ambari安装Ranger启动遇到的异常

启动Ranger KMS Server时报错：

WARNING: Failed to scan [file:/usr/jdk64/jdk1.8.0_131/lib/rt.jar] from classloader hierarchy
java.io.FileNotFoundException: /usr/jdk64/jdk1.8.0_131/lib/rt.jar (No such file or directory)

解决方法：在系统JDK环境找到 /usr/jdk64/jdk1.8.0_131/jre/lib/rt.jar 拷贝至 /usr/jdk64/jdk1.8.0_131/lib/

Thu Aug 02 17:41:47 CST 2018 WARN: Establishing SSL connection without server’s identity verification is not recommended. According to MySQL 5.5.45+, 5.6.26+ and 5.7.6+ requirements SSL connection must be established by default if explicit option isn’t set. For compliance with existing applications not using SSL the verifyServerCertificate property is set to ‘false’. You need either to explicitly disable SSL by setting useSSL=false, or set useSSL=true and provide truststore for server certificate verification.
Thu Aug 02 17:41:47 CST 2018 WARN: Establishing SSL connection without server’s identity verification is not recommended. According to MySQL 5.5.45+, 5.6.26+ and 5.7.6+ requirements SSL connection must be established by default if explicit option isn’t set. For compliance with existing applications not using SSL the verifyServerCertificate property is set to ‘false’. You need either to explicitly disable SSL by setting useSSL=false, or set useSSL=true and provide truststore for server certificate verification.

解决方法：
1.在MySQL配置文件中加入两行配置：

sql_mode=STRICT_TRANS_TABLES,ERROR_FOR_DIVISION_BY_ZERO,NO_AUTO_CREATE_USER,NO_ENGINE_SUBSTITUTIO skip_ssl12

2.JDBC connect string配置加上?useSSL=false：
jdbc:mysql://node3.domain/rangerkms?useSSL=false

解决方法：
替换{jdk_home}/jre/lib/security 目录下(Ambari使用的JDK)
local_policy.jar 和 US_export_policy.jar两个文件即可
jar包下载地址：

JDK6 http://www.oracle.com/technetwork/java/javase/downloads/jce-6-download-429243.html
JDK7 http://www.oracle.com/technetwork/java/javase/downloads/jce-7-download-432124.html
JDK8 http://www.oracle.com/technetwork/java/javase/downloads/jce8-download-2133166.html
问题解决之后，启动ranger成功：