policycache/hiveserver2_hive-tdp.json not created

[hamdiazz]

Hive is deployed, but i had the issue below in hiveserver2.err:

2024-08-13 17:55:49,179 ERROR util.PolicyRefresher: failed to save policies to cache file '/etc/ranger/hive-tdp/policycache/hiveServer2_hive-tdp.json'
java.io.FileNotFoundException: /etc/ranger/hive-tdp/policycache/hiveServer2_hive-tdp.json (Permission non accordée)

The directory /etc/ranger/hive-tdp/policycache is created with theses access:

drwxr-xr-x 2 root root   6 19 août  11:18 policycache

With "hive" as user, it works !

[hamdiazz]

The same issue with yarn

`/opt/tdp/ranger-yarn-plugin/enable-yarn-plugin.sh
Custom user is available, using custom user and default group.

• mar. mars 25 15:25:26 CET 2025 : yarn: lib folder=/opt/tdp/hadoop/share/hadoop/hdfs/lib conf folder=/opt/tdp/hadoop/etc/hadoop
  chown: groupe incorrect: « yarn:yarn »
  chown: groupe incorrect: « yarn:yarn »
  chown: groupe incorrect: « yarn:yarn »
  chown: groupe incorrect: « yarn:yarn »
  chown: groupe incorrect: « yarn:yarn »
• mar. mars 25 15:25:26 CET 2025 : Saving current config file: /opt/tdp/hadoop/etc/hadoop/ranger-policymgr-ssl.xml to /opt/tdp/hadoop/etc/hadoop/.ranger-policymgr-ssl.xml.20250325-152526 ...
• mar. mars 25 15:25:26 CET 2025 : Saving current config file: /opt/tdp/hadoop/etc/hadoop/ranger-yarn-audit.xml to /opt/tdp/hadoop/etc/hadoop/.ranger-yarn-audit.xml.20250325-152526 ...
• mar. mars 25 15:25:27 CET 2025 : Saving current config file: /opt/tdp/hadoop/etc/hadoop/ranger-yarn-security.xml to /opt/tdp/hadoop/etc/hadoop/.ranger-yarn-security.xml.20250325-152526 ...
• mar. mars 25 15:25:27 CET 2025 : Saving current config file: /opt/tdp/hadoop/etc/hadoop/yarn-site.xml to /opt/tdp/hadoop/etc/hadoop/.yarn-site.xml.20250325-152526 ...
• mar. mars 25 15:25:27 CET 2025 : Saving lib file: /opt/tdp/hadoop/share/hadoop/hdfs/lib/ranger-plugin-classloader-2.0.0-1.0.jar to /opt/tdp/hadoop/share/hadoop/hdfs/lib/.ranger-plugin-classloader-2.0.0-1.0.jar.20250325152527 ...
• mar. mars 25 15:25:27 CET 2025 : Saving lib file: /opt/tdp/hadoop/share/hadoop/hdfs/lib/ranger-yarn-plugin-impl to /opt/tdp/hadoop/share/hadoop/hdfs/lib/.ranger-yarn-plugin-impl.20250325152527 ...
• mar. mars 25 15:25:27 CET 2025 : Saving lib file: /opt/tdp/hadoop/share/hadoop/hdfs/lib/ranger-yarn-plugin-shim-2.0.0-1.0.jar to /opt/tdp/hadoop/share/hadoop/hdfs/lib/.ranger-yarn-plugin-shim-2.0.0-1.0.jar.20250325152527 ...
• mar. mars 25 15:25:27 CET 2025 : Saving current JCE file: /etc/ranger/yarn-tdp/cred.jceks to /etc/ranger/yarn-tdp/.cred.jceks.20250325152527 ...
• mar. mars 25 15:25:28 CET 2025 : Saving current JCE file: /etc/ranger/yarn-tdp/cred.jceks to /etc/ranger/yarn-tdp/.cred.jceks.20250325152528 ...
  chown: groupe incorrect: « yarn:yarn »
  Ranger Plugin for yarn has been enabled. Please restart yarn to ensure that changes are effective.
  [root@1006:]#
  [root@1006:]# id -Gn hive
  gu-bdm-bdp
  [root@P1006:]# id -Gn yarn
  gu-bdm-bdp
  [root@1006:]# getent group yarn
  [root@P1006:~]# id -Gn yarn
  gu-bdm-bdp`

the group yarn does'nt exist

So the directory si created with root:root :
ll /etc/ranger/yarn-tdp/ total 4 -rw-r--r-- 1 root root 966 24 mars 11:10 cred.jceks drwxr-xr-x 2 **root** **root** 6 24 mars 11:10 policycache