
异常如下:
2025-10-28 03:47:16,754 [timed-executor-pool-0] WARN [SecureClientLogin.java:138] Can't find keyTab Path : null
2025-10-28 03:47:16,754 [timed-executor-pool-0] WARN [SecureClientLogin.java:143] Can't find principal : null
2025-10-28 03:47:16,759 [timed-executor-pool-0] INFO [BaseClient.java:148] Init Login: security not enabled, using username
2025-10-28 03:47:16,812 [timed-executor-pool-0] ERROR [DorisConnectionManager.java:58] Error connecting to Doris cluster: doris using config: {userstore.download.auth.users=admin, ranger.service.doris.password=plain_text_password, jdbc.url=jdbc:mysql://192.168.11.64:9030?useSSL=false, ranger.plugin.super.users=admin, service.admin.groups=public, jdbc.driver_class=com.mysql.cj.jdbc.Driver, tag.download.auth.users=admin, policy.download.auth.users=admin, password=PBEWithHmacSHA512AndAES_128,tzL1AKl5uc4NKYaoQ4P3WLGIBFPXWPWdu1fRm9004jtQiV,f77aLYLo,1000,BugNYxpLtk6nqaibLiHr/g==,+cpwr0qeoLyPlUAoVxmtPA==, service.admin.users=admin, ranger.plugin.super.groups=public, enable.hive.metastore.lookup=false, resource.lookup.timeout.value.in.ms=10000, hive.site.file.path=, username=admin}
org.apache.ranger.plugin.client.HadoopException: Unable to connect to Presto instance.
at org.apache.ranger.services.doris.client.DorisClient.initConnection(DorisClient.java:144)
at org.apache.ranger.services.doris.client.DorisClient.access$000(DorisClient.java:47)
at org.apache.ranger.services.doris.client.DorisClient$1.run(DorisClient.java:72)
at org.apache.ranger.services.doris.client.DorisClient$1.run(DorisClient.java:70)
at java.base/java.security.AccessController.doPrivileged(Native Method)
at java.base/javax.security.auth.Subject.doAs(Subject.java:361)
at org.apache.ranger.services.doris.client.DorisClient.init(DorisClient.java:70)
at org.apache.ranger.services.doris.client.DorisClient.<init>(DorisClient.java:66)
at org.apache.ranger.services.doris.client.DorisConnectionManager$1.call(DorisConnectionManager.java:52)
at org.apache.ranger.services.doris.client.DorisConnectionManager$1.call(DorisConnectionManager.java:49)
at org.apache.ranger.plugin.util.TimedEventUtil.timedTask(TimedEventUtil.java:38)
at org.apache.ranger.services.doris.client.DorisConnectionManager.getDorisConnection(DorisConnectionManager.java:56)
at org.apache.ranger.services.doris.client.DorisResourceManager.getDorisResources(DorisResourceManager.java:127)
at org.apache.ranger.services.doris.RangerServiceDoris.lookupResource(RangerServiceDoris.java:81)
at org.apache.ranger.biz.ServiceMgr$LookupCallable.actualCall(ServiceMgr.java:699)
at org.apache.ranger.biz.ServiceMgr$LookupCallable.actualCall(ServiceMgr.java:683)
at org.apache.ranger.biz.ServiceMgr$TimedCallable.call(ServiceMgr.java:662)
at java.base/java.util.concurrent.FutureTask.run(FutureTask.java:264)
at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1128)
at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:628)
at java.base/java.lang.Thread.run(Thread.java:829)
Caused by: java.sql.SQLException: Access denied for user 'admin@192.168.11.70' (using password: YES)
at com.mysql.jdbc.SQLError.createSQLException(SQLError.java:965)
at com.mysql.jdbc.MysqlIO.checkErrorPacket(MysqlIO.java:3933)
at com.mysql.jdbc.MysqlIO.checkErrorPacket(MysqlIO.java:3869)
at com.mysql.jdbc.MysqlIO.checkErrorPacket(MysqlIO.java:864)
at com.mysql.jdbc.MysqlIO.proceedHandshakeWithPluggableAuthentication(MysqlIO.java:1707)
at com.mysql.jdbc.MysqlIO.doHandshake(MysqlIO.java:1217)
at com.mysql.jdbc.ConnectionImpl.coreConnect(ConnectionImpl.java:2189)
at com.mysql.jdbc.ConnectionImpl.connectOneTryOnly(ConnectionImpl.java:2220)
at com.mysql.jdbc.ConnectionImpl.createNewIO(ConnectionImpl.java:2015)
at com.mysql.jdbc.ConnectionImpl.<init>(ConnectionImpl.java:768)
at com.mysql.jdbc.JDBC4Connection.<init>(JDBC4Connection.java:47)
at jdk.internal.reflect.GeneratedConstructorAccessor89.newInstance(Unknown Source)
at java.base/jdk.internal.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:45)
at java.base/java.lang.reflect.Constructor.newInstance(Constructor.java:490)
at com.mysql.jdbc.Util.handleNewInstance(Util.java:403)
at com.mysql.jdbc.ConnectionImpl.getInstance(ConnectionImpl.java:385)
at com.mysql.jdbc.NonRegisteringDriver.connect(NonRegisteringDriver.java:323)
at java.sql/java.sql.DriverManager.getConnection(DriverManager.java:677)
at java.sql/java.sql.DriverManager.getConnection(DriverManager.java:189)
at org.apache.ranger.services.doris.client.DorisClient.initConnection(DorisClient.java:141)
... 20 common frames omitted
2025-10-28 03:47:16,812 [timed-executor-pool-0] WARN [SecureClientLogin.java:138] Can't find keyTab Path : null
2025-10-28 03:47:16,812 [timed-executor-pool-0] WARN [SecureClientLogin.java:143] Can't find principal : null
2025-10-28 03:47:16,816 [timed-executor-pool-0] INFO [BaseClient.java:148] Init Login: security not enabled, using username
2025-10-28 03:47:16,868 [timed-executor-pool-0] ERROR [DorisConnectionManager.java:58] Error connecting to Doris cluster: doris using config: {userstore.download.auth.users=admin, ranger.service.doris.password=plain_text_password, jdbc.url=jdbc:mysql://192.168.11.64:9030?useSSL=false, ranger.plugin.super.users=admin, service.admin.groups=public, jdbc.driver_class=com.mysql.cj.jdbc.Driver, tag.download.auth.users=admin, policy.download.auth.users=admin, password=PBEWithHmacSHA512AndAES_128,tzL1AKl5uc4NKYaoQ4P3WLGIBFPXWPWdu1fRm9004jtQiV,f77aLYLo,1000,BugNYxpLtk6nqaibLiHr/g==,+cpwr0qeoLyPlUAoVxmtPA==, service.admin.users=admin, ranger.plugin.super.groups=public, enable.hive.metastore.lookup=false, resource.lookup.timeout.value.in.ms=10000, hive.site.file.path=, username=admin}
上面密码通过ranger代码是可以正常解密的:
PBEWithHmacSHA512AndAES_128,tzL1AKl5uc4NKYaoQ4P3WLGIBFPXWPWdu1fRm9004jtQiV,f77aLYLo,1000,BugNYxpLtk6nqaibLiHr/g==,+cpwr0qeoLyPlUAoVxmtPA==
可以正常解密
doris密码正确,也给该ip授权了。doris版本2.1.10, ranger编译的最新版本master分支,doris plugins如下:
ranger-doris-plugin-3.0.0-SNAPSHOT.jar
mysql-connector-java-8.0.25.jar
https://github.com/morningman/ranger/blob/doris-plugin/agents-common/src/main/resources/service-defs/ranger-servicedef-doris.json