RE: Ranger KMS - hdfs user not allowed to do 'GENERATE_EEK' on 'hive'

2017-05-22 Thread Dale Bradman
This looks to be a Ranger UI issue because I have been able to update my KMS policy successfully using the API. But I still am not sure if it is safe to allow the hdfs user the rights to “GENERATE_EEK” on my key? Thanks. Dale From: Dale Bradman [mailto:da...@profusion.com] Sent: 19 May 2017

Connection failed to KMS Service

2017-05-22 Thread Dale Bradman
Hi, I'm unable to connect to my KMS service since upgrading from HDP 2.4.2 to HDP 2.5.3. I haven't drastically changed any configurations since the upgrade however when I click "Test Connection" this error message appears: --> Connection Failed. Unable to retrieve any files using given paramet

HDFS policy not working

2017-05-22 Thread Dale Bradman
Hi, I'm facing a few issues with Ranger since I upgraded the cluster from HDP 2.4.2 to HDP 2.5.3. My HDFS policy is no longer connecting however no error message appears on the Ranger Admin UI. I also can't see anything useful in the log files xa_portal.log, acces_log.log or catalina.out. 1

RE: Ranger KMS - hdfs user not allowed to do 'GENERATE_EEK' on 'hive'

2017-05-19 Thread Dale Bradman
using-r.html> How to correctly setup the HDFS encryption using Ranger KMS - Hortonworks Sreeni On Friday, May 19, 2017 5:49 AM, Dale Bradman mailto:da...@profusion.com>> wrote: Hello. I've recently upgraded the cluster to HDP 2.5.3 as well as Ambari to 2.4.2.0 however I'

Ranger KMS - hdfs user not allowed to do 'GENERATE_EEK' on 'hive'

2017-05-19 Thread Dale Bradman
Hello. I've recently upgraded the cluster to HDP 2.5.3 as well as Ambari to 2.4.2.0 however I'm now facing problems running Hive queries. Each query that invokes Tez (i.e. `insert`) results in the following error: Caused by: org.apache.hadoop.hive.ql.metadata.HiveException: org.apache.hadoop.i