RE: Ranger KMS - hdfs user not allowed to do 'GENERATE_EEK' on 'hive'

2017-05-22 Thread Dale Bradman
This looks to be a Ranger UI issue because I have been able to update my KMS policy successfully using the API. But I still am not sure if it is safe to allow the hdfs user the rights to “GENERATE_EEK” on my key? Thanks. Dale From: Dale Bradman [mailto:da...@profusion.com] Sent: 19 May 2017

Any doc to set up kerberos authentication for 0.7.x?

2017-05-22 Thread J Danwmal
Hello, 1 - I am trying to set up Ranger Admin and Ranger KMS but I am unable to find proper documentation to configure kerberos. Is there any documentation available for version 0.7.x? 2 - Also I was unable to find a download ling for the different components as it is available for previous

Connection failed to KMS Service

2017-05-22 Thread Dale Bradman
Hi, I'm unable to connect to my KMS service since upgrading from HDP 2.4.2 to HDP 2.5.3. I haven't drastically changed any configurations since the upgrade however when I click "Test Connection" this error message appears: --> Connection Failed. Unable to retrieve any files using given

HDFS policy not working

2017-05-22 Thread Dale Bradman
Hi, I'm facing a few issues with Ranger since I upgraded the cluster from HDP 2.4.2 to HDP 2.5.3. My HDFS policy is no longer connecting however no error message appears on the Ranger Admin UI. I also can't see anything useful in the log files xa_portal.log, acces_log.log or catalina.out.