@Junichi Oda You cannot manage access_log using log4j, as the configuration AccessLogValve is hardcoded in the code. Following logs can be managed using log4j by leveraging maxBackupIndex UserSync TagSync XA Portal Below logs cannot be managed using log4j, hence will have to leverage logrotate [ a standard tool for log rotation in linux ] - Manage Ranger Admin access_log log file growth Access Log Or else as mentioned by @Neeraj Sabharwal you can use cron script with the find command find /var/log/ranger -mtime +30| xargs --no-run-if-empty rm ... View more

@Neeraj Sabharwal Thank you for your prompt reply. I'm happy now. ... View more

@Junichi Oda we gathered really good details in this thread. You can close this thread by accepting the best answer and let's keep eye on future release notes 😉 ... View more

@Artem Ervits Thanks to you, I could comminicate with Enis. Thank you so much. ... View more

Thank you very much for your reply and very helpful solutions. I'd rather not manage both a repository HDFS and Hive if I can avoid it. However, we manage Hadoop resources by the YARN queue assigned to each user. For this reason I would like to keep "run as end user instead of hive"(hive.server2.enable.doAs=true). ... View more

Hi @Junichi Oda, We have the same error in the Ranger log, even when the groupnames are filled: ERROR LdapUserGroupBuilder [UnixUserSyncThread] - sink.addOrUpdateUser failed with exception: org/apache/commons/httpclient/URIException, for user: userX, groups: [groupX, groupY] I have inspected the sourcecode from ranger-0.6 which is part of HDP-2.4.3.0 our current version of the stack. Interesting enough all calls to remote server inside LdapUserGroupBuilder.addOrUpdateUser(user, groups) are wrapped in a try-catch(Exception e). There is addUser, addUserGroupInfo and delXUserGroupInfo. But we don't see that in the log. The addOrUpdateUser is wrapped with try-catch(Throwable t). Looks like its an Error not an Exception! I found this RANGER-804 ticket revering to missing classes. I copied the jars in '/usr/hdp/current/ranger-usersync/lib' from another folder. The code runs but I have a Certificate PKI error at the moment because we use LDAPS, but looks like this might get you further. Greetings, Alexander ... View more

Thank you for telling me that. I'm looking forward to it. ... View more