RANGER-4179: Running dba_script.py fails because the useSSL flag was not explicitly set when installing Ranger.

[dev-bearabbit]

Running dba_script.py fails because the useSSL flag was not explicitly set when installing Ranger 2.4.0.

I found a similar issue to this, but it doesn't seem to be resolved.  (https://issues.apache.org/jira/browse/RANGER-3880)

The fail log is below.

2023-04-10 03:14:15,379  [JISQL] /usr/lib/jvm/java-openjdk/bin/java  -cp /opt/mysql-connector-java.jar:/opt/ranger_admin/jisql/lib/* org.apache.util.sql.Jisql -driver mysqlconj -cstring jdbc:mysql://localhost/mysql -u admin -p '********' -noheader -trim -c \; -query "SELECT version();"
Mon Apr 10 03:14:15 UTC 2023 WARN: Establishing SSL connection without server's identity verification is not recommended. According to MySQL 5.5.45+, 5.6.26+ and 5.7.6+ requirements SSL connection must be established by default if explicit option isn't set. For compliance with existing applications not using SSL the verifyServerCertificate property is set to 'false'. You need either to explicitly disable SSL by setting useSSL=false, or set useSSL=true and provide truststore for server certificate verification.
SQLException : SQL state: 08S01 com.mysql.jdbc.exceptions.jdbc4.CommunicationsException: Communications link failure 

I think JDBC connector url has to be included "useSSL" flag like this.

2023-04-10 03:14:15,379  [JISQL] /usr/lib/jvm/java-openjdk/bin/java  -cp /opt/mysql-connector-java.jar:/opt/ranger_admin/jisql/lib/* org.apache.util.sql.Jisql -driver mysqlconj -cstring jdbc:mysql://localhost/mysql?useSSL=false -u admin -p '********' -noheader -trim -c \; -query "SELECT version();" 

So, I just modified dba_script.py a little bit for use. (ranger/security-admin/scripts/dba_script.py)

class MysqlConf(BaseDB):
    def get_jisql_cmd(self, user, password ,db_name):
       path = RANGER_ADMIN_HOME	
       db_ssl_param='?useSSL=false'	# default value changed	
       db_ssl_cert_param='' 

In my case, it works after modification. Thank you :)

[ramackri]

As part of this PR:https://github.com/apache/ranger/pull/173 This issue got addressed and it seems needs to be fixed for newer MySQL versions. @mneethiraj

[mneethiraj]

@dev-bearabbit, @ramackri - wasn't this issue addressed in https://issues.apache.org/jira/browse/RANGER-3647? https://github.com/apache/ranger/commit/d2b0d3aa4b68dd8c8145b79020a2f54b79fad295#diff-471ec769ea0201d4cf591a0e7728089764bb1d84b448e7cece55c4a3a9df15edR851

[ramackri]

@mneethiraj Somehow we missed to make change in the below files that got addressed part of this PR:https://github.com/apache/ranger/pull/173 kms/scripts/dba_script.py security-admin/scripts/dba_script.py