Member since
05-09-2024
2
Posts
0
Kudos Received
0
Solutions
06-04-2025
10:20 PM
Hi Matt, Thank you for your suggestions. We've confirmed that all plugins, including HDFS and Hive, have successfully downloaded and activated the latest policies as reflected in the Ranger UI → Audit → Plugin Status. However, after enabling Ranger Authorization on the HDFS side, we are seeing recurring warnings in the logs every minute: WARN RangerAuditMetricRESTClient RangerAdminRESTClient.handleJwt(): Since JWTokenRetriver init failed, skipping JWT auth. WARN RangerRESTClient RangerRESTClient.handleJwt(): Since JWTokenRetriver is null, skipping JWT auth. We are not using JWT in our environment — Kerberos is in place for authentication. Maybe this is related to the issue, and Ranger policies are being ignored.
... View more
06-04-2025
12:14 AM
Hello, We have noticed that Ranger policies are no longer being enforced in HDFS and Hive in our CDP 7.3.1 cluster. Users are able to access data despite explicit deny or allow rules configured in the Ranger UI. Details: Ranger UI is up and running; all policies are visible and enabled. HDFS and Hive services do not reflect the expected access restrictions. Restarting Ranger, Hive, and HDFS services did not resolve the issue. We are not sure when the issue started. Could you please assist us in identifying why the Ranger policies are no longer being enforced in HDFS and Hive? Let us know what additional logs or configurations would help with troubleshooting.
... View more
Labels:
- Labels:
-
Apache Hive
-
Apache Ranger
-
HDFS