Member since
07-05-2018
20
Posts
1
Kudos Received
2
Solutions
My Accepted Solutions
Title | Views | Posted |
---|---|---|
1924 | 01-04-2019 11:50 AM | |
1807 | 01-03-2019 06:40 AM |
01-07-2019
12:00 PM
1 Kudo
Hi @Jagadeesan A S Yes the new users has proper permission in Ranger. Have enough permission to access all database.
... View more
01-07-2019
12:00 PM
I created new users in Hue, Old users can access all the database but new users can't see any database. Below is the error log from hue error.log [06/Jan/2019 19:35:55 +0530] middleware ERROR Could not audit the request: [Errno 2] No such file or directory: '/var/local/hue/logs/audit.log'
[06/Jan/2019 19:36:19 +0530] exceptions_renderable ERROR Potential trace: [('/usr/local/hue/desktop/libs/libsolr/src/libsolr/api.py', 758, 'info_system', "response = self._root.get('admin/info/system', params=params)"), ('/usr/local/hue/desktop/core/src/desktop/lib/rest/resource.py', 126, 'get', 'return self.invoke("GET", relpath, params, headers=headers, allow_redirects=True, clear_cookies=clear_cookies)'), ('/usr/local/hue/desktop/core/src/desktop/lib/rest/resource.py', 80, 'invoke', 'log_response=log_response)'), ('/usr/local/hue/desktop/core/src/desktop/lib/rest/resource.py', 99, '_invoke', 'clear_cookies=clear_cookies)'), ('/usr/local/hue/desktop/core/src/desktop/lib/rest/http_client.py', 215, 'execute', 'raise self._exc_class(ex)')]
[06/Jan/2019 19:36:19 +0530] exceptions_renderable ERROR Potential detail: HTTPConnectionPool(host='localhost', port=8983): Max retries exceeded with url: /solr/admin/info/system?user.name=hue&doAs=anurag.srivastava&wt=json (Caused by NewConnectionError('<urllib3.connection.HTTPConnection object at 0x2aab3ef50d90>: Failed to establish a new connection: [Errno 111] Connection refused',))
[06/Jan/2019 19:36:19 +0530] exceptions_renderable ERROR Potential trace: [('/usr/local/hue/desktop/libs/indexer/src/indexer/solr_client.py', 65, 'get_indexes', 'if self.is_solr_cloud_mode():'), ('/usr/local/hue/desktop/libs/indexer/src/indexer/solr_client.py', 223, 'is_solr_cloud_mode', 'self._fillup_properties()'), ('/usr/local/hue/desktop/libs/indexer/src/indexer/solr_client.py', 322, '_fillup_properties', 'properties = self.api.info_system()'), ('/usr/local/hue/desktop/libs/libsolr/src/libsolr/api.py', 761, 'info_system', "raise PopupException(e, title=_('Error while accessing Solr'))")]
[06/Jan/2019 19:36:19 +0530] decorators ERROR Error running autocomplete
Traceback (most recent call last):
File "/usr/local/hue/desktop/libs/notebook/src/notebook/decorators.py", line 97, in decorator
return func(*args, **kwargs)
File "/usr/local/hue/desktop/libs/notebook/src/notebook/api.py", line 567, in autocomplete
autocomplete_data = get_api(request, snippet).autocomplete(snippet, database, table, column, nested)
File "/usr/local/hue/desktop/libs/notebook/src/notebook/connectors/solr.py", line 47, in decorator
raise QueryError(message)
QueryError
... View more
Labels:
- Labels:
-
Apache Hive
-
Cloudera Hue
01-04-2019
11:50 AM
The problem is resolved. We need to update one property for that ranger.usersync.policymanager.mockrun = false
... View more
01-03-2019
11:39 AM
Hi @Jay Kumar SenSharma I dont have LDAP setup and I didn't setup SSSD as well.
... View more
01-03-2019
08:04 AM
I am not able to see new users from linux into ranger ui. below is the error log of usersync.log please help to resolve this. 03 Jan 2019 12:02:15 DEBUG PolicyMgrUserGroupBuilder [UnixUserSyncThread] - GROUP: hadoop
03 Jan 2019 12:02:15 DEBUG PolicyMgrUserGroupBuilder [UnixUserSyncThread] - GROUP: users
03 Jan 2019 12:02:15 DEBUG PolicyMgrUserGroupBuilder [UnixUserSyncThread] - USER: aapuser
03 Jan 2019 12:02:15 DEBUG PolicyMgrUserGroupBuilder [UnixUserSyncThread] - GROUP: aapuser
03 Jan 2019 12:02:15 DEBUG PolicyMgrUserGroupBuilder [UnixUserSyncThread] - USER: hdfs
03 Jan 2019 12:02:15 DEBUG PolicyMgrUserGroupBuilder [UnixUserSyncThread] - GROUP: hadoop
03 Jan 2019 12:02:15 DEBUG PolicyMgrUserGroupBuilder [UnixUserSyncThread] - GROUP: hdfs
03 Jan 2019 12:02:15 DEBUG PolicyMgrUserGroupBuilder [UnixUserSyncThread] - GROUP: hue
03 Jan 2019 12:02:15 DEBUG PolicyMgrUserGroupBuilder [UnixUserSyncThread] - USER: yarn
03 Jan 2019 12:02:15 DEBUG PolicyMgrUserGroupBuilder [UnixUserSyncThread] - GROUP: hadoop
03 Jan 2019 12:02:15 DEBUG PolicyMgrUserGroupBuilder [UnixUserSyncThread] - USER: hbase
03 Jan 2019 12:02:15 DEBUG PolicyMgrUserGroupBuilder [UnixUserSyncThread] - GROUP: hadoop
03 Jan 2019 12:02:15 DEBUG PolicyMgrUserGroupBuilder [UnixUserSyncThread] - USER: rescue
03 Jan 2019 12:02:15 DEBUG PolicyMgrUserGroupBuilder [UnixUserSyncThread] - GROUP: rescue
03 Jan 2019 12:02:15 DEBUG PolicyMgrUserGroupBuilder [UnixUserSyncThread] - USER: mapred
03 Jan 2019 12:02:15 DEBUG PolicyMgrUserGroupBuilder [UnixUserSyncThread] - GROUP: hadoop
03 Jan 2019 12:02:15 DEBUG PolicyMgrUserGroupBuilder [UnixUserSyncThread] - USER: hcat
03 Jan 2019 12:02:15 DEBUG PolicyMgrUserGroupBuilder [UnixUserSyncThread] - GROUP: hadoop
03 Jan 2019 12:02:15 DEBUG PolicyMgrUserGroupBuilder [UnixUserSyncThread] - USER: systemd-bus-proxy
03 Jan 2019 12:02:15 DEBUG PolicyMgrUserGroupBuilder [UnixUserSyncThread] - GROUP: systemd-bus-proxy
03 Jan 2019 12:02:15 DEBUG PolicyMgrUserGroupBuilder [UnixUserSyncThread] - USER: amb_ranger_admin
03 Jan 2019 12:02:15 DEBUG PolicyMgrUserGroupBuilder [UnixUserSyncThread] - USER: hive
03 Jan 2019 12:02:15 DEBUG PolicyMgrUserGroupBuilder [UnixUserSyncThread] - USER: hue
03 Jan 2019 12:02:15 DEBUG PolicyMgrUserGroupBuilder [UnixUserSyncThread] - GROUP: hadoop
03 Jan 2019 12:02:15 DEBUG PolicyMgrUserGroupBuilder [UnixUserSyncThread] - GROUP: users
03 Jan 2019 12:02:15 DEBUG PolicyMgrUserGroupBuilder [UnixUserSyncThread] - USER: testuser
03 Jan 2019 12:02:15 DEBUG PolicyMgrUserGroupBuilder [UnixUserSyncThread] - GROUP: testuser
03 Jan 2019 12:02:15 WARN UnixUserGroupBuilder [UnixUserSyncThread] - DEPRECATED: Unix backend is configured to use /etc/passwd and /etc/group files directly instead of standard system mechanisms.
03 Jan 2019 12:02:15 INFO UserGroupSync [UnixUserSyncThread] - initializing source: org.apache.ranger.unixusersync.process.UnixUserGroupBuilder
03 Jan 2019 12:02:15 INFO UserGroupSync [UnixUserSyncThread] - Begin: initial load of user/group from source==>sink
03 Jan 2019 12:02:15 DEBUG PolicyMgrUserGroupBuilder [UnixUserSyncThread] - INFO: addPMAccount(testuser2)
03 Jan 2019 12:02:15 DEBUG PolicyMgrUserGroupBuilder [UnixUserSyncThread] - INFO: addPMAccount(testuser3)
03 Jan 2019 12:02:15 INFO UserGroupSync [UnixUserSyncThread] - End: initial load of user/group from source==>sink
03 Jan 2019 12:02:15 INFO UserGroupSync [UnixUserSyncThread] - Done initializing user/group source and sink
03 Jan 2019 12:02:18 INFO UnixAuthenticationService [main] - Enabling Unix Auth Service!
03 Jan 2019 12:02:19 INFO UnixAuthenticationService [main] - Enabling Protocol: [SSLv2Hello]
03 Jan 2019 12:02:19 INFO UnixAuthenticationService [main] - Enabling Protocol: [TLSv1]
03 Jan 2019 12:02:19 INFO UnixAuthenticationService [main] - Enabling Protocol: [TLSv1.1]
03 Jan 2019 12:02:19 INFO UnixAuthenticationService [main] - Enabling Protocol: [TLSv1.2]
... View more
Labels:
- Labels:
-
Apache Ranger
01-03-2019
06:40 AM
The error is solved by changing security group from aws.
... View more
01-02-2019
01:02 PM
I am facing connection issue for ranger usersync. because of that my users and groups are not able to sync in ranger. below is the error log of usersync.log 02 Jan 2019 17:54:38 DEBUG PolicyMgrUserGroupBuilder [UnixUserSyncThread] - ==> PolicyMgrUserGroupBuilder.buildGroupList
02 Jan 2019 17:56:45 ERROR UserGroupSync [UnixUserSyncThread] - Failed to initialize UserGroup source/sink. Will retry after 120000 milliseconds. Error details:
com.sun.jersey.api.client.ClientHandlerException: java.net.ConnectException: Connection timed out (Connection timed out)
at com.sun.jersey.client.urlconnection.URLConnectionClientHandler.handle(URLConnectionClientHandler.java:151)
at com.sun.jersey.api.client.filter.HTTPBasicAuthFilter.handle(HTTPBasicAuthFilter.java:104)
at com.sun.jersey.api.client.Client.handle(Client.java:648)
at com.sun.jersey.api.client.WebResource.handle(WebResource.java:680)
at com.sun.jersey.api.client.WebResource.access$200(WebResource.java:74)
at com.sun.jersey.api.client.WebResource$Builder.get(WebResource.java:507)
at org.apache.ranger.unixusersync.process.PolicyMgrUserGroupBuilder.buildGroupList(PolicyMgrUserGroupBuilder.java:522)
at org.apache.ranger.unixusersync.process.PolicyMgrUserGroupBuilder.buildUserGroupInfo(PolicyMgrUserGroupBuilder.java:201)
at org.apache.ranger.unixusersync.process.PolicyMgrUserGroupBuilder.init(PolicyMgrUserGroupBuilder.java:170)
at org.apache.ranger.usergroupsync.UserGroupSync.run(UserGroupSync.java:51)
at java.lang.Thread.run(Thread.java:745)
Caused by: java.net.ConnectException: Connection timed out (Connection timed out)
at java.net.PlainSocketImpl.socketConnect(Native Method)
at java.net.AbstractPlainSocketImpl.doConnect(AbstractPlainSocketImpl.java:350)
at java.net.AbstractPlainSocketImpl.connectToAddress(AbstractPlainSocketImpl.java:206)
at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:188)
at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392)
at java.net.Socket.connect(Socket.java:589)
at sun.security.ssl.SSLSocketImpl.connect(SSLSocketImpl.java:668)
at sun.security.ssl.BaseSSLSocketImpl.connect(BaseSSLSocketImpl.java:173)
at sun.net.NetworkClient.doConnect(NetworkClient.java:180)
at sun.net.www.http.HttpClient.openServer(HttpClient.java:432)
at sun.net.www.http.HttpClient.openServer(HttpClient.java:527)
at sun.net.www.protocol.https.HttpsClient.<init>(HttpsClient.java:264)
at sun.net.www.protocol.https.HttpsClient.New(HttpsClient.java:367)
at sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.getNewHttpClient(AbstractDelegateHttpsURLConnection.java:191)
at sun.net.www.protocol.http.HttpURLConnection.plainConnect0(HttpURLConnection.java:1138)
at sun.net.www.protocol.http.HttpURLConnection.plainConnect(HttpURLConnection.java:1032)
at sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(AbstractDelegateHttpsURLConnection.java:177)
at sun.net.www.protocol.http.HttpURLConnection.getInputStream0(HttpURLConnection.java:1546)
at sun.net.www.protocol.http.HttpURLConnection.getInputStream(HttpURLConnection.java:1474)
at java.net.HttpURLConnection.getResponseCode(HttpURLConnection.java:480)
at sun.net.www.protocol.https.HttpsURLConnectionImpl.getResponseCode(HttpsURLConnectionImpl.java:338)
at com.sun.jersey.client.urlconnection.URLConnectionClientHandler._invoke(URLConnectionClientHandler.java:249)
at com.sun.jersey.client.urlconnection.URLConnectionClientHandler.handle(URLConnectionClientHandler.java:149)
... 10 more
... View more
Labels:
- Labels:
-
Apache Ranger
01-01-2019
10:43 AM
Hi @phani prasad do you find any solution.. I am also stuck here... Please share the solution
... View more
12-28-2018
05:26 AM
Hi @Jordan Moore can you share any reference link for hue 4 deployment using puppet. it would be much helpful.
... View more
12-27-2018
10:31 AM
Hi, I am facing ssl connection error for hbase. below is the error log :- Unable to obtain keystore from file [/usr/hdp/current/hbase-client/conf/ranger-plugin-keystore.jks] need help to solve this.
... View more
Labels:
- Labels:
-
Apache HBase
-
Apache Ranger
12-11-2018
05:45 AM
Thank you for the reply. I will try this
... View more
12-07-2018
11:16 AM
Actually I have certificate available so i used below command. keytool -importkeystore -srckeystore certificate.p12 -destkeystore /etc/ranger/admin/conf/ranger-plugin-keystore.jks -deststoretype pkcs12 -alias rangerHdfsAgent Then that error comes
... View more
12-07-2018
10:49 AM
hi @Pravin Bhagade Even HDFS UI is not accessible. When I am trying to configure ranger hdfs and yarn plugin, using the link you have provided. after hitting below command keytool -genkey -keyalg RSA -alias rangerHdfsAgent -keystore ranger-plugin-keystore.jks -storepass myKeyFilePassword -validity 360 -keysize 2048 the error is Alias rangerHdfsAgent name is not available.
... View more
12-06-2018
07:07 AM
I have configured SSL with Ranger. Now ranger is started perfectly, but my resource manager UI is not reachable.. Belo is the error from /var/log/hadoop-yarn/yarn/yarn-yarn-resourcemanager-master1.log ERROR util.PolicyRefresher (PolicyRefresher.java:loadPolicyfromPolicyAdmin(288)) - PolicyRefresher(serviceName=Prod_yarn): failed to refresh policies. Will continue to use last known version of policies (24)
... View more
Labels:
- Labels:
-
Apache Ranger
-
Apache YARN
07-05-2018
12:15 PM
Yes, below is the error org.apache.kafka.common.errors.IllegalSaslStateException: Unexpected handshake request with client mechanism PLAIN, enabled mechanisms are [PLAIN]
... View more
07-05-2018
09:43 AM
@Sandeep Nemuri We have apache cluster, i have provided authorization and authentication on port 9092, and plaintext on port 9093. Consumer gets message from port 9092 but not able to get message from 9093. Please suggest something.
... View more
07-05-2018
08:26 AM
I have Apache Kafka Cluster, consumer, producer and topic are created. can I use security protocols like PLAINTEXT and SASL_PLAINTEXT at the same time
... View more
Labels:
- Labels:
-
Apache Kafka