Cloudera Community
vperiasamy
user rank
user rank
Guru

Re: Ranger usersync 401 unauthorized

by Guru Guru in Support Questions
‎01-31-2018 07:09 PM
‎01-31-2018 07:09 PM
Kerberos debug messages will be in catalina.out Not sure if ranger admin is properly spnego enabled. Please enable DEBUG for ranger admin logs. One thing you can try is to manually kinit using rangerusersync keytab and perform the same request via Curl. http://fit-d-selgsv-21.sentry.com:6080/service/xusers/groups/?pageSize=1000☆tIndex=0 ... View more

Re: Ranger usersync 401 unauthorized

by Guru Guru in Support Questions
‎01-31-2018 06:17 PM
‎01-31-2018 06:17 PM
You need to make sure rangerusersync is sending kerberos request. To enable kerberos debug, you can add below arguments to ranger start via JAVA_OPTS in ranger-admin-services.sh -Dsun.security.krb5.debug=true -Dsun.security.jgss.debug=true -Djava.security.debug="logincontext,policy,scl,gssloginconfig" ... View more

Re: CA signed cert for Ranger ; plugins don't show...

by Guru Guru in Support Questions
‎01-31-2018 06:07 PM
‎01-31-2018 06:07 PM
Any specific reason you are not using kerberos since that is the recommended config. In that case, 2 way SSL is not required. Have you checked why plugins are not able to communicate with ranger admin? What errors do you see? Make sure common name specified in HDFS/Hive/etc service (repository) in ranger admin UI matches CN. ... View more

Re: Ranger usersync 401 unauthorized

by Guru Guru in Support Questions
‎01-31-2018 05:56 PM
‎01-31-2018 05:56 PM
I don't see any related errors. You can enable DEBUG and kerberos debug to get more info. Also zip does not contain core-site.xml ... View more

Re: Ranger usersync 401 unauthorized

by Guru Guru in Support Questions
‎01-31-2018 05:13 PM
‎01-31-2018 05:13 PM
Do you see any error on ranger admin log? Is there core-site.xml under /etc/ranger/admin/conf ? What is the HDP version? ... View more

Re: Ranger usersync 401 unauthorized

by Guru Guru in Support Questions
‎01-31-2018 03:47 PM
‎01-31-2018 03:47 PM
Do you see any errors in ranger usersync log or ranger admin log? ... View more

Re: Ranger usersync 401 unauthorized

by Guru Guru in Support Questions
‎01-31-2018 02:47 PM
‎01-31-2018 02:47 PM
Is this kerberos env? If so make sure all the necessary keytabs are there with right permissions. ... View more

Re: Ranger Admin Password check warning alert

by Guru Guru in Support Questions
‎01-30-2018 03:18 PM
‎01-30-2018 03:18 PM
You can check two things. 1] Check Ranger External URL is correct. (Ranger configs -> Advanced) 2] Check password for "admin" user or "amb_ranger_admin" user. If they are changed in Ranger, they also need to be updated in Ambari. Refer https://docs.hortonworks.com/HDPDocuments/HDP2/HDP-2.6.4/bk_security/content/updating_ranger_admin_passwords.html ... View more

Re: Ranger Admin Password check warning alert

by Guru Guru in Support Questions
‎01-29-2018 02:38 PM
‎01-29-2018 02:38 PM
This means, password for "admin" user or "amb_ranger_admin" user in ranger has changed, but not updated in Ambari. Please refer https://docs.hortonworks.com/HDPDocuments/HDP2/HDP-2.6.4/bk_security/content/updating_ranger_admin_passwords.html ... View more

Re: Ranger fails to install with Blueprint

by Guru Guru in Support Questions
‎11-20-2017 05:22 PM
‎11-20-2017 05:22 PM
Yes, please make sure to meet DB pre-requisites before creating cluster using blueprint. ... View more
Contact Me
Online
Offline
Last Visited
‎04-26-2023 11:37 AM
Community Statistics
Member Since ‎09-10-2015 10:36 PM
Last Visited ‎04-26-2023 11:37 AM
Posts 261
Kudos received 85