Acceldata
ODP

RangerKMS

Update the RangerKMS Java 17 flags as shown below.

Advanced kms-env -> kms-env

File location: Log into the Ambari UI → Oozie → Configs → Advanced kms-env -> kms-env.

#!/bin/bash
# Licensed to the Apache Software Foundation (ASF) under one
# or more contributor license agreements. See the NOTICE file
# distributed with this work for additional information
# regarding copyright ownership. The ASF licenses this file
# to you under the Apache License, Version 2.0 (the
# "License"); you may not use this file except in compliance
# with the License. You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
# Set Ranger KMS specific environment variables here.
export JAVA_HOME={{java_home}}
export RANGER_KMS_LOG_DIR={{kms_log_dir}}
export RANGER_KMS_PID_DIR_PATH={{ranger_kms_pid_dir}}
export KMS_USER={{kms_user}}
export RANGER_HADOOP_CONF_DIR="{{hadoop_conf_dir}}/*"
export RANGER_HADOOP_LIB_DIR="{{hadoop_hdfs_dir}}/*:{{hadoop_hdfs_lib_dir}}"
ranger_kms_max_heap_size={{ranger_kms_max_heap_size}}
JAVA_BIN="$JAVA_HOME/bin/java"
JAVA_VERSION=$($JAVA_BIN -version 2>&1 | awk -F[\".] '/version/ {print $2}')
{% if security_enabled %}
export JAVA_OPTS="${JAVA_OPTS} -Dzookeeper.sasl.client.username={{zookeeper_principal_primary}}"
{% endif %}
if [ "$JAVA_VERSION" -gt 11 ]; then
JAVA_OPTS="${JAVA_OPTS} {{jvm_flags}}"
fi

Custom kms-site -> jvm_flags

File location: Log into the Ambari UI → Oozie → Configs → Custom kms-site -> jvm_flags.

--add-exports java.xml.crypto/com.sun.org.apache.xml.internal.security.utils=ALL-UNNAMED