Skip to main content
muahmmed
muahmmed
Bronze III
October 19, 2025
Question

Unable to start Nifiregistry after Enable Ranger Dependency

Unable to start Nifiregistry after Enable Ranger Dependency

6 replies

cjervis
Community Manager
cjervis
Community Manager
October 20, 2025

Welcome to the community @muahmmed . To better assist you can you provide some additional details about the steps leading up to this issue and what you have tried already? CC @MattWho @emattos @Xiaomin @psy10 

Translate
Keep the questions coming
emattos
Gold ⭐️
emattos
Gold ⭐️
October 21, 2025
We would need to understand first if the issue is on the CM-agent or on the
Nifi-registry. Simply describing if the nifi-registry did not start at all
or did start but then failed would help in knowing if the issue is with
CM-agent or nifi-registry itself.
Translate
MattWho
Titanium ⭐️⭐️⭐️
MattWho
Titanium ⭐️⭐️⭐️
October 20, 2025

@muahmmed 

We would need to know what is being logged in the nifi-registry-app.log during startup.

Thank you,
Matt

Translate
psy10
Silver ⭐️
psy10
Silver ⭐️
October 20, 2025

Hello @muahmmed
Can you pelase share the error/stack trace here? 

Translate
muzhansari
muzhansari
Silver ⭐️⭐️
October 21, 2025

I have raise the case number 1136446 to cloudera. 

Error: 

at org.apache.nifi.registry.NiFiRegistry.main(NiFiRegistry.java:159)
2025-10-13 15:25:15,938 INFO org.apache.nifi.registry.ranger.RangerAuthorizer: initializing base plugin
2025-10-13 15:25:15,991 INFO org.apache.ranger.authorization.hadoop.config.RangerConfiguration: addResourceIfReadable(ranger-nifi-registry-audit.xml): resource file is file:/run/cloudera-scm-agent/process/1546361847-nifiregistry-NIFI_REGISTRY_SERVER/ranger-nifi-registry-audit.xml
2025-10-13 15:25:16,082 INFO org.apache.ranger.authorization.hadoop.config.RangerConfiguration: addResourceIfReadable(ranger-nifi-registry-security.xml): resource file is file:/run/cloudera-scm-agent/process/1546361847-nifiregistry-NIFI_REGISTRY_SERVER/ranger-nifi-registry-security.xml
2025-10-13 15:25:16,082 INFO org.apache.ranger.authorization.hadoop.config.RangerConfiguration: addResourceIfReadable(ranger-nifi-registry-policymgr-ssl.xml): resource file is file:/run/cloudera-scm-agent/process/1546361847-nifiregistry-NIFI_REGISTRY_SERVER/ranger-nifi-registry-policymgr-ssl.xml
2025-10-13 15:25:16,160 ERROR org.apache.ranger.authorization.hadoop.config.RangerConfiguration: addResourceIfReadable(ranger-nifi-registry-CFM_nifiregistry-audit.xml): couldn't find resource file location
2025-10-13 15:25:16,161 ERROR org.apache.ranger.authorization.hadoop.config.RangerConfiguration: addResourceIfReadable(ranger-nifi-registry-CFM_nifiregistry-security.xml): couldn't find resource file location
2025-10-13 15:25:16,162 ERROR org.apache.ranger.authorization.hadoop.config.RangerConfiguration: addResourceIfReadable(ranger-nifi-registry-CFM_nifiregistry-policymgr-ssl.xml): couldn't find resource file location
2025-10-13 15:25:16,164 INFO org.apache.ranger.authorization.hadoop.config.RangerPluginConfig: PolicyEngineOptions: { evaluatorType: auto, evaluateDelegateAdminOnly: false, disableContextEnrichers: false, disableCustomConditions: false, disableTagPolicyEvaluation: false, disablePolicyRefresher: false, disableTagRetriever: false, enableTagEnricherWithLocalRefresher: false, disableTrieLookupPrefilter: false, optimizeTrieForRetrieval: false, cacheAuditResult: false, disableRoleResolution: true, optimizeTrieForSpace: false, optimizeTagTrieForRetrieval: false, optimizeTagTrieForSpace: false, enableResourceMatcherReuse: true }
2025-10-13 15:38:47,189 WARN org.springframework.boot.web.servlet.context.AnnotationConfigServletWebServerApplicationContext: Exception encountered during context initialization - cancelling refresh attempt: org.springframework.beans.factory.UnsatisfiedDependencyException: Error creating bean with name 'accessPolicyResource' defined in file [/var/lib/nifiregistry/work/jetty/nifi-registry-web-api-1.28.1.2.1.7.2000-69.war/webapp/WEB-INF/classes/org/apache/nifi/registry/web/api/AccessPolicyResource.class]: Unsatisfied dependency expressed through constructor parameter 0; nested exception is org.springframework.beans.factory.UnsatisfiedDependencyException: Error creating bean with name 'standardServiceFacade' defined in file [/var/lib/nifiregistry/work/jetty/nifi-registry-web-api-1.28.1.2.1.7.2000-69.war/webapp/WEB-INF/classes/org/apache/nifi/registry/web/service/StandardServiceFacade.class]: Unsatisfied dependency expressed through constructor parameter 2; nested exception is org.springframework.beans.factory.UnsatisfiedDependencyException: Error creating bean with name 'authorizationService' defined in URL [jar:file:/var/lib/nifiregistry/work/jetty/nifi-registry-web-api-1.28.1.2.1.7.2000-69.war/webapp/WEB-INF/lib/nifi-registry-framework-1.28.1.2.1.7.2000-69.jar!/org/apache/nifi/registry/service/AuthorizationService.class]: Unsatisfied dependency expressed through constructor parameter 1; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'getAuthorizer' defined in class path resource [org/apache/nifi/registry/security/authorization/AuthorizerFactory.class]: Bean instantiation via factory method failed; nested exception is org.springframework.beans.BeanInstantiationException: Failed to instantiate [org.apache.nifi.registry.security.authorization.Authorizer]: Factory method 'getAuthorizer' threw exception; nested exception is org.apache.nifi.registry.security.authorization.AuthorizerFactoryException: Failed to construct Authorizer.
2025-10-13 15:38:47,191 INFO org.apache.nifi.registry.event.EventService: Shutting down event consumer...
2025-10-13 15:38:47,191 INFO org.apache.nifi.registry.event.EventService: Event consumer shutdown!
2025-10-13 15:38:47,191 WARN org.apache.nifi.registry.event.EventService: Interrupted while polling event queue
2025-10-13 15:38:47,192 INFO com.zaxxer.hikari.HikariDataSource: HikariPool-1 - Shutdown initiated...
2025-10-13 15:38:47,196 INFO com.zaxxer.hikari.HikariDataSource: HikariPool-1 - Shutdown completed.
2025-10-13 15:38:47,212 INFO org.springframework.boot.autoconfigure.logging.ConditionEvaluationReportLoggingListener: 
 
Error starting ApplicationContext. To display the conditions report re-run your application with 'debug' enabled.
2025-10-13 15:38:47,252 ERROR org.springframework.boot.SpringApplication: Application run failed
org.springframework.beans.factory.UnsatisfiedDependencyException: Error creating bean with name 'accessPolicyResource' defined in file [/var/lib/nifiregistry/work/jetty/nifi-registry-web-api-1.28.1.2.1.7.2000-69.war/webapp/WEB-INF/classes/org/apache/nifi/registry/web/api/AccessPolicyResource.class]: Unsatisfied dependency expressed through constructor parameter 0; nested exception is org.springframework.beans.factory.UnsatisfiedDependencyException: Error creating bean with name 'standardServiceFacade' defined in file [/var/lib/nifiregistry/work/jetty/nifi-registry-web-api-1.28.1.2.1.7.2000-69.war/webapp/WEB-INF/classes/org/apache/nifi/registry/web/service/StandardServiceFacade.class]: Unsatisfied dependency expressed through constructor parameter 2; nested exception is org.springframework.beans.factory.UnsatisfiedDependencyException: Error creating bean with name 'authorizationService' defined in URL [jar:file:/var/lib/nifiregistry/work/jetty/nifi-registry-web-api-1.28.1.2.1.7.2000-69.war/webapp/WEB-INF/lib/nifi-registry-framework-1.28.1.2.1.7.2000-69.jar!/org/apache/nifi/registry/service/AuthorizationService.class]: Unsatisfied dependency expressed through constructor parameter 1; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'getAuthorizer' defined in class path resource [org/apache/nifi/registry/security/authorization/AuthorizerFactory.class]: Bean instantiation via factory method failed; nested exception is org.springframework.beans.BeanInstantiationException: Failed to instantiate [org.apache.nifi.registry.security.authorization.Authorizer]: Factory method 'getAuthorizer' threw exception; nested exception is org.apache.nifi.registry.security.authorization.AuthorizerFactoryException: Failed to construct Authorizer.
at org.springframework.beans.factory.support.ConstructorResolver.createArgumentArray(ConstructorResolver.java:794)
at org.springframework.beans.factory.support.ConstructorResolver.autowireConstructor(ConstructorResolver.java:220)
at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.autowireConstructor(AbstractAutowireCapableBeanFactory.java:1372)
at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.createBeanInstance(AbstractAutowireCapableBeanFactory.java:1222)
at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.doCreateBean(AbstractAutowireCapableBeanFactory.java:582)
at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.createBean(AbstractAutowireCapableBeanFactory.java:542)
at org.springframework.beans.factory.support.AbstractBeanFactory.lambda$doGetBean$0(AbstractBeanFactory.java:336)
at org.springframework.beans.factory.support.DefaultSingletonBeanRegistry.getSingleton(DefaultSingletonBeanRegistry.java:234)
at org.springframework.beans.factory.support.AbstractBeanFactory.doGetBean(AbstractBeanFactory.java:334)
at org.springframework.beans.factory.support.AbstractBeanFactory.getBean(AbstractBeanFactory.java:209)
at org.springframework.beans.factory.support.DefaultListableBeanFactory.preInstantiateSingletons(DefaultListableBeanFactory.java:955)
at org.springframework.context.support.AbstractApplicationContext.finishBeanFactoryInitialization(AbstractApplicationContext.java:932)
at org.springframework.context.support.AbstractApplicationContext.refresh(AbstractApplicationContext.java:591)
at org.springframework.boot.web.servlet.context.ServletWebServerApplicationContext.refresh(ServletWebServerApplicationContext.java:147)
at org.springframework.boot.SpringApplication.refresh(SpringApplication.java:732)
at org.springframework.boot.SpringApplication.refreshContext(SpringApplication.java:409)
at org.springframework.boot.SpringApplication.run(SpringApplication.java:308)
at org.springframework.boot.web.servlet.support.SpringBootServletInitializer.run(SpringBootServletInitializer.java:175)
at org.springframework.boot.web.servlet.support.SpringBootServletInitializer.createRootApplicationContext(SpringBootServletInitializer.java:155)
at org.springframework.boot.web.servlet.support.SpringBootServletInitializer.onStartup(SpringBootServletInitializer.java:97)
at org.springframework.web.SpringServletContainerInitializer.onStartup(SpringServletContainerInitializer.java:174)
at org.eclipse.jetty.plus.annotation.ContainerInitializer.callStartup(ContainerInitializer.java:142)
at org.eclipse.jetty.annotations.ServletContainerInitializersStarter.doStart(ServletContainerInitializersStarter.java:64)
at org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:73)
at org.eclipse.jetty.servlet.ServletContextHandler.startContext(ServletContextHandler.java:356)
at org.eclipse.jetty.webapp.WebAppContext.startWebapp(WebAppContext.java:1449)
at org.eclipse.jetty.webapp.WebAppContext.startContext(WebAppContext.java:1414)
at org.eclipse.jetty.server.handler.ContextHandler.doStart(ContextHandler.java:916)
at org.eclipse.jetty.servlet.ServletContextHandler.doStart(ServletContextHandler.java:288)
at org.eclipse.jetty.webapp.WebAppContext.doStart(WebAppContext.java:524)
at org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:73)
at org.eclipse.jetty.util.component.ContainerLifeCycle.start(ContainerLifeCycle.java:169)
at org.eclipse.jetty.util.component.ContainerLifeCycle.doStart(ContainerLifeCycle.java:117)
at org.eclipse.jetty.server.handler.AbstractHandler.doStart(AbstractHandler.java:97)
at org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:73)
at org.eclipse.jetty.util.component.ContainerLifeCycle.start(ContainerLifeCycle.java:169)
at org.eclipse.jetty.server.Server.start(Server.java:423)
at org.eclipse.jetty.util.component.ContainerLifeCycle.doStart(ContainerLifeCycle.java:110)
at org.eclipse.jetty.server.handler.AbstractHandler.doStart(AbstractHandler.java:97)
at org.eclipse.jetty.server.Server.doStart(Server.java:387)
at org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:73)
at org.apache.nifi.registry.jetty.JettyServer.start(JettyServer.java:93)
at org.apache.nifi.registry.NiFiRegistry.<init>(NiFiRegistry.java:110)
at org.apache.nifi.registry.NiFiRegistry.main(NiFiRegistry.java:159)
Caused by: org.springframework.beans.factory.UnsatisfiedDependencyException: Error creating bean with name 'standardServiceFacade' defined in file [/var/lib/nifiregistry/work/jetty/nifi-registry-web-api-1.28.1.2.1.7.2000-69.war/webapp/WEB-INF/classes/org/apache/nifi/registry/web/service/StandardServiceFacade.class]: Unsatisfied dependency expressed through constructor parameter 2; nested exception is org.springframework.beans.factory.UnsatisfiedDependencyException: Error creating bean with name 'authorizationService' defined in URL [jar:file:/var/lib/nifiregistry/work/jetty/nifi-registry-web-api-1.28.1.2.1.7.2000-69.war/webapp/WEB-INF/lib/nifi-registry-framework-1.28.1.2.1.7.2000-69.jar!/org/apache/nifi/registry/service/AuthorizationService.class]: Unsatisfied dependency expressed through constructor parameter 1; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'getAuthorizer' defined in class path resource [org/apache/nifi/registry/security/authorization/AuthorizerFactory.class]: Bean instantiation via factory method failed; nested exception is org.springframework.beans.BeanInstantiationException: Failed to instantiate [org.apache.nifi.registry.security.authorization.Authorizer]: Factory method 'getAuthorizer' threw exception; nested exception is org.apache.nifi.registry.security.authorization.AuthorizerFactoryException: Failed to construct Authorizer.
at org.springframework.beans.factory.support.ConstructorResolver.createArgumentArray(ConstructorResolver.java:794)
at org.springframework.beans.factory.support.ConstructorResolver.autowireConstructor(ConstructorResolver.java:220)
at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.autowireConstructor(AbstractAutowireCapableBeanFactory.java:1372)
at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.createBeanInstance(AbstractAutowireCapableBeanFactory.java:1222)
at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.doCreateBean(AbstractAutowireCapableBeanFactory.java:582)
at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.createBean(AbstractAutowireCapableBeanFactory.java:542)
at org.springframework.beans.factory.support.AbstractBeanFactory.lambda$doGetBean$0(AbstractBeanFactory.java:336)
at org.springframework.beans.factory.support.DefaultSingletonBeanRegistry.getSingleton(DefaultSingletonBeanRegistry.java:234)
at org.springframework.beans.factory.support.AbstractBeanFactory.doGetBean(AbstractBeanFactory.java:334)
at org.springframework.beans.factory.support.AbstractBeanFactory.getBean(AbstractBeanFactory.java:209)
at org.springframework.beans.factory.config.DependencyDescriptor.resolveCandidate(DependencyDescriptor.java:276)
at org.springframework.beans.factory.support.DefaultListableBeanFactory.doResolveDependency(DefaultListableBeanFactory.java:1391)
at org.springframework.beans.factory.support.DefaultListableBeanFactory.resolveDependency(DefaultListableBeanFactory.java:1311)
at org.springframework.beans.factory.support.ConstructorResolver.resolveAutowiredArgument(ConstructorResolver.java:904)
at org.springframework.beans.factory.support.ConstructorResolver.createArgumentArray(ConstructorResolver.java:781)
... 43 common frames omitted
Caused by: org.springframework.beans.factory.UnsatisfiedDependencyException: Error creating bean with name 'authorizationService' defined in URL [jar:file:/var/lib/nifiregistry/work/jetty/nifi-registry-web-api-1.28.1.2.1.7.2000-69.war/webapp/WEB-INF/lib/nifi-registry-framework-1.28.1.2.1.7.2000-69.jar!/org/apache/nifi/registry/service/AuthorizationService.class]: Unsatisfied dependency expressed through constructor parameter 1; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'getAuthorizer' defined in class path resource [org/apache/nifi/registry/security/authorization/AuthorizerFactory.class]: Bean instantiation via factory method failed; nested exception is org.springframework.beans.BeanInstantiationException: Failed to instantiate [org.apache.nifi.registry.security.authorization.Authorizer]: Factory method 'getAuthorizer' threw exception; nested exception is org.apache.nifi.registry.security.authorization.AuthorizerFactoryException: Failed to construct Authorizer.
at org.springframework.beans.factory.support.ConstructorResolver.createArgumentArray(ConstructorResolver.java:794)
at org.springframework.beans.factory.support.ConstructorResolver.autowireConstructor(ConstructorResolver.java:220)
at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.autowireConstructor(AbstractAutowireCapableBeanFactory.java:1372)
at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.createBeanInstance(AbstractAutowireCapableBeanFactory.java:1222)
at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.doCreateBean(AbstractAutowireCapableBeanFactory.java:582)
at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.createBean(AbstractAutowireCapableBeanFactory.java:542)
at org.springframework.beans.factory.support.AbstractBeanFactory.lambda$doGetBean$0(AbstractBeanFactory.java:336)
at org.springframework.beans.factory.support.DefaultSingletonBeanRegistry.getSingleton(DefaultSingletonBeanRegistry.java:234)
at org.springframework.beans.factory.support.AbstractBeanFactory.doGetBean(AbstractBeanFactory.java:334)
at org.springframework.beans.factory.support.AbstractBeanFactory.getBean(AbstractBeanFactory.java:209)
at org.springframework.beans.factory.config.DependencyDescriptor.resolveCandidate(DependencyDescriptor.java:276)
at org.springframework.beans.factory.support.DefaultListableBeanFactory.doResolveDependency(DefaultListableBeanFactory.java:1391)
at org.springframework.beans.factory.support.DefaultListableBeanFactory.resolveDependency(DefaultListableBeanFactory.java:1311)
at org.springframework.beans.factory.support.ConstructorResolver.resolveAutowiredArgument(ConstructorResolver.java:904)
at org.springframework.beans.factory.support.ConstructorResolver.createArgumentArray(ConstructorResolver.java:781)
... 57 common frames omitted
Caused by: org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'getAuthorizer' defined in class path resource [org/apache/nifi/registry/security/authorization/AuthorizerFactory.class]: Bean instantiation via factory method failed; nested exception is org.springframework.beans.BeanInstantiationException: Failed to instantiate [org.apache.nifi.registry.security.authorization.Authorizer]: Factory method 'getAuthorizer' threw exception; nested exception is org.apache.nifi.registry.security.authorization.AuthorizerFactoryException: Failed to construct Authorizer.
at org.springframework.beans.factory.support.ConstructorResolver.instantiate(ConstructorResolver.java:646)
at org.springframework.beans.factory.support.ConstructorResolver.instantiateUsingFactoryMethod(ConstructorResolver.java:477)
at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.instantiateUsingFactoryMethod(AbstractAutowireCapableBeanFactory.java:1352)
at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.createBeanInstance(AbstractAutowireCapableBeanFactory.java:1195)
at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.doCreateBean(AbstractAutowireCapableBeanFactory.java:582)
at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.createBean(AbstractAutowireCapableBeanFactory.java:542)
at org.springframework.beans.factory.support.AbstractBeanFactory.lambda$doGetBean$0(AbstractBeanFactory.java:336)
at org.springframework.beans.factory.support.DefaultSingletonBeanRegistry.getSingleton(DefaultSingletonBeanRegistry.java:234)
at org.springframework.beans.factory.support.AbstractBeanFactory.doGetBean(AbstractBeanFactory.java:334)
at org.springframework.beans.factory.support.AbstractBeanFactory.getBean(AbstractBeanFactory.java:209)
at org.springframework.beans.factory.config.DependencyDescriptor.resolveCandidate(DependencyDescriptor.java:276)
at org.springframework.beans.factory.support.DefaultListableBeanFactory.doResolveDependency(DefaultListableBeanFactory.java:1391)
at org.springframework.beans.factory.support.DefaultListableBeanFactory.resolveDependency(DefaultListableBeanFactory.java:1311)
at org.springframework.beans.factory.support.ConstructorResolver.resolveAutowiredArgument(ConstructorResolver.java:904)
at org.springframework.beans.factory.support.ConstructorResolver.createArgumentArray(ConstructorResolver.java:781)
... 71 common frames omitted
Caused by: org.springframework.beans.BeanInstantiationException: Failed to instantiate [org.apache.nifi.registry.security.authorization.Authorizer]: Factory method 'getAuthorizer' threw exception; nested exception is org.apache.nifi.registry.security.authorization.AuthorizerFactoryException: Failed to construct Authorizer.
at org.springframework.beans.factory.support.SimpleInstantiationStrategy.instantiate(SimpleInstantiationStrategy.java:185)
at org.springframework.beans.factory.support.ConstructorResolver.instantiate(ConstructorResolver.java:641)
... 85 common frames omitted
Caused by: org.apache.hadoop.security.KerberosAuthException: failure to login: for principal: nifiregistry/cld-mobpro-nf02.tahakom.com@TAHAKOM.COM from keytab /var/run/cloudera-scm-agent/process/1546361847-nifiregistry-NIFI_REGISTRY_SERVER/nifiregistry.keytab javax.security.auth.login.LoginException: java.lang.IllegalArgumentException: Illegal principal name nifiregistry/cld-mobpro-nf02.tahakom.com@TAHAKOM.COM: org.apache.hadoop.security.authentication.util.KerberosName$NoMatchingRule: No rules applied to nifiregistry/cld-mobpro-nf02.tahakom.com@TAHAKOM.COM
at org.apache.hadoop.security.UserGroupInformation.doSubjectLogin(UserGroupInformation.java:2027)
at org.apache.hadoop.security.UserGroupInformation.loginUserFromKeytabAndReturnUGI(UserGroupInformation.java:1361)
at org.apache.hadoop.security.UserGroupInformation.loginUserFromKeytab(UserGroupInformation.java:1140)
at org.apache.nifi.registry.ranger.RangerAuthorizer.onConfigured(RangerAuthorizer.java:170)
... 110 common frames omitted
Caused by: javax.security.auth.login.LoginException: java.lang.IllegalArgumentException: Illegal principal name nifiregistry/cld-mobpro-nf02.tahakom.com@TAHAKOM.COM: org.apache.hadoop.security.authentication.util.KerberosName$NoMatchingRule: No rules applied to nifiregistry/cld-mobpro-nf02.tahakom.com@TAHAKOM.COM
at org.apache.hadoop.security.UserGroupInformation$HadoopLoginModule.commit(UserGroupInformation.java:237)
 
Note: We use custom krb5.conf ( /etc/hadoop/krb/krb5.conf ).
I am able to kinit using below SPN with keytab.
 
nifiregistry/cld-mobpro-nf02.tahakom.com@TAHAKOM.COM from keytab /var/run/cloudera-scm-agent/process/1546361847-nifiregistry-NIFI_REGISTRY_SERVER/nifiregistry.keytab

 

Scenario: When we disable ranger, the nifiregistry comes alive. also we have nifi services on the same host where nifiregistry is and NiFi works fine.  We are running nifi & nifiregistry on compute cluster.



Translate
muzhansari
muzhansari
Silver ⭐️⭐️
October 21, 2025

 

@psy10 @cjervis @MattWho 

Case 1136446


We are using NiFi & NiFiRegistry on compute Cluster. NiFi seems to be working fine but unfortunately not Nifiregistry. once disable ranger dependency nifiregistry running.

Error:
2025-10-13 15:25:15,938 INFO org.apache.nifi.registry.ranger.RangerAuthorizer: initializing base plugin
2025-10-13 15:25:15,991 INFO org.apache.ranger.authorization.hadoop.config.RangerConfiguration: addResourceIfReadable(ranger-nifi-registry-audit.xml): resource file is file:/run/cloudera-scm-agent/process/1546361847-nifiregistry-NIFI_REGISTRY_SERVER/ranger-nifi-registry-audit.xml
2025-10-13 15:25:16,082 INFO org.apache.ranger.authorization.hadoop.config.RangerConfiguration: addResourceIfReadable(ranger-nifi-registry-security.xml): resource file is file:/run/cloudera-scm-agent/process/1546361847-nifiregistry-NIFI_REGISTRY_SERVER/ranger-nifi-registry-security.xml
2025-10-13 15:25:16,082 INFO org.apache.ranger.authorization.hadoop.config.RangerConfiguration: addResourceIfReadable(ranger-nifi-registry-policymgr-ssl.xml): resource file is file:/run/cloudera-scm-agent/process/1546361847-nifiregistry-NIFI_REGISTRY_SERVER/ranger-nifi-registry-policymgr-ssl.xml
2025-10-13 15:25:16,160 ERROR org.apache.ranger.authorization.hadoop.config.RangerConfiguration: addResourceIfReadable(ranger-nifi-registry-CFM_nifiregistry-audit.xml): couldn't find resource file location
2025-10-13 15:25:16,161 ERROR org.apache.ranger.authorization.hadoop.config.RangerConfiguration: addResourceIfReadable(ranger-nifi-registry-CFM_nifiregistry-security.xml): couldn't find resource file location
2025-10-13 15:25:16,162 ERROR org.apache.ranger.authorization.hadoop.config.RangerConfiguration: addResourceIfReadable(ranger-nifi-registry-CFM_nifiregistry-policymgr-ssl.xml): couldn't find resource file location
2025-10-13 15:25:16,164 INFO org.apache.ranger.authorization.hadoop.config.RangerPluginConfig: PolicyEngineOptions: { evaluatorType: auto, evaluateDelegateAdminOnly: false, disableContextEnrichers: false, disableCustomConditions: false, disableTagPolicyEvaluation: false, disablePolicyRefresher: false, disableTagRetriever: false, enableTagEnricherWithLocalRefresher: false, disableTrieLookupPrefilter: false, optimizeTrieForRetrieval: false, cacheAuditResult: false, disableRoleResolution: true, optimizeTrieForSpace: false, optimizeTagTrieForRetrieval: false, optimizeTagTrieForSpace: false, enableResourceMatcherReuse: true }
2025-10-13 15:38:47,189 WARN org.springframework.boot.web.servlet.context.AnnotationConfigServletWebServerApplicationContext: Exception encountered during context initialization - cancelling refresh attempt: org.springframework.beans.factory.UnsatisfiedDependencyException: Error creating bean with name 'accessPolicyResource' defined in file [/var/lib/nifiregistry/work/jetty/nifi-registry-web-api-1.28.1.2.1.7.2000-69.war/webapp/WEB-INF/classes/org/apache/nifi/registry/web/api/AccessPolicyResource.class]: Unsatisfied dependency expressed through constructor parameter 0; nested exception is org.springframework.beans.factory.UnsatisfiedDependencyException: Error creating bean with name 'standardServiceFacade' defined in file [/var/lib/nifiregistry/work/jetty/nifi-registry-web-api-1.28.1.2.1.7.2000-69.war/webapp/WEB-INF/classes/org/apache/nifi/registry/web/service/StandardServiceFacade.class]: Unsatisfied dependency expressed through constructor parameter 2; nested exception is org.springframework.beans.factory.UnsatisfiedDependencyException: Error creating bean with name 'authorizationService' defined in URL [jar:file:/var/lib/nifiregistry/work/jetty/nifi-registry-web-api-1.28.1.2.1.7.2000-69.war/webapp/WEB-INF/lib/nifi-registry-framework-1.28.1.2.1.7.2000-69.jar!/org/apache/nifi/registry/service/AuthorizationService.class]: Unsatisfied dependency expressed through constructor parameter 1; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'getAuthorizer' defined in class path resource [org/apache/nifi/registry/security/authorization/AuthorizerFactory.class]: Bean instantiation via factory method failed; nested exception is org.springframework.beans.BeanInstantiationException: Failed to instantiate [org.apache.nifi.registry.security.authorization.Authorizer]: Factory method 'getAuthorizer' threw exception; nested exception is org.apache.nifi.registry.security.authorization.AuthorizerFactoryException: Failed to construct Authorizer.
2025-10-13 15:38:47,191 INFO org.apache.nifi.registry.event.EventService: Shutting down event consumer...
2025-10-13 15:38:47,191 INFO org.apache.nifi.registry.event.EventService: Event consumer shutdown!
2025-10-13 15:38:47,191 WARN org.apache.nifi.registry.event.EventService: Interrupted while polling event queue
2025-10-13 15:38:47,192 INFO com.zaxxer.hikari.HikariDataSource: HikariPool-1 - Shutdown initiated...
2025-10-13 15:38:47,196 INFO com.zaxxer.hikari.HikariDataSource: HikariPool-1 - Shutdown completed.
2025-10-13 15:38:47,212 INFO org.springframework.boot.autoconfigure.logging.ConditionEvaluationReportLoggingListener: 
 
Error starting ApplicationContext. To display the conditions report re-run your application with 'debug' enabled.
2025-10-13 15:38:47,252 ERROR org.springframework.boot.SpringApplication: Application run failed
org.springframework.beans.factory.UnsatisfiedDependencyException: Error creating bean with name 'accessPolicyResource' defined in file [/var/lib/nifiregistry/work/jetty/nifi-registry-web-api-1.28.1.2.1.7.2000-69.war/webapp/WEB-INF/classes/org/apache/nifi/registry/web/api/AccessPolicyResource.class]: Unsatisfied dependency expressed through constructor parameter 0; nested exception is org.springframework.beans.factory.UnsatisfiedDependencyException: Error creating bean with name 'standardServiceFacade' defined in file [/var/lib/nifiregistry/work/jetty/nifi-registry-web-api-1.28.1.2.1.7.2000-69.war/webapp/WEB-INF/classes/org/apache/nifi/registry/web/service/StandardServiceFacade.class]: Unsatisfied dependency expressed through constructor parameter 2; nested exception is org.springframework.beans.factory.UnsatisfiedDependencyException: Error creating bean with name 'authorizationService' defined in URL [jar:file:/var/lib/nifiregistry/work/jetty/nifi-registry-web-api-1.28.1.2.1.7.2000-69.war/webapp/WEB-INF/lib/nifi-registry-framework-1.28.1.2.1.7.2000-69.jar!/org/apache/nifi/registry/service/AuthorizationService.class]: Unsatisfied dependency expressed through constructor parameter 1; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'getAuthorizer' defined in class path resource [org/apache/nifi/registry/security/authorization/AuthorizerFactory.class]: Bean instantiation via factory method failed; nested exception is org.springframework.beans.BeanInstantiationException: Failed to instantiate [org.apache.nifi.registry.security.authorization.Authorizer]: Factory method 'getAuthorizer' threw exception; nested exception is org.apache.nifi.registry.security.authorization.AuthorizerFactoryException: Failed to construct Authorizer.
at org.springframework.beans.factory.support.ConstructorResolver.createArgumentArray(ConstructorResolver.java:794)
at org.springframework.beans.factory.support.ConstructorResolver.autowireConstructor(ConstructorResolver.java:220)
at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.autowireConstructor(AbstractAutowireCapableBeanFactory.java:1372)
at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.createBeanInstance(AbstractAutowireCapableBeanFactory.java:1222)
at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.doCreateBean(AbstractAutowireCapableBeanFactory.java:582)
at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.createBean(AbstractAutowireCapableBeanFactory.java:542)
at org.springframework.beans.factory.support.AbstractBeanFactory.lambda$doGetBean$0(AbstractBeanFactory.java:336)
at org.springframework.beans.factory.support.DefaultSingletonBeanRegistry.getSingleton(DefaultSingletonBeanRegistry.java:234)
at org.springframework.beans.factory.support.AbstractBeanFactory.doGetBean(AbstractBeanFactory.java:334)
at org.springframework.beans.factory.support.AbstractBeanFactory.getBean(AbstractBeanFactory.java:209)
at org.springframework.beans.factory.support.DefaultListableBeanFactory.preInstantiateSingletons(DefaultListableBeanFactory.java:955)
at org.springframework.context.support.AbstractApplicationContext.finishBeanFactoryInitialization(AbstractApplicationContext.java:932)
at org.springframework.context.support.AbstractApplicationContext.refresh(AbstractApplicationContext.java:591)
at org.springframework.boot.web.servlet.context.ServletWebServerApplicationContext.refresh(ServletWebServerApplicationContext.java:147)
at org.springframework.boot.SpringApplication.refresh(SpringApplication.java:732)
at org.springframework.boot.SpringApplication.refreshContext(SpringApplication.java:409)
at org.springframework.boot.SpringApplication.run(SpringApplication.java:308)
at org.springframework.boot.web.servlet.support.SpringBootServletInitializer.run(SpringBootServletInitializer.java:175)
at org.springframework.boot.web.servlet.support.SpringBootServletInitializer.createRootApplicationContext(SpringBootServletInitializer.java:155)
at org.springframework.boot.web.servlet.support.SpringBootServletInitializer.onStartup(SpringBootServletInitializer.java:97)
at org.springframework.web.SpringServletContainerInitializer.onStartup(SpringServletContainerInitializer.java:174)
at org.eclipse.jetty.plus.annotation.ContainerInitializer.callStartup(ContainerInitializer.java:142)
at org.eclipse.jetty.annotations.ServletContainerInitializersStarter.doStart(ServletContainerInitializersStarter.java:64)
at org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:73)
at org.eclipse.jetty.servlet.ServletContextHandler.startContext(ServletContextHandler.java:356)
at org.eclipse.jetty.webapp.WebAppContext.startWebapp(WebAppContext.java:1449)
at org.eclipse.jetty.webapp.WebAppContext.startContext(WebAppContext.java:1414)
at org.eclipse.jetty.server.handler.ContextHandler.doStart(ContextHandler.java:916)
at org.eclipse.jetty.servlet.ServletContextHandler.doStart(ServletContextHandler.java:288)
at org.eclipse.jetty.webapp.WebAppContext.doStart(WebAppContext.java:524)
at org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:73)
at org.eclipse.jetty.util.component.ContainerLifeCycle.start(ContainerLifeCycle.java:169)
at org.eclipse.jetty.util.component.ContainerLifeCycle.doStart(ContainerLifeCycle.java:117)
at org.eclipse.jetty.server.handler.AbstractHandler.doStart(AbstractHandler.java:97)
at org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:73)
at org.eclipse.jetty.util.component.ContainerLifeCycle.start(ContainerLifeCycle.java:169)
at org.eclipse.jetty.server.Server.start(Server.java:423)
at org.eclipse.jetty.util.component.ContainerLifeCycle.doStart(ContainerLifeCycle.java:110)
at org.eclipse.jetty.server.handler.AbstractHandler.doStart(AbstractHandler.java:97)
at org.eclipse.jetty.server.Server.doStart(Server.java:387)
at org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:73)
at org.apache.nifi.registry.jetty.JettyServer.start(JettyServer.java:93)
at org.apache.nifi.registry.NiFiRegistry.<init>(NiFiRegistry.java:110)
at org.apache.nifi.registry.NiFiRegistry.main(NiFiRegistry.java:159)
Caused by: org.springframework.beans.factory.UnsatisfiedDependencyException: Error creating bean with name 'standardServiceFacade' defined in file [/var/lib/nifiregistry/work/jetty/nifi-registry-web-api-1.28.1.2.1.7.2000-69.war/webapp/WEB-INF/classes/org/apache/nifi/registry/web/service/StandardServiceFacade.class]: Unsatisfied dependency expressed through constructor parameter 2; nested exception is org.springframework.beans.factory.UnsatisfiedDependencyException: Error creating bean with name 'authorizationService' defined in URL [jar:file:/var/lib/nifiregistry/work/jetty/nifi-registry-web-api-1.28.1.2.1.7.2000-69.war/webapp/WEB-INF/lib/nifi-registry-framework-1.28.1.2.1.7.2000-69.jar!/org/apache/nifi/registry/service/AuthorizationService.class]: Unsatisfied dependency expressed through constructor parameter 1; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'getAuthorizer' defined in class path resource [org/apache/nifi/registry/security/authorization/AuthorizerFactory.class]: Bean instantiation via factory method failed; nested exception is org.springframework.beans.BeanInstantiationException: Failed to instantiate [org.apache.nifi.registry.security.authorization.Authorizer]: Factory method 'getAuthorizer' threw exception; nested exception is org.apache.nifi.registry.security.authorization.AuthorizerFactoryException: Failed to construct Authorizer.
at org.springframework.beans.factory.support.ConstructorResolver.createArgumentArray(ConstructorResolver.java:794)
at org.springframework.beans.factory.support.ConstructorResolver.autowireConstructor(ConstructorResolver.java:220)
at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.autowireConstructor(AbstractAutowireCapableBeanFactory.java:1372)
at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.createBeanInstance(AbstractAutowireCapableBeanFactory.java:1222)
at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.doCreateBean(AbstractAutowireCapableBeanFactory.java:582)
at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.createBean(AbstractAutowireCapableBeanFactory.java:542)
at org.springframework.beans.factory.support.AbstractBeanFactory.lambda$doGetBean$0(AbstractBeanFactory.java:336)
at org.springframew
 
Caused by: org.springframework.beans.BeanInstantiationException: Failed to instantiate [org.apache.nifi.registry.security.authorization.Authorizer]: Factory method 'getAuthorizer' threw exception; nested exception is org.apache.nifi.registry.security.authorization.AuthorizerFactoryException: Failed to construct Authorizer.
at org.springframework.beans.factory.support.SimpleInstantiationStrategy.instantiate(SimpleInstantiationStrategy.java:185)
at org.springframework.beans.factory.support.ConstructorResolver.instantiate(ConstructorResolver.java:641)
... 85 common frames omitted
Caused by: org.apache.nifi.registry.security.authorization.AuthorizerFactoryException: Failed to construct Authorizer.
at org.apache.nifi.registry.security.authorization.AuthorizerFactory.getAuthorizer(AuthorizerFactory.java:268)
at org.apache.nifi.registry.security.authorization.AuthorizerFactory$$EnhancerBySpringCGLIB$$682119f9.CGLIB$getAuthorizer$3(<generated>)
at org.apache.nifi.registry.security.authorization.AuthorizerFactory$$EnhancerBySpringCGLIB$$682119f9$$FastClassBySpringCGLIB$$38000600.invoke(<generated>)
at org.springframework.cglib.proxy.MethodProxy.invokeSuper(MethodProxy.java:244)
at org.springframework.context.annotation.ConfigurationClassEnhancer$BeanMethodInterceptor.intercept(ConfigurationClassEnhancer.java:331)
at org.apache.nifi.registry.security.authorization.AuthorizerFactory$$EnhancerBySpringCGLIB$$682119f9.getAuthorizer(<generated>)
at org.apache.nifi.registry.security.authorization.AuthorizerFactory$$FastClassBySpringCGLIB$$1266b595.invoke(<generated>)
at org.springframework.cglib.proxy.MethodProxy.invoke(MethodProxy.java:218)
at org.springframework.aop.framework.CglibAopProxy$CglibMethodInvocation.invokeJoinpoint(CglibAopProxy.java:792)
at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:163)
at org.springframework.aop.framework.CglibAopProxy$CglibMethodInvocation.proceed(CglibAopProxy.java:762)
at org.springframework.transaction.interceptor.TransactionInterceptor$1.proceedWithInvocation(TransactionInterceptor.java:123)
at org.springframework.transaction.interceptor.TransactionAspectSupport.invokeWithinTransaction(TransactionAspectSupport.java:388)
at org.springframework.transaction.interceptor.TransactionInterceptor.invoke(TransactionInterceptor.java:119)
at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:186)
at org.springframework.aop.framework.CglibAopProxy$CglibMethodInvocation.proceed(CglibAopProxy.java:762)
at org.springframework.aop.framework.CglibAopProxy$DynamicAdvisedInterceptor.intercept(CglibAopProxy.java:707)
at org.apache.nifi.registry.security.authorization.AuthorizerFactory$$EnhancerBySpringCGLIB$$fc932d61.getAuthorizer(<generated>)
at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.base/java.lang.reflect.Method.invoke(Method.java:566)
at org.springframework.beans.factory.support.SimpleInstantiationStrategy.instantiate(SimpleInstantiationStrategy.java:154)
... 86 common frames omitted
Caused by: org.apache.nifi.registry.security.exception.SecurityProviderCreationException: Error creating RangerBasePlugin
at org.apache.nifi.registry.ranger.RangerAuthorizer.onConfigured(RangerAuthorizer.java:182)
at org.apache.nifi.registry.security.authorization.AuthorizerFactory$ManagedAuthorizerWrapper.onConfigured(AuthorizerFactory.java:830)
at org.apache.nifi.registry.security.authorization.AuthorizerFactory.getAuthorizer(AuthorizerFactory.java:261)
... 108 common frames omitted
Caused by: org.apache.hadoop.security.KerberosAuthException: failure to login: for principal: nifiregistry/cld-mobpro-nf02.tahakom.com@TAHAKOM.COM from keytab /var/run/cloudera-scm-agent/process/1546361847-nifiregistry-NIFI_REGISTRY_SERVER/nifiregistry.keytab javax.security.auth.login.LoginException: java.lang.IllegalArgumentException: Illegal principal name nifiregistry/cld-mobpro-nf02.tahakom.com@TAHAKOM.COM: org.apache.hadoop.security.authentication.util.KerberosName$NoMatchingRule: No rules applied to nifiregistry/cld-mobpro-nf02.tahakom.com@TAHAKOM.COM
at org.apache.hadoop.security.UserGroupInformation.doSubjectLogin(UserGroupInformation.java:2027)
at org.apache.hadoop.security.UserGroupInformation.loginUserFromKeytabAndReturnUGI(UserGroupInformation.java:1361)
at org.apache.hadoop.security.UserGroupInformation.loginUserFromKeytab(UserGroupInformation.java:1140)
at org.apache.nifi.registry.ranger.RangerAuthorizer.onConfigured(RangerAuthorizer.java:170)
... 110 common frames omitted
Caused by: javax.security.auth.login.LoginException: java.lang.IllegalArgumentException: Illegal principal name nifiregistry/cld-mobpro-nf02.tahakom.com@TAHAKOM.COM: org.apache.hadoop.security.authentication.util.KerberosName$NoMatchingRule: No rules applied to nifiregistry/cld-mobpro-nf02.tahakom.com@TAHAKOM.COM
at org.apache.hadoop.security.UserGroupInformation$HadoopLoginModule.commit(UserGroupInformation.java:237)
at java.base/javax.security.auth.login.LoginContext.invoke(LoginContext.java:750)
at java.base/javax.security.auth.login.LoginContext$4.run(LoginContext.java:672)
at java.base/javax.security.auth.login.LoginContext$4.run(LoginContext.java:670)
at java.base/java.security.AccessController.doPrivileged(Native Method)
at java.base/javax.security.auth.login.LoginContext.invokePriv(LoginContext.java:670)
at java.base/javax.security.auth.login.LoginContext.login(LoginContext.java:582)
at org.apache.hadoop.security.UserGroupInformation$HadoopLoginContext.login(UserGroupInformation.java:2106)
at org.apache.hadoop.security.UserGroupInformation.doSubjectLogin(UserGroupInformation.java:2017)
... 113 common frames omitted
Caused by: java.lang.IllegalArgumentException: Illegal principal name nifiregistry/cld-mobpro-nf02.tahakom.com@TAHAKOM.COM: org.apache.hadoop.security.authentication.util.KerberosName$NoMatchingRule: No rules applied to nifiregistry/cld-mobpro-nf02.tahakom.com@TAHAKOM.COM
at org.apache.hadoop.security.User.<init>(User.java:51)
at org.apache.hadoop.security.UserGroupInformation$HadoopLoginModule.commit(UserGroupInformation.java:235)
... 121 common frames omitted
Caused by: org.apache.hadoop.security.authentication.util.KerberosName$NoMatchingRule: No rules applied to nifiregistry/cld-mobpro-nf02.tahakom.com@TAHAKOM.COM
at org.apache.hadoop.security.authentication.util.KerberosName.getShortName(KerberosName.java:429)
at org.apache.hadoop.security.User.<init>(User.java:48)
... 122 common frames omitted

 

Translate
Terms & ConditionsAccessibility statement