Trino version 467 Apache Ranger Plugin and warnings & errors seen in Server.log ? Are these normal or some issues with config ?

[sanjay92gupta]

Following errors are in server.log after I enable Apache Ranger Plugin
Any idea whether this is normal or issues with configuration.
I see Trino Server was started though

2024-12-16T22:16:44.229Z        INFO    main    Bootstrap       ranger.plugin.config.resource  []       [etc/ranger-trino-security.xml, etc/ranger-trino-audit.xml]  List of paths to Ranger plugin configuration files
2024-12-16T22:16:44.229Z        INFO    main    Bootstrap       ranger.service.name            ----     trino                                                        Name of Ranger service containing policies to enforce
2024-12-16T22:16:44.532Z        ERROR   main    org.apache.ranger.authorization.hadoop.config.RangerConfiguration       addResourceIfReadable(ranger-trino-audit.xml): couldn't find resource file location
2024-12-16T22:16:44.534Z        ERROR   main    org.apache.ranger.authorization.hadoop.config.RangerConfiguration       addResourceIfReadable(ranger-trino-security.xml): couldn't find resource file location
2024-12-16T22:16:44.534Z        ERROR   main    org.apache.ranger.authorization.hadoop.config.RangerConfiguration       addResourceIfReadable(ranger-trino-policymgr-ssl.xml): couldn't find resource file location
2024-12-16T22:16:44.535Z        ERROR   main    org.apache.ranger.authorization.hadoop.config.RangerConfiguration       addResourceIfReadable(ranger-trino-trino-audit.xml): couldn't find resource file location
2024-12-16T22:16:44.535Z        ERROR   main    org.apache.ranger.authorization.hadoop.config.RangerConfiguration       addResourceIfReadable(ranger-trino-trino-security.xml): couldn't find resource file location
2024-12-16T22:16:44.535Z        ERROR   main    org.apache.ranger.authorization.hadoop.config.RangerConfiguration       addResourceIfReadable(ranger-trino-trino-policymgr-ssl.xml): couldn't find resource file location
2024-12-16T22:16:44.537Z        INFO    main    org.apache.ranger.authorization.hadoop.config.RangerPluginConfig       

2024-12-16T22:16:45.485Z        WARN    main    org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator      initScriptEngineCreator(): failed to instantiate engine creator org.apache.ranger.plugin.util.NashornScriptEngineCreator
java.lang.NoClassDefFoundError: jdk/nashorn/api/scripting/ClassFilter
        at java.base/java.lang.Class.forName0(Native Method)
        at java.base/java.lang.Class.forName(Class.java:462)
        at java.base/java.lang.Class.forName(Class.java:453)
        at org.apache.ranger.plugin.util.ScriptEngineUtil.initScriptEngineCreator(ScriptEngineUtil.java:107)
        at org.apache.ranger.plugin.util.ScriptEngineUtil.getScriptEngineCreator(ScriptEngineUtil.java:87)
        at org.apache.ranger.plugin.util.ScriptEngineUtil.createScriptEngine(ScriptEngineUtil.java:52)
        at org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator.init(RangerScriptConditionEvaluator.java:73)
        at org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator.init(RangerScriptTemplateConditionEvaluator.java:41)
        at org.apache.ranger.plugin.policyevaluator.RangerCustomConditionEvaluator.getConditionEvaluator(RangerCustomConditionEvaluator.java:131)
        at org.apache.ranger.plugin.policyevaluator.RangerCustomConditionEvaluator.getConditionEvaluators(RangerCustomConditionEvaluator.java:101)
        at org.apache.ranger.plugin.policyevaluator.RangerCustomConditionEvaluator.getPolicyItemConditionEvaluators(RangerCustomConditionEvaluator.java:79)
        at org.apache.ranger.plugin.policyevaluator.RangerDefaultPolicyItemEvaluator.init(RangerDefaultPolicyItemEvaluator.java:63)
        at org.apache.ranger.plugin.policyevaluator.RangerDefaultPolicyEvaluator.createPolicyItemEvaluators(RangerDefaultPolicyEvaluator.java:1229)
        at org.apache.ranger.plugin.policyevaluator.RangerDefaultPolicyEvaluator.init(RangerDefaultPolicyEvaluator.java:138)

[ebyhr]

cc: @kokosing @mneethiraj

[mneethiraj]

@sanjay92gupta - these WARN logs can be ignored. These warning do not cause any failure or loss of functionality. These messages logged with Ranger plugin fail loading few JDK classes (which are not available since JDK15). In such cases, Ranger plugin uses corresponding implementations in later JDK version. I will file an Apache Ranger JIRA to track update of Apache Ranger libraries to remove these warning logs.

[viethqb]

@sanjay92gupta I also have the same warning, besides I can't send audit logs to ES. I workaround by editing the ranger libraries org.apache.ranger_ranger-plugins-common-2.5.0.jar and org.apache.ranger_ranger-plugins-audit-2.5.0.jar => I push audit logs to opensearch. You can refer here: https://github.com/viethqb/trino-ranger-access-control-poc/

[gagan211]

@mneethiraj what about the error log that are present ? as i am facing the same errors when i am using the apache doris connector.