A few days ago, I happened to run into this issue myself. The root cause is, when installing Ranger, in the "External URL" property, the administrator entered "http://hostname.example.com:6080/", instead of the expected "http://hostname.example.com:6080" (WITHOUT the trailing slash character). Even though the Ranger installation would go through, Ranger's Usersync would log errors in /var/log/ranger/usersync/usersync.log due to this extraneous character. Also, any attempt to enable any of Ranger's plugins would fail, with the error message "Ambari admin username and password are blank", because Ranger is indeed missing many users, including the important one amb_ranger_admin. To fix this, just edit this property and remove any character after port 6080, and everything will start working. ... View more

That's fine, thanks Artem. ... View more

Brilliant @Predrag Minovic , that solved the issue. Thanks ! ... View more

Hi @Artem Ervits , if I will find the time to do so, I'll post an article here, for sure 😉 ... View more

Is this further documented somewhere ? ... View more

Hello @Ancil McBarnett , I checked that ranger-admin-site.xml, it was not updated there. I was wondering, since I am using HDP2.2.4, why is that file under .../HDP/2.3/... ?!?! Anyways, I set the port to 6182, but unfortunately after restarting Ranger the alert was still there. So I searched for other RANGER configs, because of the HDP2.2.4 vs. HDP2.3 and at the end it turned out that I had to update the port in file /var/lib/ambari-server/resources/common-services/RANGER/0.4.0/configuration/ranger-site.xml After restarting Ranger the alert disappeared. Many thanks for this hint... ... View more

@ Ryan Chaplin/@Mark Petronic I am unable to connect on hive through knox using zokeeper dynamic discovery. Below details of my cluster. HDP: 2.6 Kerberos Enabled: YES ( Windows AD 2012 R2) Authentication: AD with LDAPS ( Windows AD 2012 R2) Ranger Enabled: YES RANGER Usersync and GroupSync: YES with windows AD Ambari Enabled AD: YES KNOX Enabled with AD: YES (except Admin account/topology) KNOX advance topology have definition for zookeeper dynamic discovery and webhdfs ha: YES While connecting on HIVE through beeline getting error as "Invalid status 72 (state=08S01,code=0)" [ajay@vijayhdp-1 ~]$ beeline Beeline version 1.2.1000.2.6.3.0-235 by Apache Hive beeline> !connect jdbc:hive2://vijayhdp-1.novalocal:8443/;ssl=true;sslTrustStore=/tmp/myLocalTrustStore.jks;trustStorePassword=password?transportMode=http;httpPath=gateway/default/hive Connecting to jdbc:hive2://vijayhdp-1.novalocal:8443/;ssl=true;sslTrustStore=/tmp/myLocalTrustStore.jks;trustStorePassword=password?transportMode=http;httpPath=gateway/default/hive Enter username for jdbc:hive2://vijayhdp-1.novalocal:8443/;ssl=true;sslTrustStore=/tmp/myLocalTrustStore.jks;trustStorePassword=password?transportMode=http;httpPath=gateway/default/hive: ajay Enter password for jdbc:hive2://vijayhdp-1.novalocal:8443/;ssl=true;sslTrustStore=/tmp/myLocalTrustStore.jks;trustStorePassword=password?transportMode=http;httpPath=gateway/default/hive: ******** 17/12/22 15:43:57 [main]: WARN jdbc.HiveConnection: Failed to connect to vijayhdp-1.novalocal:8443 Error: Could not open client transport with JDBC Uri: jdbc:hive2://vijayhdp-1.novalocal:8443/;ssl=true;sslTrustStore=/tmp/myLocalTrustStore.jks;trustStorePassword=password?transportMode=http;httpPath=gateway/default/hive: Invalid status 72 (state=08S01,code=0) 0: jdbc:hive2://vijayhdp-1.novalocal:8443/ (closed)> Kindly suggest to fix it. - Vijay Mishra , @Ryan Chapin I am unable to connect on hive through knox using zokeeper dynamic discovery. Below details of my cluster. HDP: 2.6 Kerberos Enabled: YES ( Windows AD 2012 R2) Authentication: AD with LDAPS ( Windows AD 2012 R2) Ranger Enabled: YES RANGER Usersync and GroupSync: YES with windows AD Ambari Enabled AD: YES KNOX Enabled with AD: YES (except Admin account/topology) KNOX advance topology have definition for zookeeper dynamic discovery and webhdfs ha: YES While connecting on HIVE through beeline getting error as "Invalid status 72 (state=08S01,code=0)" [ajay@vijayhdp-1 ~]$ beeline Beeline version 1.2.1000.2.6.3.0-235 by Apache Hive beeline> !connect jdbc:hive2://vijayhdp-1.novalocal:8443/;ssl=true;sslTrustStore=/tmp/myLocalTrustStore.jks;trustStorePassword=password?transportMode=http;httpPath=gateway/default/hive Connecting to jdbc:hive2://vijayhdp-1.novalocal:8443/;ssl=true;sslTrustStore=/tmp/myLocalTrustStore.jks;trustStorePassword=password?transportMode=http;httpPath=gateway/default/hive Enter username for jdbc:hive2://vijayhdp-1.novalocal:8443/;ssl=true;sslTrustStore=/tmp/myLocalTrustStore.jks;trustStorePassword=password?transportMode=http;httpPath=gateway/default/hive: ajay Enter password for jdbc:hive2://vijayhdp-1.novalocal:8443/;ssl=true;sslTrustStore=/tmp/myLocalTrustStore.jks;trustStorePassword=password?transportMode=http;httpPath=gateway/default/hive: ******** 17/12/22 15:43:57 [main]: WARN jdbc.HiveConnection: Failed to connect to vijayhdp-1.novalocal:8443 Error: Could not open client transport with JDBC Uri: jdbc:hive2://vijayhdp-1.novalocal:8443/;ssl=true;sslTrustStore=/tmp/myLocalTrustStore.jks;trustStorePassword=password?transportMode=http;httpPath=gateway/default/hive: Invalid status 72 (state=08S01,code=0) 0: jdbc:hive2://vijayhdp-1.novalocal:8443/ (closed)> Kindly suggest to fix it. - Vijay Mishra ... View more