1546361847-nifiregistry-NIFI_REGISTRY_SERVER/nifiregistry.keytab javax.security.auth.login.LoginException: java.lang.IllegalArgumentException: Illegal principal name nifiregistry/[email protected]: org.apache.hadoop.security.authentication.util.KerberosName$NoMatchingRule: No rules applied to nifiregistry/[email protected]
at org.apache.hadoop.security.UserGroupInformation.doSubjectLogin(UserGroupInformation.java:2027)
at org.apache.hadoop.security.UserGroupInformation.loginUserFromKeytabAndReturnUGI(UserGroupInformation.java:1361)
at org.apache.hadoop.security.UserGroupInformation.loginUserFromKeytab(UserGroupInformation.java:1140)
at org.apache.nifi.registry.ranger.RangerAuthorizer.onConfigured(RangerAuthorizer.java:170)
... 110 common frames omitted
Caused by: javax.security.auth.login.LoginException: java.lang.IllegalArgumentException: Illegal principal name nifiregistry/[email protected]: org.apache.hadoop.security.authentication.util.KerberosName$NoMatchingRule: No rules applied to nifiregistry/[email protected]
at org.apache.hadoop.security.UserGroupInformation$HadoopLoginModule.commit(UserGroupInformation.java:237)
 
Note: We use custom krb5.conf ( /etc/hadoop/krb/krb5.conf ).
I am able to kinit using below SPN with keytab.
 
nifiregistry/[email protected] from keytab /var/run/cloudera-scm-agent/process/1546361847-nifiregistry-NIFI_REGISTRY_SERVER/nifiregistry.keytab

 

Scenario: When we disable ranger, the nifiregistry comes alive. also we have nifi services on the same host where nifiregistry is and NiFi works fine.  We are running nifi & nifiregistry on compute cluster.



avatar
Frequent Visitor

 

@psy10 @cjervis @MattWho 

Case 1136446


We are using NiFi & NiFiRegistry on compute Cluster. NiFi seems to be working fine but unfortunately not Nifiregistry. once disable ranger dependency nifiregistry running.

Error:
2025-10-13 15:25:15,938 INFO org.apache.nifi.registry.ranger.RangerAuthorizer: initializing base plugin
2025-10-13 15:25:15,991 INFO org.apache.ranger.authorization.hadoop.config.RangerConfiguration: addResourceIfReadable(ranger-nifi-registry-audit.xml): resource file is file:/run/cloudera-scm-agent/process/1546361847-nifiregistry-NIFI_REGISTRY_SERVER/ranger-nifi-registry-audit.xml
2025-10-13 15:25:16,082 INFO org.apache.ranger.authorization.hadoop.config.RangerConfiguration: addResourceIfReadable(ranger-nifi-registry-security.xml): resource file is file:/run/cloudera-scm-agent/process/1546361847-nifiregistry-NIFI_REGISTRY_SERVER/ranger-nifi-registry-security.xml
2025-10-13 15:25:16,082 INFO org.apache.ranger.authorization.hadoop.config.RangerConfiguration: addResourceIfReadable(ranger-nifi-registry-policymgr-ssl.xml): resource file is file:/run/cloudera-scm-agent/process/1546361847-nifiregistry-NIFI_REGISTRY_SERVER/ranger-nifi-registry-policymgr-ssl.xml
2025-10-13 15:25:16,160 ERROR org.apache.ranger.authorization.hadoop.config.RangerConfiguration: addResourceIfReadable(ranger-nifi-registry-CFM_nifiregistry-audit.xml): couldn't find resource file location
2025-10-13 15:25:16,161 ERROR org.apache.ranger.authorization.hadoop.config.RangerConfiguration: addResourceIfReadable(ranger-nifi-registry-CFM_nifiregistry-security.xml): couldn't find resource file location
2025-10-13 15:25:16,162 ERROR org.apache.ranger.authorization.hadoop.config.RangerConfiguration: addResourceIfReadable(ranger-nifi-registry-CFM_nifiregistry-policymgr-ssl.xml): couldn't find resource file location
2025-10-13 15:25:16,164 INFO org.apache.ranger.authorization.hadoop.config.RangerPluginConfig: PolicyEngineOptions: { evaluatorType: auto, evaluateDelegateAdminOnly: false, disableContextEnrichers: false, disableCustomConditions: false, disableTagPolicyEvaluation: false, disablePolicyRefresher: false, disableTagRetriever: false, enableTagEnricherWithLocalRefresher: false, disableTrieLookupPrefilter: false, optimizeTrieForRetrieval: false, cacheAuditResult: false, disableRoleResolution: true, optimizeTrieForSpace: false, optimizeTagTrieForRetrieval: false, optimizeTagTrieForSpace: false, enableResourceMatcherReuse: true }
2025-10-13 15:38:47,189 WARN org.springframework.boot.web.servlet.context.AnnotationConfigServletWebServerApplicationContext: Exception encountered during context initialization - cancelling refresh attempt: org.springframework.beans.factory.UnsatisfiedDependencyException: Error creating bean with name 'accessPolicyResource' defined in file [/var/lib/nifiregistry/work/jetty/nifi-registry-web-api-1.28.1.2.1.7.2000-69.war/webapp/WEB-INF/classes/org/apache/nifi/registry/web/api/AccessPolicyResource.class]: Unsatisfied dependency expressed through constructor parameter 0; nested exception is org.springframework.beans.factory.UnsatisfiedDependencyException: Error creating bean with name 'standardServiceFacade' defined in file [/var/lib/nifiregistry/work/jetty/nifi-registry-web-api-1.28.1.2.1.7.2000-69.war/webapp/WEB-INF/classes/org/apache/nifi/registry/web/service/StandardServiceFacade.class]: Unsatisfied dependency expressed through constructor parameter 2; nested exception is org.springframework.beans.factory.UnsatisfiedDependencyException: Error creating bean with name 'authorizationService' defined in URL [jar:file:/var/lib/nifiregistry/work/jetty/nifi-registry-web-api-1.28.1.2.1.7.2000-69.war/webapp/WEB-INF/lib/nifi-registry-framework-1.28.1.2.1.7.2000-69.jar!/org/apache/nifi/registry/service/AuthorizationService.class]: Unsatisfied dependency expressed through constructor parameter 1; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'getAuthorizer' defined in class path resource [org/apache/nifi/registry/security/authorization/AuthorizerFactory.class]: Bean instantiation via factory method failed; nested exception is org.springframework.beans.BeanInstantiationException: Failed to instantiate [org.apache.nifi.registry.security.authorization.Authorizer]: Factory method 'getAuthorizer' threw exception; nested exception is org.apache.nifi.registry.security.authorization.AuthorizerFactoryException: Failed to construct Authorizer.
2025-10-13 15:38:47,191 INFO org.apache.nifi.registry.event.EventService: Shutting down event consumer...
2025-10-13 15:38:47,191 INFO org.apache.nifi.registry.event.EventService: Event consumer shutdown!
2025-10-13 15:38:47,191 WARN org.apache.nifi.registry.event.EventService: Interrupted while polling event queue
2025-10-13 15:38:47,192 INFO com.zaxxer.hikari.HikariDataSource: HikariPool-1 - Shutdown initiated...
2025-10-13 15:38:47,196 INFO com.zaxxer.hikari.HikariDataSource: HikariPool-1 - Shutdown completed.
2025-10-13 15:38:47,212 INFO org.springframework.boot.autoconfigure.logging.ConditionEvaluationReportLoggingListener: 
 
Error starting ApplicationContext. To display the conditions report re-run your application with 'debug' enabled.
2025-10-13 15:38:47,252 ERROR org.springframework.boot.SpringApplication: Application run failed
org.springframework.beans.factory.UnsatisfiedDependencyException: Error creating bean with name 'accessPolicyResource' defined in file [/var/lib/nifiregistry/work/jetty/nifi-registry-web-api-1.28.1.2.1.7.2000-69.war/webapp/WEB-INF/classes/org/apache/nifi/registry/web/api/AccessPolicyResource.class]: Unsatisfied dependency expressed through constructor parameter 0; nested exception is org.springframework.beans.factory.UnsatisfiedDependencyException: Error creating bean with name 'standardServiceFacade' defined in file [/var/lib/nifiregistry/work/jetty/nifi-registry-web-api-1.28.1.2.1.7.2000-69.war/webapp/WEB-INF/classes/org/apache/nifi/registry/web/service/StandardServiceFacade.class]: Unsatisfied dependency expressed through constructor parameter 2; nested exception is org.springframework.beans.factory.UnsatisfiedDependencyException: Error creating bean with name 'authorizationService' defined in URL [jar:file:/var/lib/nifiregistry/work/jetty/nifi-registry-web-api-1.28.1.2.1.7.2000-69.war/webapp/WEB-INF/lib/nifi-registry-framework-1.28.1.2.1.7.2000-69.jar!/org/apache/nifi/registry/service/AuthorizationService.class]: Unsatisfied dependency expressed through constructor parameter 1; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'getAuthorizer' defined in class path resource [org/apache/nifi/registry/security/authorization/AuthorizerFactory.class]: Bean instantiation via factory method failed; nested exception is org.springframework.beans.BeanInstantiationException: Failed to instantiate [org.apache.nifi.registry.security.authorization.Authorizer]: Factory method 'getAuthorizer' threw exception; nested exception is org.apache.nifi.registry.security.authorization.AuthorizerFactoryException: Failed to construct Authorizer.
at org.springframework.beans.factory.support.ConstructorResolver.createArgumentArray(ConstructorResolver.java:794)
at org.springframework.beans.factory.support.ConstructorResolver.autowireConstructor(ConstructorResolver.java:220)
at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.autowireConstructor(AbstractAutowireCapableBeanFactory.java:1372)
at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.createBeanInstance(AbstractAutowireCapableBeanFactory.java:1222)
at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.doCreateBean(AbstractAutowireCapableBeanFactory.java:582)
at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.createBean(AbstractAutowireCapableBeanFactory.java:542)
at org.springframework.beans.factory.support.AbstractBeanFactory.lambda$doGetBean$0(AbstractBeanFactory.java:336)
at org.springframework.beans.factory.support.DefaultSingletonBeanRegistry.getSingleton(DefaultSingletonBeanRegistry.java:234)
at org.springframework.beans.factory.support.AbstractBeanFactory.doGetBean(AbstractBeanFactory.java:334)
at org.springframework.beans.factory.support.AbstractBeanFactory.getBean(AbstractBeanFactory.java:209)
at org.springframework.beans.factory.support.DefaultListableBeanFactory.preInstantiateSingletons(DefaultListableBeanFactory.java:955)
at org.springframework.context.support.AbstractApplicationContext.finishBeanFactoryInitialization(AbstractApplicationContext.java:932)
at org.springframework.context.support.AbstractApplicationContext.refresh(AbstractApplicationContext.java:591)
at org.springframework.boot.web.servlet.context.ServletWebServerApplicationContext.refresh(ServletWebServerApplicationContext.java:147)
at org.springframework.boot.SpringApplication.refresh(SpringApplication.java:732)
at org.springframework.boot.SpringApplication.refreshContext(SpringApplication.java:409)
at org.springframework.boot.SpringApplication.run(SpringApplication.java:308)
at org.springframework.boot.web.servlet.support.SpringBootServletInitializer.run(SpringBootServletInitializer.java:175)
at org.springframework.boot.web.servlet.support.SpringBootServletInitializer.createRootApplicationContext(SpringBootServletInitializer.java:155)
at org.springframework.boot.web.servlet.support.SpringBootServletInitializer.onStartup(SpringBootServletInitializer.java:97)
at org.springframework.web.SpringServletContainerInitializer.onStartup(SpringServletContainerInitializer.java:174)
at org.eclipse.jetty.plus.annotation.ContainerInitializer.callStartup(ContainerInitializer.java:142)
at org.eclipse.jetty.annotations.ServletContainerInitializersStarter.doStart(ServletContainerInitializersStarter.java:64)
at org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:73)
at org.eclipse.jetty.servlet.ServletContextHandler.startContext(ServletContextHandler.java:356)
at org.eclipse.jetty.webapp.WebAppContext.startWebapp(WebAppContext.java:1449)
at org.eclipse.jetty.webapp.WebAppContext.startContext(WebAppContext.java:1414)
at org.eclipse.jetty.server.handler.ContextHandler.doStart(ContextHandler.java:916)
at org.eclipse.jetty.servlet.ServletContextHandler.doStart(ServletContextHandler.java:288)
at org.eclipse.jetty.webapp.WebAppContext.doStart(WebAppContext.java:524)
at org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:73)
at org.eclipse.jetty.util.component.ContainerLifeCycle.start(ContainerLifeCycle.java:169)
at org.eclipse.jetty.util.component.ContainerLifeCycle.doStart(ContainerLifeCycle.java:117)
at org.eclipse.jetty.server.handler.AbstractHandler.doStart(AbstractHandler.java:97)
at org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:73)
at org.eclipse.jetty.util.component.ContainerLifeCycle.start(ContainerLifeCycle.java:169)
at org.eclipse.jetty.server.Server.start(Server.java:423)
at org.eclipse.jetty.util.component.ContainerLifeCycle.doStart(ContainerLifeCycle.java:110)
at org.eclipse.jetty.server.handler.AbstractHandler.doStart(AbstractHandler.java:97)
at org.eclipse.jetty.server.Server.doStart(Server.java:387)
at org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:73)
at org.apache.nifi.registry.jetty.JettyServer.start(JettyServer.java:93)
at org.apache.nifi.registry.NiFiRegistry.<init>(NiFiRegistry.java:110)
at org.apache.nifi.registry.NiFiRegistry.main(NiFiRegistry.java:159)
Caused by: org.springframework.beans.factory.UnsatisfiedDependencyException: Error creating bean with name 'standardServiceFacade' defined in file [/var/lib/nifiregistry/work/jetty/nifi-registry-web-api-1.28.1.2.1.7.2000-69.war/webapp/WEB-INF/classes/org/apache/nifi/registry/web/service/StandardServiceFacade.class]: Unsatisfied dependency expressed through constructor parameter 2; nested exception is org.springframework.beans.factory.UnsatisfiedDependencyException: Error creating bean with name 'authorizationService' defined in URL [jar:file:/var/lib/nifiregistry/work/jetty/nifi-registry-web-api-1.28.1.2.1.7.2000-69.war/webapp/WEB-INF/lib/nifi-registry-framework-1.28.1.2.1.7.2000-69.jar!/org/apache/nifi/registry/service/AuthorizationService.class]: Unsatisfied dependency expressed through constructor parameter 1; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'getAuthorizer' defined in class path resource [org/apache/nifi/registry/security/authorization/AuthorizerFactory.class]: Bean instantiation via factory method failed; nested exception is org.springframework.beans.BeanInstantiationException: Failed to instantiate [org.apache.nifi.registry.security.authorization.Authorizer]: Factory method 'getAuthorizer' threw exception; nested exception is org.apache.nifi.registry.security.authorization.AuthorizerFactoryException: Failed to construct Authorizer.
at org.springframework.beans.factory.support.ConstructorResolver.createArgumentArray(ConstructorResolver.java:794)
at org.springframework.beans.factory.support.ConstructorResolver.autowireConstructor(ConstructorResolver.java:220)
at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.autowireConstructor(AbstractAutowireCapableBeanFactory.java:1372)
at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.createBeanInstance(AbstractAutowireCapableBeanFactory.java:1222)
at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.doCreateBean(AbstractAutowireCapableBeanFactory.java:582)
at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.createBean(AbstractAutowireCapableBeanFactory.java:542)
at org.springframework.beans.factory.support.AbstractBeanFactory.lambda$doGetBean$0(AbstractBeanFactory.java:336)
at org.springframew
 
Caused by: org.springframework.beans.BeanInstantiationException: Failed to instantiate [org.apache.nifi.registry.security.authorization.Authorizer]: Factory method 'getAuthorizer' threw exception; nested exception is org.apache.nifi.registry.security.authorization.AuthorizerFactoryException: Failed to construct Authorizer.
at org.springframework.beans.factory.support.SimpleInstantiationStrategy.instantiate(SimpleInstantiationStrategy.java:185)
at org.springframework.beans.factory.support.ConstructorResolver.instantiate(ConstructorResolver.java:641)
... 85 common frames omitted
Caused by: org.apache.nifi.registry.security.authorization.AuthorizerFactoryException: Failed to construct Authorizer.
at org.apache.nifi.registry.security.authorization.AuthorizerFactory.getAuthorizer(AuthorizerFactory.java:268)
at org.apache.nifi.registry.security.authorization.AuthorizerFactory$$EnhancerBySpringCGLIB$$682119f9.CGLIB$getAuthorizer$3(<generated>)
at org.apache.nifi.registry.security.authorization.AuthorizerFactory$$EnhancerBySpringCGLIB$$682119f9$$FastClassBySpringCGLIB$$38000600.invoke(<generated>)
at org.springframework.cglib.proxy.MethodProxy.invokeSuper(MethodProxy.java:244)
at org.springframework.context.annotation.ConfigurationClassEnhancer$BeanMethodInterceptor.intercept(ConfigurationClassEnhancer.java:331)
at org.apache.nifi.registry.security.authorization.AuthorizerFactory$$EnhancerBySpringCGLIB$$682119f9.getAuthorizer(<generated>)
at org.apache.nifi.registry.security.authorization.AuthorizerFactory$$FastClassBySpringCGLIB$$1266b595.invoke(<generated>)
at org.springframework.cglib.proxy.MethodProxy.invoke(MethodProxy.java:218)
at org.springframework.aop.framework.CglibAopProxy$CglibMethodInvocation.invokeJoinpoint(CglibAopProxy.java:792)
at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:163)
at org.springframework.aop.framework.CglibAopProxy$CglibMethodInvocation.proceed(CglibAopProxy.java:762)
at org.springframework.transaction.interceptor.TransactionInterceptor$1.proceedWithInvocation(TransactionInterceptor.java:123)
at org.springframework.transaction.interceptor.TransactionAspectSupport.invokeWithinTransaction(TransactionAspectSupport.java:388)
at org.springframework.transaction.interceptor.TransactionInterceptor.invoke(TransactionInterceptor.java:119)
at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:186)
at org.springframework.aop.framework.CglibAopProxy$CglibMethodInvocation.proceed(CglibAopProxy.java:762)
at org.springframework.aop.framework.CglibAopProxy$DynamicAdvisedInterceptor.intercept(CglibAopProxy.java:707)
at org.apache.nifi.registry.security.authorization.AuthorizerFactory$$EnhancerBySpringCGLIB$$fc932d61.getAuthorizer(<generated>)
at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.base/java.lang.reflect.Method.invoke(Method.java:566)
at org.springframework.beans.factory.support.SimpleInstantiationStrategy.instantiate(SimpleInstantiationStrategy.java:154)
... 86 common frames omitted
Caused by: org.apache.nifi.registry.security.exception.SecurityProviderCreationException: Error creating RangerBasePlugin
at org.apache.nifi.registry.ranger.RangerAuthorizer.onConfigured(RangerAuthorizer.java:182)
at org.apache.nifi.registry.security.authorization.AuthorizerFactory$ManagedAuthorizerWrapper.onConfigured(AuthorizerFactory.java:830)
at org.apache.nifi.registry.security.authorization.AuthorizerFactory.getAuthorizer(AuthorizerFactory.java:261)
... 108 common frames omitted
Caused by: org.apache.hadoop.security.KerberosAuthException: failure to login: for principal: nifiregistry/[email protected] from keytab /var/run/cloudera-scm-agent/process/1546361847-nifiregistry-NIFI_REGISTRY_SERVER/nifiregistry.keytab javax.security.auth.login.LoginException: java.lang.IllegalArgumentException: Illegal principal name nifiregistry/[email protected]: org.apache.hadoop.security.authentication.util.KerberosName$NoMatchingRule: No rules applied to nifiregistry/[email protected]
at org.apache.hadoop.security.UserGroupInformation.doSubjectLogin(UserGroupInformation.java:2027)
at org.apache.hadoop.security.UserGroupInformation.loginUserFromKeytabAndReturnUGI(UserGroupInformation.java:1361)
at org.apache.hadoop.security.UserGroupInformation.loginUserFromKeytab(UserGroupInformation.java:1140)
at org.apache.nifi.registry.ranger.RangerAuthorizer.onConfigured(RangerAuthorizer.java:170)
... 110 common frames omitted
Caused by: javax.security.auth.login.LoginException: java.lang.IllegalArgumentException: Illegal principal name nifiregistry/[email protected]: org.apache.hadoop.security.authentication.util.KerberosName$NoMatchingRule: No rules applied to nifiregistry/[email protected]
at org.apache.hadoop.security.UserGroupInformation$HadoopLoginModule.commit(UserGroupInformation.java:237)
at java.base/javax.security.auth.login.LoginContext.invoke(LoginContext.java:750)
at java.base/javax.security.auth.login.LoginContext$4.run(LoginContext.java:672)
at java.base/javax.security.auth.login.LoginContext$4.run(LoginContext.java:670)
at java.base/java.security.AccessController.doPrivileged(Native Method)
at java.base/javax.security.auth.login.LoginContext.invokePriv(LoginContext.java:670)
at java.base/javax.security.auth.login.LoginContext.login(LoginContext.java:582)
at org.apache.hadoop.security.UserGroupInformation$HadoopLoginContext.login(UserGroupInformation.java:2106)
at org.apache.hadoop.security.UserGroupInformation.doSubjectLogin(UserGroupInformation.java:2017)
... 113 common frames omitted
Caused by: java.lang.IllegalArgumentException: Illegal principal name nifiregistry/[email protected]: org.apache.hadoop.security.authentication.util.KerberosName$NoMatchingRule: No rules applied to nifiregistry/[email protected]
at org.apache.hadoop.security.User.<init>(User.java:51)
at org.apache.hadoop.security.UserGroupInformation$HadoopLoginModule.commit(UserGroupInformation.java:235)
... 121 common frames omitted
Caused by: org.apache.hadoop.security.authentication.util.KerberosName$NoMatchingRule: No rules applied to nifiregistry/[email protected]
at org.apache.hadoop.security.authentication.util.KerberosName.getShortName(KerberosName.java:429)
at org.apache.hadoop.security.User.<init>(User.java:48)
... 122 common frames omitted